Threats tagged 'ghsa-pfmc-3mgc-p6fp'

CVE-2026-70598 is a low-severity vulnerability in Electron affecting applications that use offscreen rendering mode. The main process does not fully validate frame data received from the GPU process, allowing a compromised GPU process to cause out-of-bounds memory reads. This can lead to memory disclosure or application crashes. Only apps using offscreen rendering (webPreferences.offscreen) and with attacker control over the GPU process are affected. Fixed versions are 39.8.10 and later.