CVE-2026-113797 Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query returned each tab's url and title to extensions that had neither the tabs permission nor matching host...