جزئیات آسیب‌پذیری
CVE-2026-34774
Electron: Use-after-free in offscreen child window paint callback
شرح رسمی (انگلیسی)
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 39.8.1, 40.7.0, and 41.0.0, apps that use offscreen rendering and allow child windows via window.open() may be vulnerable to a use-after-free. If the parent offscreen WebContents is destroyed while a child window remains open, subsequent paint frames on the child dereference freed memory, which may lead to a crash or memory corruption. Apps are only affected if they use offscreen rendering (webPreferences.offscreen: true) and their setWindowOpenHandler permits child windows. Apps that do not use offscreen rendering, or that deny child windows, are not affected. This issue has been patched in versions 39.8.1, 40.7.0, and 41.0.0.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.1بالا | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 8.1بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Build of Podman Desktop | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| electron | electron | < 39.8.1 | CVEProject cvelistV5 (CNA) |
| electron | electron | >= 40.0.0-alpha.1, < 40.7.0 | CVEProject cvelistV5 (CNA) |
| electron | electron | >= 41.0.0-alpha.1, < 41.0.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۴- https://github.com/electron/electron/security/advisories/GHSA-532v-xpq5-8h95 x_refsource_CONFIRM
- https://access.redhat.com/security/cve/CVE-2026-34774 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2455026 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34774.json x_sadp-csaf-vex
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۱۵
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- GitHub_M
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-416Use After Free
- CWE-825Expired Pointer Dereference