CVE-2026-34771

A flaw was found in Electron, a framework for building desktop applications. This vulnerability, known as a use-after-free, occurs when an application registers an asynchronous permission request handler and a frame navigates or a window closes while the handler is pending. A remote attacker coul...

CVE-2026-34771

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that register an asynchronous session.setPermissionRequestHandler may be vulnerable to a use-after-free when handling fullscree...

PT-2026-30001

Name of the Vulnerable Software and Affected Versions Electron versions prior to 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8 Description Applications using an asynchronous session.setPermissionRequestHandler may experience a use-after-free issue when handling fullscreen, pointer-lock, or...