{"id":"CVE-2020-26272","details":"The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS. In versions of Electron IPC prior to 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9, messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, can in some cases be delivered to the wrong frame. If your app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler then it is impacted by this issue. This has been fixed in versions 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9. There are no known workarounds for this issue.","aliases":["GHSA-hvf8-h2qh-37m9"],"modified":"2026-08-07T14:53:20.531879Z","published":"2021-01-28T19:15:13.003Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:electronjs:electron:10.0.0:beta10:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta11:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta12:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta13:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta14:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta15:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta17:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta19:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta20:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta21:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta23:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta24:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta25:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta3:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta4:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta5:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta6:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta7:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta8:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:10.0.0:beta9:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta10:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta11:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta12:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta13:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta14:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta15:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta16:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta17:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta18:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta19:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta20:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta21:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta22:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta23:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta3:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta4:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta5:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta6:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta7:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta8:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:11.0.0:beta9:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta3:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta4:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta5:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta6:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta7:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta8:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:12.0.0:beta9:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta10:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta11:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta12:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta13:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta14:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta15:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta16:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta17:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta18:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta19:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta20:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta21:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta22:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta23:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta24:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta3:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta4:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta5:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta6:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta7:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta8:*:*:*:*:*:*","cpe:2.3:a:electronjs:electron:9.0.0:beta9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0.0-beta1"},{"last_affected":"9.0.0-beta1"},{"introduced":"9.0.0-beta10"},{"last_affected":"9.0.0-beta10"},{"introduced":"9.0.0-beta11"},{"last_affected":"9.0.0-beta11"},{"introduced":"9.0.0-beta12"},{"last_affected":"9.0.0-beta12"},{"introduced":"9.0.0-beta13"},{"last_affected":"9.0.0-beta13"},{"introduced":"9.0.0-beta14"},{"last_affected":"9.0.0-beta14"},{"introduced":"9.0.0-beta15"},{"last_affected":"9.0.0-beta15"},{"introduced":"9.0.0-beta16"},{"last_affected":"9.0.0-beta16"},{"introduced":"9.0.0-beta17"},{"last_affected":"9.0.0-beta17"},{"introduced":"9.0.0-beta18"},{"last_affected":"9.0.0-beta18"},{"introduced":"9.0.0-beta19"},{"last_affected":"9.0.0-beta19"},{"introduced":"9.0.0-beta2"},{"last_affected":"9.0.0-beta2"},{"introduced":"9.0.0-beta20"},{"last_affected":"9.0.0-beta20"},{"introduced":"9.0.0-beta21"},{"last_affected":"9.0.0-beta21"},{"introduced":"9.0.0-beta22"},{"last_affected":"9.0.0-beta22"},{"introduced":"9.0.0-beta23"},{"last_affected":"9.0.0-beta23"},{"introduced":"9.0.0-beta24"},{"last_affected":"9.0.0-beta24"},{"introduced":"9.0.0-beta3"},{"last_affected":"9.0.0-beta3"},{"introduced":"9.0.0-beta4"},{"last_affected":"9.0.0-beta4"},{"introduced":"9.0.0-beta5"},{"last_affected":"9.0.0-beta5"},{"introduced":"9.0.0-beta6"},{"last_affected":"9.0.0-beta6"},{"introduced":"9.0.0-beta7"},{"last_affected":"9.0.0-beta7"},{"introduced":"9.0.0-beta8"},{"last_affected":"9.0.0-beta8"},{"introduced":"9.0.0-beta9"},{"last_affected":"9.0.0-beta9"},{"introduced":"10.0.0-beta1"},{"last_affected":"10.0.0-beta1"},{"introduced":"10.0.0-beta10"},{"last_affected":"10.0.0-beta10"},{"introduced":"10.0.0-beta11"},{"last_affected":"10.0.0-beta11"},{"introduced":"10.0.0-beta12"},{"last_affected":"10.0.0-beta12"},{"introduced":"10.0.0-beta13"},{"last_affected":"10.0.0-beta13"},{"introduced":"10.0.0-beta14"},{"last_affected":"10.0.0-beta14"},{"introduced":"10.0.0-beta15"},{"last_affected":"10.0.0-beta15"},{"introduced":"10.0.0-beta17"},{"last_affected":"10.0.0-beta17"},{"introduced":"10.0.0-beta19"},{"last_affected":"10.0.0-beta19"},{"introduced":"10.0.0-beta2"},{"last_affected":"10.0.0-beta2"},{"introduced":"10.0.0-beta20"},{"last_affected":"10.0.0-beta20"},{"introduced":"10.0.0-beta21"},{"last_affected":"10.0.0-beta21"},{"introduced":"10.0.0-beta23"},{"last_affected":"10.0.0-beta23"},{"introduced":"10.0.0-beta24"},{"last_affected":"10.0.0-beta24"},{"introduced":"10.0.0-beta25"},{"last_affected":"10.0.0-beta25"},{"introduced":"10.0.0-beta3"},{"last_affected":"10.0.0-beta3"},{"introduced":"10.0.0-beta4"},{"last_affected":"10.0.0-beta4"},{"introduced":"10.0.0-beta5"},{"last_affected":"10.0.0-beta5"},{"introduced":"10.0.0-beta6"},{"last_affected":"10.0.0-beta6"},{"introduced":"10.0.0-beta7"},{"last_affected":"10.0.0-beta7"},{"introduced":"10.0.0-beta8"},{"last_affected":"10.0.0-beta8"},{"introduced":"10.0.0-beta9"},{"last_affected":"10.0.0-beta9"},{"introduced":"11.0.0-beta1"},{"last_affected":"11.0.0-beta1"},{"introduced":"11.0.0-beta10"},{"last_affected":"11.0.0-beta10"},{"introduced":"11.0.0-beta11"},{"last_affected":"11.0.0-beta11"},{"introduced":"11.0.0-beta12"},{"last_affected":"11.0.0-beta12"},{"introduced":"11.0.0-beta13"},{"last_affected":"11.0.0-beta13"},{"introduced":"11.0.0-beta14"},{"last_affected":"11.0.0-beta14"},{"introduced":"11.0.0-beta15"},{"last_affected":"11.0.0-beta15"},{"introduced":"11.0.0-beta16"},{"last_affected":"11.0.0-beta16"},{"introduced":"11.0.0-beta17"},{"last_affected":"11.0.0-beta17"},{"introduced":"11.0.0-beta18"},{"last_affected":"11.0.0-beta18"},{"introduced":"11.0.0-beta19"},{"last_affected":"11.0.0-beta19"},{"introduced":"11.0.0-beta20"},{"last_affected":"11.0.0-beta20"},{"introduced":"11.0.0-beta21"},{"last_affected":"11.0.0-beta21"},{"introduced":"11.0.0-beta22"},{"last_affected":"11.0.0-beta22"},{"introduced":"11.0.0-beta23"},{"last_affected":"11.0.0-beta23"},{"introduced":"11.0.0-beta3"},{"last_affected":"11.0.0-beta3"},{"introduced":"11.0.0-beta4"},{"last_affected":"11.0.0-beta4"},{"introduced":"11.0.0-beta5"},{"last_affected":"11.0.0-beta5"},{"introduced":"11.0.0-beta6"},{"last_affected":"11.0.0-beta6"},{"introduced":"11.0.0-beta7"},{"last_affected":"11.0.0-beta7"},{"introduced":"11.0.0-beta8"},{"last_affected":"11.0.0-beta8"},{"introduced":"11.0.0-beta9"},{"last_affected":"11.0.0-beta9"},{"introduced":"12.0.0-beta1"},{"last_affected":"12.0.0-beta1"},{"introduced":"12.0.0-beta3"},{"last_affected":"12.0.0-beta3"},{"introduced":"12.0.0-beta4"},{"last_affected":"12.0.0-beta4"},{"introduced":"12.0.0-beta5"},{"last_affected":"12.0.0-beta5"},{"introduced":"12.0.0-beta6"},{"last_affected":"12.0.0-beta6"},{"introduced":"12.0.0-beta7"},{"last_affected":"12.0.0-beta7"},{"introduced":"12.0.0-beta8"},{"last_affected":"12.0.0-beta8"},{"introduced":"12.0.0-beta9"},{"last_affected":"12.0.0-beta9"}],"source":"CPE_STRING","vendor_product":"electronjs:electron"}]},"references":[{"type":"ADVISORY","url":"https://github.com/electron/electron/pull/26875"},{"type":"ADVISORY","url":"https://github.com/electron/electron/releases/tag/v9.4.0"},{"type":"ADVISORY","url":"https://github.com/electron/electron/security/advisories/GHSA-hvf8-h2qh-37m9"},{"type":"ADVISORY","url":"https://www.electronjs.org/releases/stable?version=9#9.4.0"},{"type":"FIX","url":"https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c"},{"type":"FIX","url":"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208"},{"type":"FIX","url":"https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2"},{"type":"FIX","url":"https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc"},{"type":"FIX","url":"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/electron/electron","events":[{"introduced":"4da01641ce50cf5a8b6f39717e4c447f89455dfa"},{"fixed":"f37c1ff6443f2ef6cd946886c735533bf6260c19"},{"introduced":"c5b5ca50a67a237700f649adccf163f0b9aad0c5"},{"fixed":"4594af595eab12e76034d0d0e94539ef390024bb"},{"introduced":"387a15f5829f623c9366d0a4625cc33f5a4758d4"},{"fixed":"101a2282ab3ae030ace05e70043739386c24b3cb"},{"fixed":"07a1c2a3e5845901f7e2eda9506695be58edc73c"},{"fixed":"0bbd268eb4caf35604443df5ff196980dd49e208"},{"fixed":"36c695ce2a7e22c07fe1e30c61c00d20371daee2"},{"fixed":"429400040ecb16a21d19936658579e65a797e4cc"},{"fixed":"5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd"}],"database_specific":{"cpe":"cpe:2.3:a:electronjs:electron:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"9.0.0"},{"fixed":"9.4.0"},{"introduced":"10.0.0"},{"fixed":"10.2.0"},{"introduced":"11.0.0"},{"fixed":"11.1.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v11.0.5","v10.1.7","v11.0.4","v9.3.5","v11.0.3","v11.0.2","v10.1.6","v11.0.1","v11.0.0","v9.3.4","v9.3.3","v10.1.5","v10.1.4","v9.3.2","v10.1.3","v9.3.1","v10.1.2","v9.3.0","v10.1.1","v10.1.0","v10.0.1","v10.0.0","v9.2.1","v9.2.0","v9.1.2","v9.1.1","v9.1.0","v9.0.6","v9.0.5","v9.0.4","v9.0.3","v9.0.2","v9.0.1","v9.0.0"],"database_specific":{"vanir_signatures":[{"source":"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208","target":{"file":"shell/common/api/remote/remote_callback_freer.h"},"deprecated":false,"digest":{"line_hashes":["313032440630604907223703712367315031497","83197735551558352911174960639675331891","262455343727397153432625609602267453818","147742664690478424494676506633580142686","117244084029845088249232771183968328361","103401991121920233803149889087050468015","183123773462621202266894728999170444351","147742664690478424494676506633580142686","185174950397666370123716889882210309977","110054631361664851758590526695117882308","88369396556858057782605083516530217270","83554369435245901066597023302882475732"],"threshold":0.9},"id":"CVE-2020-26272-04e82f0c","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd","target":{"file":"shell/common/api/remote/remote_callback_freer.h"},"deprecated":false,"digest":{"line_hashes":["313032440630604907223703712367315031497","83197735551558352911174960639675331891","262455343727397153432625609602267453818","147742664690478424494676506633580142686","117244084029845088249232771183968328361","103401991121920233803149889087050468015","183123773462621202266894728999170444351","147742664690478424494676506633580142686","185174950397666370123716889882210309977","110054631361664851758590526695117882308","88369396556858057782605083516530217270","83554369435245901066597023302882475732"],"threshold":0.9},"id":"CVE-2020-26272-0841a569"},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c","target":{"file":"shell/common/gin_helper/event_emitter.cc"},"deprecated":false,"digest":{"line_hashes":["245984452434646337200063399336997769655","132475682388429538998910461779838567299","181795265450562538829351116307706265918","183474686773543786798413565345237138256","65061730555892512890488248059829659862","179966689541382938445925330339670496392","104157118008051671957768437988763371346"],"threshold":0.9},"id":"CVE-2020-26272-14cbf949","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["287205841254502126395013713886078832934","142898809094716955430341410026077155259","15439720782795250393735098077939218399","182950242858280576171103341694523513130","5876225114195792717144737006117293343","223290068118242090994011858547218091545","236632885221594991751031321296683685587","206214436811680868532001440442209278227","178641189899975236565140470433134671115","2508836763789185739556126658258170977","246033333725504385989276433967000175798","102290467538447217642659619127202112389","318062980058434488377787339922332087419","296451280269323490138728269617060190838","256060359665179448562459742671970585680","295845677708379514334721721017657725002","301725277742181896432511116192743128019"]},"id":"CVE-2020-26272-1838074a","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd","target":{"file":"shell/browser/api/electron_api_web_contents.cc"}},{"source":"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208","target":{"file":"shell/browser/api/electron_api_web_contents.h"},"deprecated":false,"digest":{"line_hashes":["259626012671428820934679576571791564272","190888827895443283507189164906074420513","140114056141223143105956523774720280216","323984724206437864177961710133179841237"],"threshold":0.9},"id":"CVE-2020-26272-19cf83ae","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208","target":{"file":"shell/common/api/remote/remote_callback_freer.cc"},"deprecated":false,"digest":{"line_hashes":["286546095561722849304899761614243606370","18594053933147830935146762621454189881","231744994441500991232230753212301907421","147742664690478424494676506633580142686","225478983946948299042794069263406854697","155908254062235301081122339545368807131","113263493416511065577179012511659304799","33770344712824465416138643710495897284","65467732814744102592409384208054786610","50465836792174489854299633506672120570","156228786641059252339118863713545955313","58034794325934109090949819898393575455","147742664690478424494676506633580142686","62473832892499251564086550250572886934","268875754937602499414675415335897911256","82413767142776151616339699397539184835","326328112980054107830867134204970401986","337799738599541814054532293596149286346","332440534599940154327226532152897528635","132554946538616583053448283770668316321","219414745585961351299723657212182395995","121202287163674045107233119935464359180","78589303759395228020773884345992410259","276741656170477293699742489778032574516","232976832141171976369752706427772500095","293955162568213765605321527794583283599","127370560358776926474583449499664163330","254610680437732091224903217537865617309","20363517208715894320276692211536556011","236238828480783366741635939204395195924","184631512299303109827892524831286415373"],"threshold":0.9},"id":"CVE-2020-26272-24e86639","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["259626012671428820934679576571791564272","190888827895443283507189164906074420513","140114056141223143105956523774720280216","323984724206437864177961710133179841237"],"threshold":0.9},"id":"CVE-2020-26272-28568229","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2","target":{"file":"shell/browser/api/electron_api_web_contents.h"}},{"source":"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd","target":{"file":"shell/common/gin_helper/event_emitter.cc"},"deprecated":false,"digest":{"line_hashes":["245984452434646337200063399336997769655","132475682388429538998910461779838567299","181795265450562538829351116307706265918","183474686773543786798413565345237138256","65061730555892512890488248059829659862","179966689541382938445925330339670496392","104157118008051671957768437988763371346"],"threshold":0.9},"id":"CVE-2020-26272-30546e15","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["259626012671428820934679576571791564272","190888827895443283507189164906074420513","140114056141223143105956523774720280216","323984724206437864177961710133179841237"],"threshold":0.9},"id":"CVE-2020-26272-5c372b63","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc","target":{"file":"shell/browser/api/electron_api_web_contents.h"}},{"deprecated":false,"digest":{"function_hash":"213465454861229333496615410510581771599","length":576},"id":"CVE-2020-26272-77e39721","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208","target":{"file":"shell/common/api/remote/remote_callback_freer.cc","function":"RemoteCallbackFreer::RunDestructor"}},{"deprecated":false,"digest":{"line_hashes":["245984452434646337200063399336997769655","132475682388429538998910461779838567299","181795265450562538829351116307706265918","183474686773543786798413565345237138256","65061730555892512890488248059829659862","179966689541382938445925330339670496392","104157118008051671957768437988763371346"],"threshold":0.9},"id":"CVE-2020-26272-8487b6c8","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc","target":{"file":"shell/common/gin_helper/event_emitter.cc"}},{"deprecated":false,"digest":{"line_hashes":["286546095561722849304899761614243606370","18594053933147830935146762621454189881","231744994441500991232230753212301907421","147742664690478424494676506633580142686","225478983946948299042794069263406854697","155908254062235301081122339545368807131","113263493416511065577179012511659304799","33770344712824465416138643710495897284","65467732814744102592409384208054786610","50465836792174489854299633506672120570","156228786641059252339118863713545955313","58034794325934109090949819898393575455","147742664690478424494676506633580142686","62473832892499251564086550250572886934","268875754937602499414675415335897911256","82413767142776151616339699397539184835","326328112980054107830867134204970401986","337799738599541814054532293596149286346","332440534599940154327226532152897528635","132554946538616583053448283770668316321","219414745585961351299723657212182395995","121202287163674045107233119935464359180","78589303759395228020773884345992410259","276741656170477293699742489778032574516","232976832141171976369752706427772500095","293955162568213765605321527794583283599","127370560358776926474583449499664163330","254610680437732091224903217537865617309","20363517208715894320276692211536556011","236238828480783366741635939204395195924","184631512299303109827892524831286415373"],"threshold":0.9},"id":"CVE-2020-26272-88bc5f8d","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd","target":{"file":"shell/common/api/remote/remote_callback_freer.cc"}},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c","target":{"file":"shell/browser/api/electron_api_web_contents.h"},"deprecated":false,"digest":{"line_hashes":["16023040936284061033740414276037819986","261015332494660348124059935672633569702","252396433010161011977279938552784780172","323984724206437864177961710133179841237"],"threshold":0.9},"id":"CVE-2020-26272-a1de8ade","signature_type":"Line"},{"target":{"file":"shell/browser/api/electron_api_web_contents.cc"},"deprecated":false,"digest":{"line_hashes":["287205841254502126395013713886078832934","142898809094716955430341410026077155259","15439720782795250393735098077939218399","182950242858280576171103341694523513130","5876225114195792717144737006117293343","223290068118242090994011858547218091545","236632885221594991751031321296683685587","206214436811680868532001440442209278227","178641189899975236565140470433134671115","2508836763789185739556126658258170977","246033333725504385989276433967000175798","102290467538447217642659619127202112389","318062980058434488377787339922332087419","296451280269323490138728269617060190838","256060359665179448562459742671970585680","295845677708379514334721721017657725002","301725277742181896432511116192743128019"],"threshold":0.9},"id":"CVE-2020-26272-a55e3956","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208"},{"target":{"file":"shell/common/gin_helper/event_emitter.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["245984452434646337200063399336997769655","132475682388429538998910461779838567299","181795265450562538829351116307706265918","183474686773543786798413565345237138256","65061730555892512890488248059829659862","179966689541382938445925330339670496392","104157118008051671957768437988763371346"]},"id":"CVE-2020-26272-acb847cf","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208"},{"deprecated":false,"digest":{"function_hash":"213465454861229333496615410510581771599","length":576},"id":"CVE-2020-26272-bb1a7427","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd","target":{"file":"shell/common/api/remote/remote_callback_freer.cc","function":"RemoteCallbackFreer::RunDestructor"}},{"deprecated":false,"digest":{"line_hashes":["245984452434646337200063399336997769655","132475682388429538998910461779838567299","181795265450562538829351116307706265918","183474686773543786798413565345237138256","65061730555892512890488248059829659862","179966689541382938445925330339670496392","104157118008051671957768437988763371346"],"threshold":0.9},"id":"CVE-2020-26272-bd0a0966","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2","target":{"file":"shell/common/gin_helper/event_emitter.cc"}},{"target":{"file":"shell/browser/api/electron_api_web_contents.cc"},"deprecated":false,"digest":{"line_hashes":["287205841254502126395013713886078832934","142898809094716955430341410026077155259","15439720782795250393735098077939218399","153759453852004843131803498537909663200","219031189397780464877209732934955614333","223290068118242090994011858547218091545","236632885221594991751031321296683685587","206214436811680868532001440442209278227","178641189899975236565140470433134671115","2508836763789185739556126658258170977","246033333725504385989276433967000175798","102290467538447217642659619127202112389","318062980058434488377787339922332087419","296451280269323490138728269617060190838","256060359665179448562459742671970585680","295845677708379514334721721017657725002","301725277742181896432511116192743128019"],"threshold":0.9},"id":"CVE-2020-26272-d814d793","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2"},{"target":{"file":"shell/browser/api/electron_api_web_contents.h"},"deprecated":false,"digest":{"line_hashes":["259626012671428820934679576571791564272","190888827895443283507189164906074420513","140114056141223143105956523774720280216","323984724206437864177961710133179841237"],"threshold":0.9},"id":"CVE-2020-26272-e0c806e8","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c","target":{"file":"shell/browser/api/electron_api_web_contents.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["106505602959973383940994886937260803597","235996486376174733981178229482520875689","173302040137704966800277636069628800380","153759453852004843131803498537909663200","219031189397780464877209732934955614333","223290068118242090994011858547218091545","236632885221594991751031321296683685587","206214436811680868532001440442209278227","178641189899975236565140470433134671115","2508836763789185739556126658258170977","246033333725504385989276433967000175798","102290467538447217642659619127202112389","318062980058434488377787339922332087419","296451280269323490138728269617060190838","55404362077133348940758015694065464844","204093587208131812488658372570920700381","247419182561815150224337625135513180335"]},"id":"CVE-2020-26272-e21c650f"},{"deprecated":false,"digest":{"line_hashes":["287205841254502126395013713886078832934","142898809094716955430341410026077155259","15439720782795250393735098077939218399","153759453852004843131803498537909663200","219031189397780464877209732934955614333","223290068118242090994011858547218091545","236632885221594991751031321296683685587","206214436811680868532001440442209278227","178641189899975236565140470433134671115","2508836763789185739556126658258170977","246033333725504385989276433967000175798","102290467538447217642659619127202112389","318062980058434488377787339922332087419","296451280269323490138728269617060190838","256060359665179448562459742671970585680","295845677708379514334721721017657725002","301725277742181896432511116192743128019"],"threshold":0.9},"id":"CVE-2020-26272-ec7ded07","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc","target":{"file":"shell/browser/api/electron_api_web_contents.cc"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26272.json","vanir_signatures_modified":"2026-08-07T14:53:20Z"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}