Electron: window.open features string controls some window options considered privileged

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-70607 · Microsoft / collected KEV context

EUVD-2026-53462

GHSA-v93f-fgjr-hjrj

cve-program · CVE-2026-70607

• https://github.com/electron/electron/security/advisories/GHSA-v93f-fgjr-hjrj
• https://github.com/electron/electron/pull/50946
• https://github.com/electron/electron/pull/50947
• https://github.com/electron/electron/pull/50948
• https://github.com/electron/electron/pull/50949
• https://github.com/electron/electron/commit/30cf3882de75ee651bd4e5f27002f13fd3d3163a
• https://github.com/electron/electron/commit/4eff3dc09e4d1e62d649c5ce9902f532bb7469c7
• https://github.com/electron/electron/commit/615d62500fc7732d068274b796c49487e652e90b
• https://github.com/electron/electron/commit/fe2e7d0073949b4593b624b93abf1788f5377e55
• https://github.com/electron/electron/releases/tag/v39.8.8
• https://github.com/electron/electron/releases/tag/v40.9.0
• https://github.com/electron/electron/releases/tag/v41.2.1
• https://github.com/electron/electron/releases/tag/v42.0.0-beta.3

euvd · EUVD-2026-53462

• https://github.com/electron/electron/security/advisories/GHSA-v93f-fgjr-hjrj
• https://github.com/electron/electron/pull/50946
• https://github.com/electron/electron/pull/50947
• https://github.com/electron/electron/pull/50948
• https://github.com/electron/electron/pull/50949
• https://github.com/electron/electron/commit/30cf3882de75ee651bd4e5f27002f13fd3d3163a
• https://github.com/electron/electron/commit/4eff3dc09e4d1e62d649c5ce9902f532bb7469c7
• https://github.com/electron/electron/commit/615d62500fc7732d068274b796c49487e652e90b
• https://github.com/electron/electron/commit/fe2e7d0073949b4593b624b93abf1788f5377e55
• https://github.com/electron/electron/releases/tag/v39.8.8
• https://github.com/electron/electron/releases/tag/v40.9.0
• https://github.com/electron/electron/releases/tag/v41.2.1
• https://github.com/electron/electron/releases/tag/v42.0.0-beta.3

nvd · CVE-2026-70607

• https://github.com/electron/electron/commit/30cf3882de75ee651bd4e5f27002f13fd3d3163a
• https://github.com/electron/electron/commit/4eff3dc09e4d1e62d649c5ce9902f532bb7469c7
• https://github.com/electron/electron/commit/615d62500fc7732d068274b796c49487e652e90b
• https://github.com/electron/electron/commit/fe2e7d0073949b4593b624b93abf1788f5377e55
• https://github.com/electron/electron/pull/50946
• https://github.com/electron/electron/pull/50947
• https://github.com/electron/electron/pull/50948
• https://github.com/electron/electron/pull/50949
• https://github.com/electron/electron/releases/tag/v39.8.8
• https://github.com/electron/electron/releases/tag/v40.9.0
• https://github.com/electron/electron/releases/tag/v41.2.1
• https://github.com/electron/electron/releases/tag/v42.0.0-beta.3
• https://github.com/electron/electron/security/advisories/GHSA-v93f-fgjr-hjrj

osv · GHSA-v93f-fgjr-hjrj

• https://github.com/electron/electron/security/advisories/GHSA-v93f-fgjr-hjrj
• https://github.com/electron/electron/pull/50946
• https://github.com/electron/electron/pull/50947
• https://github.com/electron/electron/pull/50948
• https://github.com/electron/electron/pull/50949
• https://github.com/electron/electron/commit/30cf3882de75ee651bd4e5f27002f13fd3d3163a
• https://github.com/electron/electron/commit/4eff3dc09e4d1e62d649c5ce9902f532bb7469c7
• https://github.com/electron/electron/commit/615d62500fc7732d068274b796c49487e652e90b
• https://github.com/electron/electron/commit/fe2e7d0073949b4593b624b93abf1788f5377e55
• https://github.com/electron/electron
• https://github.com/electron/electron/releases/tag/v39.8.8
• https://github.com/electron/electron/releases/tag/v40.9.0
• https://github.com/electron/electron/releases/tag/v41.2.1
• https://github.com/electron/electron/releases/tag/v42.0.0-beta.3

No related operational record is retained in the current change model.