Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-26272

The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS. In versions of Electron IPC prior to 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9, messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, can in some cases be delivered to the wrong frame. If your app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler then it is impacted by this issue. This has been fixed in versions 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9. There are no known workarounds for this issue.

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:P/A:N

CWEs:

Software From Fixed in
electronjs / electron 9.0.0-beta11 9.0.0-beta11.x
electronjs / electron 9.0.0-beta12 9.0.0-beta12.x
electronjs / electron 9.0.0-beta13 9.0.0-beta13.x
electronjs / electron 9.0.0-beta14 9.0.0-beta14.x
electronjs / electron 9.0.0-beta15 9.0.0-beta15.x
electronjs / electron 9.0.0-beta16 9.0.0-beta16.x
electronjs / electron 9.0.0-beta17 9.0.0-beta17.x
electronjs / electron 9.0.0-beta18 9.0.0-beta18.x
electronjs / electron 9.0.0-beta19 9.0.0-beta19.x
electronjs / electron 9.0.0-beta20 9.0.0-beta20.x
electronjs / electron 9.0.0-beta1 9.0.0-beta1.x
electronjs / electron 9.0.0-beta2 9.0.0-beta2.x
electronjs / electron 9.0.0-beta3 9.0.0-beta3.x
electronjs / electron 9.0.0-beta4 9.0.0-beta4.x
electronjs / electron 9.0.0-beta5 9.0.0-beta5.x
electronjs / electron 9.0.0-beta6 9.0.0-beta6.x
electronjs / electron 9.0.0-beta7 9.0.0-beta7.x
electronjs / electron 9.0.0-beta8 9.0.0-beta8.x
electronjs / electron 9.0.0-beta9 9.0.0-beta9.x
electronjs / electron 9.0.0-beta10 9.0.0-beta10.x
electronjs / electron 10.0.0-beta21 10.0.0-beta21.x
electronjs / electron 10.0.0-beta23 10.0.0-beta23.x
electronjs / electron 10.0.0-beta24 10.0.0-beta24.x
electronjs / electron 10.0.0-beta25 10.0.0-beta25.x
electronjs / electron 10.0.0-beta1 10.0.0-beta1.x
electronjs / electron 10.0.0-beta10 10.0.0-beta10.x
electronjs / electron 10.0.0-beta11 10.0.0-beta11.x
electronjs / electron 10.0.0-beta12 10.0.0-beta12.x
electronjs / electron 10.0.0-beta13 10.0.0-beta13.x
electronjs / electron 10.0.0-beta14 10.0.0-beta14.x
electronjs / electron 10.0.0-beta15 10.0.0-beta15.x
electronjs / electron 10.0.0-beta17 10.0.0-beta17.x
electronjs / electron 10.0.0-beta19 10.0.0-beta19.x
electronjs / electron 10.0.0-beta2 10.0.0-beta2.x
electronjs / electron 10.0.0-beta20 10.0.0-beta20.x
electronjs / electron 10.0.0-beta3 10.0.0-beta3.x
electronjs / electron 10.0.0-beta4 10.0.0-beta4.x
electronjs / electron 10.0.0-beta5 10.0.0-beta5.x
electronjs / electron 10.0.0-beta6 10.0.0-beta6.x
electronjs / electron 10.0.0-beta7 10.0.0-beta7.x
electronjs / electron 10.0.0-beta8 10.0.0-beta8.x
electronjs / electron 10.0.0-beta9 10.0.0-beta9.x
electronjs / electron 11.0.0-beta1 11.0.0-beta1.x
electronjs / electron 11.0.0-beta3 11.0.0-beta3.x
electronjs / electron 11.0.0-beta4 11.0.0-beta4.x
electronjs / electron 11.0.0-beta5 11.0.0-beta5.x
electronjs / electron 12.0.0-beta1 12.0.0-beta1.x
electronjs / electron 12.0.0-beta3 12.0.0-beta3.x
electronjs / electron 12.0.0-beta4 12.0.0-beta4.x
electronjs / electron 12.0.0-beta5 12.0.0-beta5.x
electronjs / electron 12.0.0-beta6 12.0.0-beta6.x
electronjs / electron 12.0.0-beta7 12.0.0-beta7.x
electronjs / electron 12.0.0-beta8 12.0.0-beta8.x
electronjs / electron 12.0.0-beta9 12.0.0-beta9.x
electronjs / electron 11.0.0-beta6 11.0.0-beta6.x
electronjs / electron 11.0.0-beta7 11.0.0-beta7.x
electronjs / electron 11.0.0-beta8 11.0.0-beta8.x
electronjs / electron 11.0.0-beta9 11.0.0-beta9.x
electronjs / electron 11.0.0-beta10 11.0.0-beta10.x
electronjs / electron 11.0.0-beta11 11.0.0-beta11.x
electronjs / electron 11.0.0-beta12 11.0.0-beta12.x
electronjs / electron 11.0.0-beta13 11.0.0-beta13.x
electronjs / electron 11.0.0-beta14 11.0.0-beta14.x
electronjs / electron 11.0.0-beta15 11.0.0-beta15.x
electronjs / electron 11.0.0-beta16 11.0.0-beta16.x
electronjs / electron 11.0.0-beta17 11.0.0-beta17.x
electronjs / electron 11.0.0-beta18 11.0.0-beta18.x
electronjs / electron 11.0.0-beta19 11.0.0-beta19.x
electronjs / electron 11.0.0-beta20 11.0.0-beta20.x
electronjs / electron 11.0.0-beta21 11.0.0-beta21.x
electronjs / electron 11.0.0-beta22 11.0.0-beta22.x
electronjs / electron 11.0.0-beta23 11.0.0-beta23.x
electronjs / electron 11.0.0 11.1.0
electronjs / electron 10.0.0 10.2.0
electronjs / electron 9.0.0 9.4.0
electronjs / electron 9.0.0-beta21 9.0.0-beta21.x
electronjs / electron 9.0.0-beta22 9.0.0-beta22.x
electronjs / electron 9.0.0-beta23 9.0.0-beta23.x
electronjs / electron 9.0.0-beta24 9.0.0-beta24.x
electron - 9.4.0
electron 10.0.0 10.2.0
electron 11.0.0 11.1.0