EUVD-2026-107369

Electron: Extension tabs.query returns tab URLs and titles without the tabs permission...

SUSE CVE-2026-113797

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query returned each tab's url and title to extensions that had neither the tabs permission nor matching host...

CVE-2026-113797

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query returned each tab's url and title to extensions that had neither the tabs permission nor matching host...

CVE-2026-113797

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query returned each tab's url and title to extensions that had neither the tabs permission nor matching host...

CVE-2026-113797 Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query returned each tab's url and title to extensions that had neither the tabs permission nor matching host...

CVE-2026-113797

The Electron framework, prior to versions 42.11.1 , 43.5.1 , 44.1.1 , and 45.0.0-alpha.4 , contains a vulnerability where the chrome.tabs.query() function returns the URL and title of every tab to extensions lacking the tabs permission or matching host permissions. This allows an untrusted extens...

CVE-2026-113797 Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query returned each tab's url and title to extensions that had neither the tabs permission nor matching host...

CVE-2026-113797 Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query returned each tab's url and title to extensions that had neither the tabs permission nor matching host...

PT-2026-120673

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.11.1 Electron versions prior to 43.5.1 Electron versions prior to 44.1.1 Electron versions prior to 45.0.0-alpha.4 Description The chrome.tabs.query function returns the URL and title of each tab to extensions tha...

Electron Authorization Issues Vulnerability

Versions of Electron prior to 42.11.1, 43.0.0-alpha.1 through 43.5.1, 44.0.0-alpha.1 through 44.1.1, and 45.0.0-alpha.1 through 45.0.0-alpha.4 have an authorization issue. This issue stems from improper permission checks for the chrome.tabs.query function. It allows extensions that lack both tabs...