Linux Distros Unpatched Vulnerability : CVE-2026-113798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and...

Linux Distros Unpatched Vulnerability : CVE-2026-114121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and...

Electron: Pointer Lock Permission Requests Can Be Attributed To The Wrong Frame

Impact For "pointerLock" permission requests made from some cross-origin iframes, "session.setPermissionRequestHandler" was given the top-level frame's "requestingUrl" and "isMainFrame" instead of the requesting frame's. Apps that grant pointer lock based on the requesting origin could grant it t...

Electron: OpenExternal Permission Requests Can Be Attributed To The Wrong Origin

Impact Requests to open external protocol URLs could be attributed to a document other than the one that asked for them, so the "requestingUrl" passed to "session.setPermissionRequestHandler" was a trusted origin for a launch untrusted content had requested. An origin-based handler could therefor...

EUVD-2026-107374

Electron: Pointer lock permission requests can be attributed to the wrong frame...

Electron: Pointer lock permission requests can be attributed to the wrong frame

Impact For pointerLock permission requests made from some cross-origin iframes, session.setPermissionRequestHandler was given the top-level frame's requestingUrl and isMainFrame instead of the requesting frame's. Apps that grant pointer lock based on the requesting origin could grant it to embedd...

GHSA-X562-297C-G43G Electron: Pointer lock permission requests can be attributed to the wrong frame

Impact For pointerLock permission requests made from some cross-origin iframes, session.setPermissionRequestHandler was given the top-level frame's requestingUrl and isMainFrame instead of the requesting frame's. Apps that grant pointer lock based on the requesting origin could grant it to embedd...

EUVD-2026-107361

Electron: openExternal permission requests can be attributed to the wrong origin...

SUSE CVE-2026-113798

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler to receive the top-leve...

SUSE CVE-2026-114121

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...

CVE-2026-114121

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...

CVE-2026-113798

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler to receive the top-leve...

CVE-2026-114121

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...

CVE-2026-113798 Electron: Pointer lock permission requests can be attributed to the wrong frame

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler to receive the top-leve...

CVE-2026-113798

The Electron framework is vulnerable to an Origin Validation Error (CWE-346) in versions prior to 42.11.9 , 43.7.6 , 44.5.0 , and 45.0.0-alpha.13 . The root cause is that pointerLock permission requests from certain cross-origin iframes incorrectly cause session.setPermissionRequestHandler() to r...

CVE-2026-113798 Electron: Pointer lock permission requests can be attributed to the wrong frame

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler to receive the top-leve...

CVE-2026-113798

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler to receive the top-leve...

CVE-2026-113798 Electron: Pointer lock permission requests can be attributed to the wrong frame

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler to receive the top-leve...

PT-2026-120674

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.11.9 Electron versions prior to 43.7.6 Electron versions prior to 44.5.0 Electron versions prior to 45.0.0-alpha.13 Description Pointer lock permission requests originating from certain cross-origin iframes cause...

PT-2026-120677

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.11.3 Electron versions prior to 43.7.0 Electron versions prior to 44.3.0 Electron versions prior to 45.0.0-alpha.5 Description Requests to open external protocol URLs can be attributed to a document other than the...