3288 matches found
@ftnk/electron-prebuilt-compile (1.7.3), downloadbycurl (1.0.0) +6 more potentially affected by CVE-2017-1000424 via electron (>=1.7.0, <=1.7.5)
electron NPM version =1.7.0, =1.7.0, =1.0.0, =0.0.1, =1.1.2, =1.3.2 Source cves: CVE-2017-1000424 Source advisory: OSV:GHSA-6H98-CF9G-VMG2...
GHSA-6H98-CF9G-VMG2 Electron vulnerable to URL spoofing via PDFium
Electron version 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...
Lazarus is back, targeting organizations with cryptocurrency thefts via TraderTraitor malware
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here The Federal Bureau of Investigation FBI, the Cybersecurity and Infrastructure Security Agency CISA, and the U.S. Treasury Department Treasury have issued a joint Cybersecurity AdvisoryCSA to make organizations in the blockchai...
Privilege Escalation
electron is vulnerable to privilege escalation. An attacker can obtain access to a bluetooth device via the web bluetooth API if the application has not configured a custom select-bluetooth-device event handler...
Renderers can obtain access to random bluetooth device without permission in Electron
Impact This vulnerability allows renderers to obtain access to a random bluetooth device via the web bluetooth API if the app has not configured a custom select-bluetooth-device event handler. The device that is accessed is random and the attacker would have no way of selecting a specific device...
@bbc/a11y (>=3.0.0-canary.1, <=3.0.0), @domoskanonos/nidoca-pwa (>=1.0.1, <=1.0.2) +11 more potentially affected by CVE-2022-21718 via electron (>=13.0.1, <=13.6.2)
electron NPM version =13.0.1, =3.0.0-canary.1, =1.0.1, =6.1.0-beta.20210707, =0.26.3, =0.0.8, =0.0.1, =3.0.2, =1.3.17, =0.0.7, =13.0.0, =2.0.29, =3.11.4, =5.4.2 - simple-git-gui 3.7.14 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...
@lanehub/app-plugin (>=1.0.0, <=1.0.87), @lanehub/biz-component (>=1.0.21, <=1.0.112) +9 more potentially affected by CVE-2022-21718 via electron (>=14.0.0, <=14.2.3)
electron NPM version =14.0.0, =1.0.0, =1.0.21, =1.0.19, =0.6.4, =0.7.0, =0.1.0-alpha.0, =2.0.48, =3.7.30, =3.8.0 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...
@manniwatch/client-desktop (>=0.28.0, <=0.28.1), @yeti-dev/electroshot (>=1.4.3, <=1.4.6) +5 more potentially affected by CVE-2022-21718 via electron (>=15.0.0, <=15.3.2)
electron NPM version =15.0.0, =0.28.0, =1.4.3, =1.0.0, =2.0.53, =6.0.15, =6.1.2 - simple-git-gui 3.8.2 - xyz-ttooc-log-electron-windows 0.1.5 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...
niconizer (>=2.0.56, <=2.0.60) potentially affected by CVE-2022-21718 via electron (>=16.0.2, <=16.0.5)
electron NPM version =16.0.2, =2.0.56, =2.0.60 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...
GHSA-3P22-GHQ8-V749 Renderers can obtain access to random bluetooth device without permission in Electron
Impact This vulnerability allows renderers to obtain access to a random bluetooth device via the web bluetooth API if the app has not configured a custom select-bluetooth-device event handler. The device that is accessed is random and the attacker would have no way of selecting a specific device...
Internet Bug Bounty: Renderers can obtain access to random bluetooth device without permission
With the default configuration in Electron, renderer processes which should not have access to system resources by default can gain read/write access to a nearby bluetooth device. To reproduce: Run the electron-quick-start app with a vulnerable version of Electron:...
CVE-2022-21718
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 17.0.0-alpha.6, 16.0.6, 15.3.5, 14.2.4, and 13.6.6 allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not...
Design/Logic Flaw
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 17.0.0-alpha.6, 16.0.6, 15.3.5, 14.2.4, and 13.6.6 allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not...
CVE-2022-21718
CVE-2022-21718 affects Electron. Affected versions (< 17.0.0-alpha.6, < 16.0.6, < 15.3.5, < 14.2.4,
CVE-2022-21718
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to "17.0.0-alpha.6", "16.0.6", "15.3.5", "14.2.4", and "13.6.6" allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app ha...
CVE-2022-21718 Renderers can obtain access to random bluetooth device without permission in Electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 17.0.0-alpha.6, 16.0.6, 15.3.5, 14.2.4, and 13.6.6 allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not...
CVE-2022-21718 Renderers can obtain access to random bluetooth device without permission in Electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 17.0.0-alpha.6, 16.0.6, 15.3.5, 14.2.4, and 13.6.6 allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not...
PT-2022-15061 · Electron · Electron
Name of the Vulnerable Software and Affected Versions: Electron versions prior to 17.0.0-alpha.6 Electron versions prior to 16.0.6 Electron versions prior to 15.3.5 Electron versions prior to 14.2.4 Electron versions prior to 13.6.6 Description: A vulnerability in Electron allows renderers to...
Electron 安全漏洞
Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML and CSS. A security vulnerability exists in Electron, which allows the...
CVE-2022-21718: Exposure of Resource to Wrong Sphere
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 17.0.0-alpha.6, 16.0.6, 15.3.5, 14.2.4, and 13.6.6 allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not...