CVE-2026-34774 - Vulnerability Analysis

Overview

Electron < 39.8.1, < 40.7.0, and < 41.0.0 contain a use-after-free caused by dereferencing freed memory in child windows when parent offscreen WebContents is destroyed, letting attackers cause crashes or memory corruption, exploit requires use of offscreen rendering and allowed child windows.

Severity & Score

Impact

Attackers can cause application crashes or memory corruption, potentially leading to denial of service or further exploitation.

Mitigation

Update to versions 39.8.1, 40.7.0, 41.0.0 or later.

References

• https://github.com/electron/electron/security/advisories/GHSA-532v-xpq5-8h95

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner