Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop thumbnails at arbitrary resolution without user consent or operating system permission prompts.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Jitsi Electron SDK εκθέτει οθόνες χωρίς συγκατάθεση https://www.secnews.gr/733473/jitsi-electron-sdk-cve-2026-92299/?fsp_sid=12663
Post summary
The text is a brief news headline announcing CVE-2026-92299 affecting Jitsi Electron SDK, stating it exposes screens without consent, but provides no further technical details, exploit information, remediation guidance, or PoC references.