Lucene search
GoogleOSV:CVE-2020-4076HistoryJul 07, 2020 - 12:15 a.m.
CVE-2020-4076
2020-07-0700:15:10
Google
osv.dev
8
In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using contextIsolation are affected. This is fixed in versions 9.0.0-beta.21, 8.2.4 and 7.2.4.
Related
prion
prion
Design/Logic Flaw
2020-07-07 00:15:00
veracode
veracode
Authorization Bypass
2020-07-08 06:38:51
cvelist
cvelist
osv
osv
Context isolation bypass via leaked cross-context objects in Electron
2020-07-07 00:01:07
cve
cve
CVE-2020-4076
2020-07-07 00:15:10
nvd
nvd
CVE-2020-4076
2020-07-07 00:15:10
github
github
Context isolation bypass via leaked cross-context objects in Electron
2020-07-07 00:01:07