CVE-2026-113797

The Electron framework, prior to versions 42.11.1 , 43.5.1 , 44.1.1 , and 45.0.0-alpha.4 , contains a vulnerability where the chrome.tabs.query() function returns the URL and title of every tab to extensions lacking the tabs permission or matching host permissions. This allows an untrusted extens...