CVE-2026-102677

Published 29 September 2026 · tracked since 30 September 2026

Description

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-95327 MEDIUM 6.5
• CVE-2026-95328 MEDIUM 6.5
• CVE-2026-95329 CRITICAL 9.6
• CVE-2026-95331 CRITICAL 9.6
• CVE-2026-95318 CRITICAL 9.6
• CVE-2026-95319 HIGH 8.3
• CVE-2026-95322 HIGH 8.3
• CVE-2026-95325 CRITICAL 9.6
• CVE-2026-95310 CRITICAL 9.6
• CVE-2026-95311 CRITICAL 9.6

→ Open the live CVE board · all tools