CVE-2026-114122Published
Electron: Frame subscription trusts GPU-supplied frame geometry
Exact source revision recorded 28 Oct 2026 02:51:34 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-114122 · Microsoft / collected KEV context
cve-program · CVE-2026-114122
- https://github.com/electron/electron/security/advisories/GHSA-3qxv-5xgr-q7w9
- https://github.com/electron/electron/pull/54036
- https://github.com/electron/electron/pull/54037
- https://github.com/electron/electron/pull/54038
- https://github.com/electron/electron/pull/54047
- https://github.com/electron/electron/commit/24d8dbc661c6a109476ae59e9a2740b35d005cf4
- https://github.com/electron/electron/commit/64ae597deda8956037387b439e6361f0fe936c86
- https://github.com/electron/electron/commit/8d48be150c3fd53b0d02854124bdb7858598799c
- https://github.com/electron/electron/commit/d496507ffa1693edaa704a4be130fbcb8ecb4ada
- https://github.com/electron/electron/commit/d7f87070a8d738e561245d1ade4d6fbb082db80a
- https://github.com/electron/electron/releases/tag/v42.11.6
- https://github.com/electron/electron/releases/tag/v43.7.3
- https://github.com/electron/electron/releases/tag/v44.4.3
- https://github.com/electron/electron/releases/tag/v45.0.0-alpha.9
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.