Security vulnerabilities and automated fixes for protocol handler issues
1 post found
CVE-2026-102675 exposes a critical flaw in how Electron's custom protocol handlers enforce CORS policies, allowing malicious web content to read responses from privileged origins. Upgrading Electron from 41.10.4 to 44.0.0 closes this cross-origin information disclosure vector by tightening origin validation in the protocol handler layer.