🔐 CVE Alert

CVE-2026-113800

MEDIUM 5.4

Electron: HID and USB permission checks can be attributed to the wrong origin

CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, hid and usb permission checks made from an iframe caused setPermissionCheckHandler to receive the top-level frame's origin and details instead of the requesting frame's. An application that delegated hid or usb to a cross-origin untrusted iframe and allowed device access with origin-based logic could therefore grant that embedded frame access intended for the top-level page. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5.

CWE CWE-346
Vendor electron
Product electron
Published Oct 21, 2026
Stay Ahead of the Next One

Get instant alerts for electron electron

Be the first to know when new medium vulnerabilities affecting electron electron are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Affected Versions

electron / electron
< 42.11.3 >= 43.0.0-alpha.1, < 43.7.0 >= 44.0.0-alpha.1, < 44.3.0 >= 45.0.0-alpha.1, < 45.0.0-alpha.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗
github.com: https://github.com/electron/electron/security/advisories/GHSA-fw47-9c62-h3vw github.com: https://github.com/electron/electron/pull/53656 github.com: https://github.com/electron/electron/pull/53679 github.com: https://github.com/electron/electron/pull/53688 github.com: https://github.com/electron/electron/pull/53689 github.com: https://github.com/electron/electron/pull/53736 github.com: https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a github.com: https://github.com/electron/electron/commit/36042b2e1b1c60c67b05ba0e95d1a34f608b9742 github.com: https://github.com/electron/electron/commit/56cc43eb677d46b86b0d3f49b5fba71404ab1ff0 github.com: https://github.com/electron/electron/commit/922073f8601479e93071f56f0745041291b206fd github.com: https://github.com/electron/electron/commit/c965cee73284c4b230a81d51a7db6115e55da8c0 github.com: https://github.com/electron/electron/releases/tag/v42.11.3 github.com: https://github.com/electron/electron/releases/tag/v43.7.0 github.com: https://github.com/electron/electron/releases/tag/v44.3.0 github.com: https://github.com/electron/electron/releases/tag/v45.0.0-alpha.5