{"id":"EUVD-2026-53433","enisaUuid":"50f0f9e0-f203-3793-8997-c7b95ac28b50","description":"Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5, apps that expose Promise-returning functions to web content via contextBridge may be vulnerable to a context isolation bypass. Untrusted web content could obtain access to the isolated preload world and, through it, every capability the preload script has. In renderers without a sandbox, or with nodeIntegration enabled, this may escalate to Node.js access. Apps are affected if they expose Promise-returning functions via contextBridge, the standard pattern for wrapping ipcRenderer.invoke, in windows that load untrusted content. This issue is fixed in versions 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5.","datePublished":"Aug 5, 2026, 3:45:31 PM","dateUpdated":"Aug 5, 2026, 5:30:28 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","references":"https://github.com/electron/electron/security/advisories/GHSA-h7rp-cf8h-j98x\n","aliases":"CVE-2026-70601\nGHSA-h7rp-cf8h-j98x\n","assigner":"GitHub_M","epss":0.29,"enisaIdProduct":[{"id":"0a5641c9-84fb-30f6-8ebc-ea58fdfaac9b","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"42.0.0-alpha.1, \u003c 42.0.0-beta.5"},{"id":"39f5c12d-7e45-3cfa-961e-62d486f8eaa3","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"40.0.0-alpha.1, \u003c 40.9.2"},{"id":"c431aa77-17a5-3c3e-a380-4215ceae9b18","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"41.0.0-alpha.1, \u003c 41.2.2"},{"id":"f263b1ee-a148-389d-9070-422f54ccc3ef","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"\u003c 39.8.9"}],"enisaIdVendor":[{"id":"0461c4f5-3a9d-3f4f-a3cc-b1286f47ef85","vendor":{"name":"electron"}}],"enisaIdVulnerability":[{"id":"2aa72d13-8732-3bf7-ab45-4ca26a9fe274","vulnerability":{"id":"GHSA-h7rp-cf8h-j98x","description":"Electron: Context isolation bypass via Function.prototype.bind hijack","datePublished":"Aug 5, 2026, 3:46:08 PM","dateUpdated":"Aug 5, 2026, 3:46:08 PM","baseScore":0.0,"references":"https://github.com/electron/electron/security/advisories/GHSA-h7rp-cf8h-j98x\nhttps://github.com/electron/electron\n","enisa_id":"EUVD-2026-53433\n","aliases":"CVE-2026-70601\nGHSA-h7rp-cf8h-j98x\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:59:06 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ec3667ac-1c4c-3f04-ac4e-6cae359f6367","vulnerability":{"id":"CVE-2026-70601","description":"Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5, apps that expose Promise-returning functions to web content via contextBridge may be vulnerable to a context isolation bypass. Untrusted web content could obtain access to the isolated preload world and, through it, every capability the preload script has. In renderers without a sandbox, or with nodeIntegration enabled, this may escalate to Node.js access. Apps are affected if they expose Promise-returning functions via contextBridge, the standard pattern for wrapping ipcRenderer.invoke, in windows that load untrusted content. This issue is fixed in versions 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5.","datePublished":"Aug 5, 2026, 3:45:31 PM","dateUpdated":"Aug 5, 2026, 5:30:28 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","references":"https://github.com/electron/electron/security/advisories/GHSA-h7rp-cf8h-j98x\n","enisa_id":"EUVD-2026-53433\n","assigner":"GitHub_M","epss":0.29,"dataProcessed":"Oct 28, 2026, 7:12:48 AM","vulnerabilityProduct":[{"id":"23193fbf-a258-35de-8ca7-bf8732f96a8b","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"40.0.0-alpha.1, \u003c 40.9.2"},{"id":"5316243e-ad28-34c3-a5c1-982bdfcb3b86","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"\u003c 39.8.9"},{"id":"6dea8506-df68-31d9-a9da-af809ea43a25","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"42.0.0-alpha.1, \u003c 42.0.0-beta.5"},{"id":"6eb9b228-a564-35b7-abde-7ac7daab2ef8","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"41.0.0-alpha.1, \u003c 41.2.2"}],"vulnerabilityVendor":[{"id":"e8a5f087-1b50-3b23-b863-015ae49098bc","vendor":{"name":"electron"}}]}}],"enisaIdAdvisory":[]}