CVE-2026-92299 @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources via contextBridge without requiring an active getDisplayMedia picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop...

CVE-2026-92299

@jitsi/electron-sdk (the Electron-based desktop client for Jitsi Meet) prior to 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker. This allows any script running in the meeting page to call the jitsi-screen-sharing-get-sources IPC route and ...

CVE-2024-44189

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a process may be able to capture screen contents without user consent...