CVE-2026-114122

The Electron framework is vulnerable to an out-of-bounds read in versions prior to 42.11.6 , 43.7.3 , 44.4.3 , and 45.0.0-alpha.9 . The root cause is that the main process fails to fully validate frame data received from the GPU process for webContents.beginFrameSubscription. An attacker with exi...

CVE-2026-114122 Electron: Frame subscription trusts GPU-supplied frame geometry

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for webContents.beginFrameSubscription was not fully validated by the main process. An...