CVE-2020-4077

Name of the Vulnerable Software and Affected Versions Electron versions prior to 7.2.4 Electron versions prior to 8.2.4 Electron versions prior to 9.0.0-beta21

Description The issue is a context isolation bypass, allowing code running in the main world context in the renderer to reach into the isolated Electron context and perform privileged actions. This affects apps using both contextIsolation and contextBridge.

Recommendations For versions prior to 7.2.4, update to version 7.2.4 or later. For versions prior to 8.2.4, update to version 8.2.4 or later. For versions prior to 9.0.0-beta21, update to version 9.0.0-beta21 or later.