CVE-2026-34778 Electron: Service worker can spoof executeJavaScript IPC replies

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, a service worker running in a session could spoof reply messages on the internal IPC channel used by webContents.executeJavaScript and...

PT-2022-33336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.19.4 Description The issue is related to the ASoC SOF Intel cnl component, where IPC replies are processed before firmware boot. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2025-25941

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the Linux kernel within the sound/soc/sof/intel/hda-ipc.c module. The issue occurs when the system processes an IPC reply message before receiving a ...