CVE-2026-34776Disclosure(electronjs / electron)

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on macOS and Linux, apps that call app.requestSingleInstanceLock() were vulnerable to an out-of-bounds heap read when parsing a crafted second-instance message. Leaked memory could be delivered to the app's second-instance event handler. This issue is limited to processes running as the same user as the Electron app. Apps that do not call app.requestSingleInstanceLock() are not affected. Windows is not affected by this issue. This issue has been patched in versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0.

electronjs CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/electron/electron/security/advisories/GHSA-3c8v-cfp5-9885

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

electron

Threat summary

2 mentions across 1 observed day

What's happening

Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

electronjs

Products

electron

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud187d
Disclosure
🚨*CVE* CVE-2026-34776 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on macOS… https://www.cve.org/CVERecord?id=CVE-2026-34776 ----- Traducción: CVE-2026-34776 Ele… http://infoflow.cloud`
Post summary
A new CVE (CVE-2026-34776) affecting Electron on macOS is announced with affected version ranges and a link to the CVE record, but it contains no PoC, exploit, patch, or active exploitation details.
0000042
67 followersView on X
CVE@CVEnew187d
General
CVE-2026-34776 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on macOS… https://www.cve.org/CVERecord?id=CVE-2026-34776
Post summary
The text briefly mentions CVE‑2026‑34776 with affected Electron versions and links to the CVE record, but provides no further technical or practical details.
00000181
57.0K followersView on X

CPE platform detail15 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

15 of 15 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	electronjs	electron	-	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-
App	electronjs	electron	41.0.0	node.js	-

Explore more

Back to dashboard electronjs CVEs electron vulnerabilities