Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-102673 · Microsoft / collected KEV context

EUVD-2026-89078

GHSA-hq2x-r82h-9wj4

cve-program · CVE-2026-102673

• https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4
• https://github.com/electron/electron/pull/52133
• https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba
• https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69
• https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da
• https://github.com/electron/electron/releases/tag/v41.10.4
• https://github.com/electron/electron/releases/tag/v42.5.2
• https://github.com/electron/electron/releases/tag/v43.0.0

euvd · EUVD-2026-89078

• https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4
• https://github.com/electron/electron/pull/52133
• https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba
• https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69
• https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da
• https://github.com/electron/electron/releases/tag/v41.10.4
• https://github.com/electron/electron/releases/tag/v42.5.2
• https://github.com/electron/electron/releases/tag/v43.0.0

nvd · CVE-2026-102673

• https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba
• https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69
• https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da
• https://github.com/electron/electron/pull/52133
• https://github.com/electron/electron/releases/tag/v41.10.4
• https://github.com/electron/electron/releases/tag/v42.5.2
• https://github.com/electron/electron/releases/tag/v43.0.0
• https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4

osv · GHSA-hq2x-r82h-9wj4

• https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4
• https://github.com/electron/electron/pull/52133
• https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba
• https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69
• https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da
• https://github.com/electron/electron
• https://github.com/electron/electron/releases/tag/v41.10.4
• https://github.com/electron/electron/releases/tag/v42.5.2
• https://github.com/electron/electron/releases/tag/v43.0.0

No related operational record is retained in the current change model.