2359 matches found
electron29 -- setuid() does not affect libuv's internal io_uring
Electron developers report: This update fixes the following vulnerability: Backported fix for CVE-2024-22017...
electron29 -- multiple vulnerabilities
Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-3914. Security: backported fix for CVE-2024-4558...
electron29 -- multiple vulnerabilities
Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-4060. Security: backported fix for CVE-2024-4058...
FreeBSD : electron{27,28,29} -- multiple vulnerabilities (f90bf863-e43c-4db3-b5a8-d9603684657a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f90bf863-e43c-4db3-b5a8-d9603684657a advisory. - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large fram...
electron{27,28,29} -- multiple vulnerabilities
Electron develpers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-3515. Security: backported fix for CVE-2024-3516. Security: backported fix for CVE-2024-3157. Security: backported fix for CVE-2024-1580...
FreeBSD : electron{27,28} -- Out of bounds memory access in V8 (31617e47-7eec-4c60-9fdf-8aee61622bab)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 31617e47-7eec-4c60-9fdf-8aee61622bab advisory. - Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker ...
electron{27,28} -- Out of bounds memory access in V8
Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2024-3159...
Malicious code in lodash-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8bd312773fbb24be9c3b0b0f20151edfa60314696b7db82861805252d9fc24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1201 Malicious code in lodash-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8bd312773fbb24be9c3b0b0f20151edfa60314696b7db82861805252d9fc24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
electron{27,28} -- multiple vulnerabilities
Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-2885. Security: backported fix for CVE-2024-2883. Security: backported fix for CVE-2024-2887. Security: backported fix for CVE-2024-2886...
FreeBSD : electron{27,28} -- Object lifecycle issue in V8 (bdcd041e-5811-4da3-9243-573a9890fdb1)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bdcd041e-5811-4da3-9243-573a9890fdb1 advisory. - Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...
GHSA-34H3-8MW4-QW57 @electron/packager's build process memory potentially leaked into final executable
Impact A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This memory could contain sensitive information such as environment variables, secrets files, etc. Patches This issue is patched in 18.3.1 Workarounds No...
CVE-2024-29900
Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...
CVE-2024-29900 @electron/packager's build process memory potentially leaked into final executable
Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...
CVE-2024-29900 @electron/packager's build process memory potentially leaked into final executable
Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...
CVE-2024-29900 @electron/packager's build process memory potentially leaked into final executable
Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...
CVE-2024-29900
The CVE-2024-29900 entry concerns the Electron Packager project. Affected component: the bundling/packaging process used to create distributable Electron apps, specifically within @electron/packager. Root cause: a memory leak where a random segment of ~1–10 kB of Node.js heap memory allocated on ...
Electron Packager 安全漏洞
Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and enables the writing of cross-platform desktop applications using HTML and CSS. A security vulnerability exists in Electron Packager versio...
PT-2024-23121 · Unknown · Electron Packager
Name of the Vulnerable Software and Affected Versions: Electron Packager versions prior to 18.3.1 Description: A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This memory could contain sensitive information such a...