Skip to content
Threat Feed
Subscribe

Vendor

Electron

3 briefs RSS
critical advisory

eMudhra/emSign: Weak Intermediate CA Private Keys (CVE-2026-111943)

Eight eMudhra/emSign intermediate CA certificates were generated with weak P-384 ECC private keys, allowing attackers to forge valid TLS and code-signing certificates and perform seamless Man-in-the-Middle attacks.

certifi +11
2t 1c
high advisory

Electron Sandbox Restriction Bypass via Popups

A vulnerability in Electron prevents popups opened from sandboxed iframes from inheriting security restrictions, allowing potentially malicious content to access the embedding application's full origin.

Electron +4 vulnerability sandbox-bypass web-application sandbox-escape
1c updated
high advisory

Electron CORS Protection Bypass via Custom Schemes

A vulnerability in Electron (CVE-2026-70604) allows remote origins to bypass CORS protections when interacting with custom schemes, enabling unauthorized read access to sensitive data.

Electron
1c