Electron (< 44.9.1 / < 43.8.1 / < 42.11.16)

Eight eMudhra/emSign intermediate CA certificates were generated with weak P-384 ECC private keys, allowing attackers to forge valid TLS and code-signing certificates and perform seamless Man-in-the-Middle attacks.