CVE-2026-114124

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.11.6 Electron versions prior to 43.7.3 Electron versions prior to 44.4.3 Electron versions prior to 45.0.0-alpha.9

Description In the main process for macOS offscreen rendering, frame data received from the GPU process is not fully validated. An attacker with existing code execution in the GPU process can provide inconsistent frame geometry, leading the main process to read out-of-bounds memory during the production of paint event images. This can result in memory disclosure or an application crash.

Recommendations Update to version 42.11.6 Update to version 43.7.3 Update to version 44.4.3 Update to version 45.0.0-alpha.9