EUVD-2026-89078Published
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.4, 42.5.2, and 43.0.0, popups opened from a sandboxed iframe through Electron's OpenURLFromTab navigation path, including…
Exact source revision recorded 3 Nov 2026 02:57:36 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-102673 · Microsoft / collected KEV context
euvd · EUVD-2026-89078
- https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4
- https://github.com/electron/electron/pull/52133
- https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba
- https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69
- https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da
- https://github.com/electron/electron/releases/tag/v41.10.4
- https://github.com/electron/electron/releases/tag/v42.5.2
- https://github.com/electron/electron/releases/tag/v43.0.0
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.