CVE-2026-113798 | Electron up to 42.11.8/43.7.5/44.4.x/45.0.0-alpha.12 PointerLock session.setPermissionRequestHandler isMainFrame cross-domain policy

October 21, 2026 Yanac

A vulnerability was found in Electron up to 42.11.8/43.7.5/44.4.x/45.0.0-alpha.12 and classified as problematic. This issue affects the function session.setPermissionRequestHandler of the component PointerLock. The manipulation of the argument isMainFrame results in permissive cross-domain policy with untrusted domains.

This vulnerability is known as CVE-2026-113798. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More