Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the requestingUrl passed to session.setPermissionRequestHandler to identify trusted content for a launch requested by untrusted content. An application that grants openExternal based on the requesting origin and allows untrusted content to open or navigate windows could therefore allow that content to launch an OS-registered external application. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-346"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114121.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "42.11.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "43.0.0-alpha.1"
},
{
"fixed": "43.7.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "44.0.0-alpha.1"
},
{
"fixed": "44.3.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "45.0.0-alpha.1"
},
{
"fixed": "45.0.0-alpha.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "25057643bf6d9a20bad69e45707551ccf546f5ce"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "92a783952891805f2f82f344c40a6917b98a7d98"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "e0a20d5277b567aea8603f8e9852a4341407a586"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "e3a400911084537bce7380ffea8af939572ce8dd"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "v42.11.3",
"range": [
{
"fixed": "22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v43.7.0",
"range": [
{
"fixed": "c440db52c29668e848f02e374720e15b6025a132"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v44.3.0",
"range": [
{
"fixed": "07e460719c75b2ec5ee4893f7d2192ef31c7b8c2"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v45.0.0-alpha.5",
"range": [
{
"fixed": "92a783952891805f2f82f344c40a6917b98a7d98"
}
],
"source": "REFERENCES_TAG"
}
]
}
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114121.json"
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"210093303512527750684042608225550729058",
"68283665547836407651089372034444433267",
"24918057677704654544579681732255690992",
"77799542662533049916431772296751135088",
"200864182965112954665264848605685485917",
"75822209127868849416655486729361999146",
"276891719029704464593158896034715541537",
"141736504432817457606234446504790803671",
"299874751601194721710103151603660255762",
"260618697905172730954763805666077269664",
"136554262591433285867387891327439144536",
"302208083091011774024106840203977795989",
"91464071171559473910317234262363483613"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-033d5be3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd",
"target": {
"file": "shell/browser/web_contents_permission_helper.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "163586886553495020899273651332277353361",
"length": 215
},
"id": "CVE-2026-114121-085dbbad",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/hid/electron_hid_delegate.cc",
"function": "ElectronHidDelegate::RevokeDevicePermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"55405965410161190875667345825851504964",
"157772841084801357609480350698729599504",
"221358805466416710872761065673705093287",
"83312655811838863303579297765353858917",
"20771379011207537991205883108701029539"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-0e723a1b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd",
"target": {
"file": "shell/browser/electron_permission_manager.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"176857430165363227981758904290611366306",
"189971542549471682217606562258677165172",
"304044632322972962911828049515842434885",
"98569589963065280022175374611532746795",
"234940555165972485934365409065250665338",
"191535350995363419421269557246449149133",
"198960365517043526652334733197557269125",
"181750502114514223496325180980696157600",
"53905635949160337157245489951307554734",
"149941763740692184829616198739957534343"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-1da4b78e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3",
"target": {
"file": "shell/browser/web_contents_permission_helper.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"176857430165363227981758904290611366306",
"189971542549471682217606562258677165172",
"304044632322972962911828049515842434885",
"98569589963065280022175374611532746795",
"234940555165972485934365409065250665338",
"191535350995363419421269557246449149133",
"198960365517043526652334733197557269125",
"181750502114514223496325180980696157600",
"53905635949160337157245489951307554734",
"149941763740692184829616198739957534343"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-1e23b39e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586",
"target": {
"file": "shell/browser/web_contents_permission_helper.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"55405965410161190875667345825851504964",
"157772841084801357609480350698729599504",
"221358805466416710872761065673705093287",
"83312655811838863303579297765353858917",
"20771379011207537991205883108701029539"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-1f864de0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3",
"target": {
"file": "shell/browser/electron_permission_manager.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "19393377926626154410476937471267304236",
"length": 1357
},
"id": "CVE-2026-114121-215ec595",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3",
"target": {
"file": "shell/browser/electron_browser_client.cc",
"function": "HandleExternalProtocolInUI"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179799068391317629525482058183236946101",
"279001413856987713390614819028156368985",
"294098419761746835127359090888974621810",
"155071149938606637154004742832341633295",
"192359909665840380641025174043490555470",
"86187352736755217131831245521703537458",
"296944468441123462253374259630588778371",
"164368157708924393019978024302059299019",
"160641291334098146713040479103727823870",
"262031934296565717164015901377176348518",
"212605676846599614770538520166604428059",
"134176214277403040990786435077200861405",
"237540065746732622682246426034423199749",
"214545918621229503841220928661115873716",
"191942462827666166201063476530658586794",
"27553654232649792528638788236985921375",
"168566326458159942417799659839994213911",
"79704351925835501863710532759361714828",
"101107943999120571161134958083831668682",
"116071030271138693068577557185599443774",
"60959076088263732973142027479895983823",
"242426201027112220195147359050163789547",
"272626680176574051776313622131079248534"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-24dfacba",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586",
"target": {
"file": "shell/browser/electron_browser_client.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"337833659570664803569687100676255122278",
"278933063342990246185833272610580769425",
"204831099482400612171164869838911756959",
"136925865731599307973958830626379419330"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-368ce75b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/usb/electron_usb_delegate.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "255639320248204582600610932039474666135",
"length": 2071
},
"id": "CVE-2026-114121-36a16a96",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd",
"target": {
"file": "shell/browser/electron_permission_manager.cc",
"function": "ElectronPermissionManager::RequestPermissionsWithDetails"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "19393377926626154410476937471267304236",
"length": 1357
},
"id": "CVE-2026-114121-37cb0aff",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce",
"target": {
"file": "shell/browser/electron_browser_client.cc",
"function": "HandleExternalProtocolInUI"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"176857430165363227981758904290611366306",
"189971542549471682217606562258677165172",
"304044632322972962911828049515842434885",
"98569589963065280022175374611532746795",
"234940555165972485934365409065250665338",
"191535350995363419421269557246449149133",
"198960365517043526652334733197557269125",
"181750502114514223496325180980696157600",
"53905635949160337157245489951307554734",
"149941763740692184829616198739957534343"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-391b2af8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd",
"target": {
"file": "shell/browser/web_contents_permission_helper.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"176857430165363227981758904290611366306",
"189971542549471682217606562258677165172",
"304044632322972962911828049515842434885",
"98569589963065280022175374611532746795",
"234940555165972485934365409065250665338",
"191535350995363419421269557246449149133",
"198960365517043526652334733197557269125",
"181750502114514223496325180980696157600",
"53905635949160337157245489951307554734",
"149941763740692184829616198739957534343"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-40d2fefe",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98",
"target": {
"file": "shell/browser/web_contents_permission_helper.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "8597325686380026973445435126469704642",
"length": 426
},
"id": "CVE-2026-114121-45b959c3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/usb/electron_usb_delegate.cc",
"function": "ElectronUsbDelegate::CanRequestDevicePermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179799068391317629525482058183236946101",
"279001413856987713390614819028156368985",
"294098419761746835127359090888974621810",
"155071149938606637154004742832341633295",
"192359909665840380641025174043490555470",
"86187352736755217131831245521703537458",
"296944468441123462253374259630588778371",
"164368157708924393019978024302059299019",
"160641291334098146713040479103727823870",
"262031934296565717164015901377176348518",
"212605676846599614770538520166604428059",
"134176214277403040990786435077200861405",
"237540065746732622682246426034423199749",
"214545918621229503841220928661115873716",
"191942462827666166201063476530658586794",
"27553654232649792528638788236985921375",
"168566326458159942417799659839994213911",
"79704351925835501863710532759361714828",
"101107943999120571161134958083831668682",
"116071030271138693068577557185599443774",
"60959076088263732973142027479895983823",
"242426201027112220195147359050163789547",
"272626680176574051776313622131079248534"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-48a187c4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce",
"target": {
"file": "shell/browser/electron_browser_client.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "51582338272732942098801942961526581766",
"length": 310
},
"id": "CVE-2026-114121-57a311c4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/usb/electron_usb_delegate.cc",
"function": "ElectronUsbDelegate::HasDevicePermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179799068391317629525482058183236946101",
"279001413856987713390614819028156368985",
"294098419761746835127359090888974621810",
"155071149938606637154004742832341633295",
"192359909665840380641025174043490555470",
"86187352736755217131831245521703537458",
"296944468441123462253374259630588778371",
"164368157708924393019978024302059299019",
"160641291334098146713040479103727823870",
"262031934296565717164015901377176348518",
"212605676846599614770538520166604428059",
"134176214277403040990786435077200861405",
"237540065746732622682246426034423199749",
"214545918621229503841220928661115873716",
"191942462827666166201063476530658586794",
"27553654232649792528638788236985921375",
"168566326458159942417799659839994213911",
"79704351925835501863710532759361714828",
"101107943999120571161134958083831668682",
"116071030271138693068577557185599443774",
"60959076088263732973142027479895983823",
"242426201027112220195147359050163789547",
"272626680176574051776313622131079248534"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-585635e3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98",
"target": {
"file": "shell/browser/electron_browser_client.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251339166431400156258641482181652383196",
"241053059275460752244980986587633478031",
"176190167618651076993428639269135182047",
"255856782894506886973206959419891807373",
"16546226106584424423614789800472752638",
"331436663682890405151090558513990720145",
"316247753605533748555666534455864970055",
"126368555040970648003829247749518953464",
"86333989567915036090314002651797828556",
"128492383848679681357922241016220871231",
"309033919043165282652445634684743844527",
"49777337493613529201731365427662207105",
"45526587900057601924304439159949463341",
"208084171039495028768404609212818471816",
"182710850551066657877656302035900593864",
"274402512350065896440043170577607644235",
"132511270054107308479054294203518222774",
"258648471330194225844344166607358878232",
"55117467926907042909459432267200248096",
"141759276092471824154800062870720710289",
"260691864562120722254656833603851043295",
"177335370951975179925746028105652355355",
"224569255777314534266225627271434241729",
"164998215844675137900485363058016324320",
"313679953828100408659267986799776857640",
"219784173358766722689329403467704177114",
"156604433431792562646407015326721836519",
"191148989308487063289093520278445462459",
"10855836476249249579317754759425391224"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-63f8c89f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/hid/electron_hid_delegate.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "19393377926626154410476937471267304236",
"length": 1357
},
"id": "CVE-2026-114121-6b55671e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98",
"target": {
"file": "shell/browser/electron_browser_client.cc",
"function": "HandleExternalProtocolInUI"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "309559740215024087819771014782432615011",
"length": 426
},
"id": "CVE-2026-114121-73df4ddc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/hid/electron_hid_delegate.cc",
"function": "ElectronHidDelegate::CanRequestDevicePermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"55405965410161190875667345825851504964",
"157772841084801357609480350698729599504",
"221358805466416710872761065673705093287",
"83312655811838863303579297765353858917",
"20771379011207537991205883108701029539"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-76274d9f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586",
"target": {
"file": "shell/browser/electron_permission_manager.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"176857430165363227981758904290611366306",
"189971542549471682217606562258677165172",
"304044632322972962911828049515842434885",
"98569589963065280022175374611532746795",
"234940555165972485934365409065250665338",
"191535350995363419421269557246449149133",
"198960365517043526652334733197557269125",
"181750502114514223496325180980696157600",
"53905635949160337157245489951307554734",
"149941763740692184829616198739957534343"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-76910c05",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce",
"target": {
"file": "shell/browser/web_contents_permission_helper.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "255639320248204582600610932039474666135",
"length": 2071
},
"id": "CVE-2026-114121-88add936",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586",
"target": {
"file": "shell/browser/electron_permission_manager.cc",
"function": "ElectronPermissionManager::RequestPermissionsWithDetails"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "19393377926626154410476937471267304236",
"length": 1357
},
"id": "CVE-2026-114121-8c0afaeb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd",
"target": {
"file": "shell/browser/electron_browser_client.cc",
"function": "HandleExternalProtocolInUI"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"78057749163180614907913457560777050855",
"28761536658953719635641160297604695698",
"139611953175832713884193059605060434660",
"56182777345936070893156066904095592256",
"80904906129972713872510273229766878273",
"250148029603479831695456355029567537527",
"309033919043165282652445634684743844527",
"49777337493613529201731365427662207105",
"45526587900057601924304439159949463341",
"208084171039495028768404609212818471816",
"182710850551066657877656302035900593864",
"274402512350065896440043170577607644235",
"33449349429210178706226115463727771883",
"25406093755487108401573379880553522961",
"79346232228210802267249958083713116146",
"230867383278725916655045495423991129364",
"111314221022282660911469869197071317787",
"105465064303334119909647610177025057071",
"56300472350855581515598761316943100206",
"337533410712794706756146602810494347386",
"50181101377865185785790942792822624177",
"285388295967738092524543836663359978405",
"214727336289095135146439607137484261116",
"317705517834438629309631973655625518751",
"34393896507118281324640815626080192994",
"7186133781887397400304992121749562866"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-917bbf06",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/usb/electron_usb_delegate.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "255639320248204582600610932039474666135",
"length": 2071
},
"id": "CVE-2026-114121-b9dbf571",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98",
"target": {
"file": "shell/browser/electron_permission_manager.cc",
"function": "ElectronPermissionManager::RequestPermissionsWithDetails"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179799068391317629525482058183236946101",
"279001413856987713390614819028156368985",
"294098419761746835127359090888974621810",
"155071149938606637154004742832341633295",
"192359909665840380641025174043490555470",
"86187352736755217131831245521703537458",
"296944468441123462253374259630588778371",
"164368157708924393019978024302059299019",
"160641291334098146713040479103727823870",
"262031934296565717164015901377176348518",
"212605676846599614770538520166604428059",
"134176214277403040990786435077200861405",
"237540065746732622682246426034423199749",
"214545918621229503841220928661115873716",
"191942462827666166201063476530658586794",
"27553654232649792528638788236985921375",
"168566326458159942417799659839994213911",
"79704351925835501863710532759361714828",
"101107943999120571161134958083831668682",
"116071030271138693068577557185599443774",
"60959076088263732973142027479895983823",
"242426201027112220195147359050163789547",
"272626680176574051776313622131079248534"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-bb2d3cb7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3",
"target": {
"file": "shell/browser/electron_browser_client.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"210093303512527750684042608225550729058",
"68283665547836407651089372034444433267",
"24918057677704654544579681732255690992",
"77799542662533049916431772296751135088",
"200864182965112954665264848605685485917",
"75822209127868849416655486729361999146",
"276891719029704464593158896034715541537",
"141736504432817457606234446504790803671",
"299874751601194721710103151603660255762",
"260618697905172730954763805666077269664",
"136554262591433285867387891327439144536",
"302208083091011774024106840203977795989",
"91464071171559473910317234262363483613"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-bd4bbbd6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98",
"target": {
"file": "shell/browser/web_contents_permission_helper.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179799068391317629525482058183236946101",
"279001413856987713390614819028156368985",
"294098419761746835127359090888974621810",
"155071149938606637154004742832341633295",
"192359909665840380641025174043490555470",
"86187352736755217131831245521703537458",
"296944468441123462253374259630588778371",
"164368157708924393019978024302059299019",
"160641291334098146713040479103727823870",
"262031934296565717164015901377176348518",
"212605676846599614770538520166604428059",
"134176214277403040990786435077200861405",
"237540065746732622682246426034423199749",
"214545918621229503841220928661115873716",
"191942462827666166201063476530658586794",
"27553654232649792528638788236985921375",
"168566326458159942417799659839994213911",
"79704351925835501863710532759361714828",
"101107943999120571161134958083831668682",
"116071030271138693068577557185599443774",
"60959076088263732973142027479895983823",
"242426201027112220195147359050163789547",
"272626680176574051776313622131079248534"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-bf2623ca",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd",
"target": {
"file": "shell/browser/electron_browser_client.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "19393377926626154410476937471267304236",
"length": 1357
},
"id": "CVE-2026-114121-c1bec057",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586",
"target": {
"file": "shell/browser/electron_browser_client.cc",
"function": "HandleExternalProtocolInUI"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "88018023917651873008628947603948773125",
"length": 208
},
"id": "CVE-2026-114121-db0bafa0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/hid/electron_hid_delegate.cc",
"function": "ElectronHidDelegate::HasDevicePermission"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "255639320248204582600610932039474666135",
"length": 2071
},
"id": "CVE-2026-114121-dc844f0d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3",
"target": {
"file": "shell/browser/electron_permission_manager.cc",
"function": "ElectronPermissionManager::RequestPermissionsWithDetails"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "255639320248204582600610932039474666135",
"length": 2071
},
"id": "CVE-2026-114121-e2067b00",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce",
"target": {
"file": "shell/browser/electron_permission_manager.cc",
"function": "ElectronPermissionManager::RequestPermissionsWithDetails"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"239993165935455445360783736795255822276",
"151835440110402971718661854296842841509",
"147572887431725779945503003725094041599",
"186533614786520719398105935749181011815"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-e3af19c9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"target": {
"file": "shell/browser/hid/electron_hid_delegate.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"210093303512527750684042608225550729058",
"68283665547836407651089372034444433267",
"326466976312245619244493206458270180212",
"54693506234803879187004883484104574131",
"111335901640355941312857886739880713580",
"251823480444184021576935084636477721246",
"75822209127868849416655486729361999146",
"276891719029704464593158896034715541537",
"141736504432817457606234446504790803671",
"299874751601194721710103151603660255762",
"260618697905172730954763805666077269664",
"136554262591433285867387891327439144536",
"302208083091011774024106840203977795989",
"91464071171559473910317234262363483613"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-e4896112",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3",
"target": {
"file": "shell/browser/web_contents_permission_helper.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"210093303512527750684042608225550729058",
"68283665547836407651089372034444433267",
"326466976312245619244493206458270180212",
"54693506234803879187004883484104574131",
"111335901640355941312857886739880713580",
"251823480444184021576935084636477721246",
"75822209127868849416655486729361999146",
"276891719029704464593158896034715541537",
"141736504432817457606234446504790803671",
"299874751601194721710103151603660255762",
"260618697905172730954763805666077269664",
"136554262591433285867387891327439144536",
"302208083091011774024106840203977795989",
"91464071171559473910317234262363483613"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-e95e3b7c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586",
"target": {
"file": "shell/browser/web_contents_permission_helper.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"55405965410161190875667345825851504964",
"157772841084801357609480350698729599504",
"221358805466416710872761065673705093287",
"83312655811838863303579297765353858917",
"20771379011207537991205883108701029539"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-f7cbfb53",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98",
"target": {
"file": "shell/browser/electron_permission_manager.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"55405965410161190875667345825851504964",
"157772841084801357609480350698729599504",
"221358805466416710872761065673705093287",
"83312655811838863303579297765353858917",
"20771379011207537991205883108701029539"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-fae40192",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce",
"target": {
"file": "shell/browser/electron_permission_manager.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"210093303512527750684042608225550729058",
"68283665547836407651089372034444433267",
"326466976312245619244493206458270180212",
"54693506234803879187004883484104574131",
"111335901640355941312857886739880713580",
"251823480444184021576935084636477721246",
"75822209127868849416655486729361999146",
"276891719029704464593158896034715541537",
"141736504432817457606234446504790803671",
"299874751601194721710103151603660255762",
"260618697905172730954763805666077269664",
"136554262591433285867387891327439144536",
"302208083091011774024106840203977795989",
"91464071171559473910317234262363483613"
],
"threshold": 0.9
},
"id": "CVE-2026-114121-fc2637d3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce",
"target": {
"file": "shell/browser/web_contents_permission_helper.h"
}
}
]
"2026-10-22T07:41:26Z"