CVE-2026-34769

A flaw was found in Electron, a framework for building desktop applications. This vulnerability arises from an undocumented commandLineSwitches webPreference that allows arbitrary command-line switches to be appended to the renderer process. A remote attacker could exploit this by providing...

CVE-2026-34769 Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Ap...

CVE-2026-34769 Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Ap...

Hidden Functionality

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Hidden Functionality via the commandLineSwitches webPreference. An attacker can inject arbitrary command-li...

Hidden Functionality

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Hidden Functionality via the commandLineSwitches webPreference. An attacker can inject arbitrary command-line switches into...

Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Impact An undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Apps that construct webPreferences by spreading untrusted configuration objects may inadvertently allow an attacker to inject switches that disable renderer...

Citrix Workspace App fails to install when a later version is present on the system

The customer had upgraded Citrix Workspace App for Windows to the latest release. Afterwards it was decided to install an older LTSR release of Citrix Workspace App for Windows. Attempting to install the older version of Citrix Workspace App over the latest release of Citrix Workspace App failed...

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform INTRODUCTION Microsoft has released security bulletin MS07-052. The security bulletin contains all the relevant information about the security update. This information includes file manifes...

MS12-016: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: February 14, 2012

MS12-016: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: February 14, 2012 Microsoft has released security bulletin MS12-016. You can view the complete security bulletin by visiting one of the...

MS15-048: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: May 12, 2015

MS15-048: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET...

MS14-046: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 12, 2014

MS14-046: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 12, 2014 View products that this article applies to.This update resolves a vulnerability in the Microsoft .NET Framework that could bypass the...

MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014

MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege if a user goes to a specially...

MS14-009: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: February 11, 2014

MS14-009: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevatio...

MS13-052: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: July 9, 2013

MS13-052: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: July 9, 2013 View products that this article applies to. August 13, 2013 This security update has been re-released and contains updated...

MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: February 11, 2014

MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege if a user goes to a specially...

MS14-053: Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 9, 2014

MS14-053: Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 9, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET...

MS14-026: Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 for systems that have update 2919355 installed: May 13, 2014

MS14-026: Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 for systems that have update 2919355 installed: May 13, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the...

MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013

MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013 View products that this article applies to. August 13, 2013 This security update has been re-released and contains updated files. We recommend that you apply this updated...

MS15-048: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: May 12, 2015

MS15-048: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These vulnerabilities could allow elevation of...