Lucene search
+L
ElectronjsElectron26.2.1

1 matches found

CVE
CVE
added 2023/12/01 9:45 p.m.69 views

CVE-2023-44402

CVE-2023-44402 concerns Electron where ASAR integrity checks can be bypassed when embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses are enabled on macOS. The issue requires an attacker with write access to the app’s filesystem (e.g., the .app bundle) to exploit, potentially allowing l...

7CVSS6.2AI score0.00207EPSS
Save