CVE-2026-114121

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...

CVE-2026-114121 Electron: openExternal permission requests can be attributed to the wrong origin

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...

EUVD-2026-107361

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...

CVE-2026-114121

The Electron framework (prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 ) contains a vulnerability where requests to open external protocol URLs can be attributed to the wrong origin. This Origin Validation Error (CWE-346) occurs because the requestingUrl passed to session.setPermis...

CVE-2026-114121 Electron: openExternal permission requests can be attributed to the wrong origin

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...