https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-102677.htmlhttps://patchthecve.com/cve/CVE-2026-102677.htmlThu, 08 Oct 2026 20:24:30 +0000HIGH 7.8: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer couldhttps://patchthecve.com/cve/CVE-2026-102676.htmlhttps://patchthecve.com/cve/CVE-2026-102676.htmlThu, 15 Oct 2026 13:47:42 +0000HIGH 8.3: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron <webview> guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integrationhttps://patchthecve.com/cve/CVE-2026-102674.htmlhttps://patchthecve.com/cve/CVE-2026-102674.htmlThu, 15 Oct 2026 13:58:37 +0000HIGH 8.2: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, windows opened from a sandboxed top-level document did not inherit that document's active HTML sandbox restrictions. Untrusted content in a sanhttps://patchthecve.com/cve/CVE-2026-102673.htmlhttps://patchthecve.com/cve/CVE-2026-102673.htmlThu, 15 Oct 2026 14:01:06 +0000HIGH 8.2: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.4, 42.5.2, and 43.0.0, popups opened from a sandboxed iframe through Electron's OpenURLFromTab navigation path, including links using target="_blank" or a middle-click, did not rece