{"id":"CVE-2026-102677","summary":"Electron: Sandboxed preload code cache can be poisoned by a compromised renderer","details":"Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer's code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6.","aliases":["GHSA-qmv3-fv6v-rmhq"],"modified":"2026-10-01T08:05:53.377406Z","published":"2026-09-29T17:43:26.960Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-20","CWE-345"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102677.json"},"references":[{"type":"WEB","url":"https://github.com/electron/electron/releases/tag/v42.10.0"},{"type":"WEB","url":"https://github.com/electron/electron/releases/tag/v43.5.0"},{"type":"WEB","url":"https://github.com/electron/electron/releases/tag/v44.0.0-beta.6"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102677.json"},{"type":"ADVISORY","url":"https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102677"},{"type":"FIX","url":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"},{"type":"FIX","url":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"},{"type":"FIX","url":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"},{"type":"FIX","url":"https://github.com/electron/electron/pull/52480"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/electron/electron","events":[{"introduced":"22bbbc9f265d4b6f138f6dc7451891241037a780"},{"introduced":"12d2c95b44e1e5470834c9e49d1c9da5f26deadb"},{"introduced":"5662a2e9f7465c8c192392ef6d10d7ba38100145"},{"fixed":"9f0109679540320c5dc5b7bef0aa94733058e8c2"},{"fixed":"87cd122b5de69555831cd752578b810dd6e504d8"},{"fixed":"d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2"},{"fixed":"000453e399bd1dee5e86376cdd9ece5fc071e601"},{"fixed":"25ba8be57c65a83d8c14ebb8aa37693df17a04f3"},{"fixed":"c38d6fd68756f04647ea857bdb6a2abec332e217"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"42.3.3"},{"fixed":"42.10.0"},{"introduced":"43.0.0-beta.1"},{"fixed":"43.5.0"},{"introduced":"44.0.0-alpha.1"},{"fixed":"44.0.0-beta.6"}]}}],"versions":["v45.0.0-nightly.20260804","v43.4.2","v42.9.3","v43.4.1","v44.0.0-beta.5","v42.9.2","v42.9.1","v44.0.0-beta.4","v42.9.0","v43.4.0","v44.0.0-beta.3","v44.0.0-beta.2","v44.0.0-beta.1","v45.0.0-nightly.20260805","v43.3.0","v42.8.1","v44.0.0-alpha.9","v45.0.0-nightly.20260803","v45.0.0-nightly.20260731","v44.0.0-alpha.8","v45.0.0-nightly.20260730","v45.0.0-nightly.20260729","v45.0.0-nightly.20260728","v42.8.0","v44.0.0-alpha.7","v45.0.0-nightly.20260727","v45.0.0-nightly.20260724","v44.0.0-alpha.6","v45.0.0-nightly.20260723","v42.7.1","v45.0.0-nightly.20260722","v43.2.0","v45.0.0-nightly.20260721","v44.0.0-alpha.5","v45.0.0-nightly.20260720","v45.0.0-nightly.20260716","v42.7.0","v43.1.1","v45.0.0-nightly.20260714","v42.6.2","v44.0.0-alpha.4","v45.0.0-nightly.20260709","v44.0.0-alpha.3","v42.6.1","v43.1.0","v45.0.0-nightly.20260706","v44.0.0-alpha.2","v42.6.0","v45.0.0-nightly.20260703","v45.0.0-nightly.20260702","v44.0.0-alpha.1","v42.5.2","v43.0.0","v43.0.0-beta.9","v42.5.1","v43.0.0-beta.8","v42.5.0","v43.0.0-beta.7","v43.0.0-beta.6","v43.0.0-beta.5","v42.4.1","v43.0.0-beta.4","v43.0.0-beta.3","v42.4.0","v43.0.0-beta.2","v43.0.0-beta.1","v42.3.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102677.json","vanir_signatures_modified":"2026-10-01T08:05:53Z","vanir_signatures":[{"source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/renderer_startup_data.cc","function":"Build"},"deprecated":false,"digest":{"function_hash":"61634541215885674796335232828932350222","length":1052},"id":"CVE-2026-102677-011b513a","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"66174914814034873753162081376394625829","length":271},"id":"CVE-2026-102677-018f23da","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"function":"ElectronWebContentsUtilityHandlerImpl::SetPreloadCodeCache","file":"shell/browser/electron_web_contents_utility_handler_impl.cc"}},{"digest":{"threshold":0.9,"line_hashes":["164152555480390731009417453315729612780","271530264920600492679567903547225029512","54905484201854182225451177130949505360","187386913831169229401610946648788222148","52525296161364309002732212916163646180","144845396039504973239267370128496545618","201387591847393547926882192489479296471","158106499872945268910532816647085354843","76855885545223483362510131292386724796","273178839672465942084878085276273701437","67845495208080103025614494274840095553","16195712795850577718670500213176355612","39333788080459203377030583245395455935","211708584006985074566591100437487361857","167451801848656710190771857404319870722","321895731879813680879985026535411394415","37927912697164888703378415415012120653","224166502972826514166048292139177189976","261318314532328423757532691170273382878","322512553616171351970919188410851022644","27219349168120376018734286330170354427","224357746194202686444229443549642843032","327077175006782184885179214364426090304","151950987951955044828270906005039439220","240203550400885586354761362663332158180","163058050443444794894059888744793630357","323820820186760474447124778699223075725","234781445825155355822276011949915049676","315573250536492223317970914658276529454","276743520286920816203083717910211266735","144280351435126076974255281839074927189","97746897367747998243119754336039740616","68783013629382555574196284128003987325","224561875707183910733230370998496492416","72882061634130586085584059142010924328","120681002069651483949972576730519971752","93562733240714246127111802074062953072","11168358219383133635029514099344132979","95204146717257931986442330712032189732","271845610360892346102851328595265948231","337503807532254491705159088996811420913","311948816779720521343432240584132098595","49834362565964453462383474297735469629","287757906452196661746036177890545995623","262969975149489671512641224668460990874","178214164544584890189782410051882359197","153104501820838235036763510050451869057","179792562836322882151644878255014835075","310808421768291215557294706625612396040","70761263802414303825504370939787583416","17245669832480359156401198266765370022","269976499263756904889985166953163837778","109256428741195136653931297626748755659","147256422240218221557757333791584525511","258263541089471076541821696328496892919","340080310172387346817068445511452260787","37322383780097090386826077828252201829","196222215906373173670040564856878193417","334836289699548017971641005701299785972","107788576274502113744952577896473729668","172676781553573993376821579763146061652","28386204852595065194684703334365923004","67207469820270487465559673175949024196","87556517567203521333887414857482936774","124308356522965524108705131751218517613","151885128965193386301699263872951164388","32710991666331411219458131469908761344","113759407051568868123878418878484850608","62151746360611438670085849472655194902","115884170383087779375302173035612510606","224656755036714273754484240604958772793"]},"id":"CVE-2026-102677-0396c6e3","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/preload_code_cache.cc"},"deprecated":false},{"source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/api/electron_api_web_contents.cc"},"deprecated":false,"digest":{"line_hashes":["323876708886528385364933281441112654765","44531664495082372049787945962142068431","289163799047821110780703836118055684443","87147331292662210894689562176345352453","328450939450122868745081626868266670020","298632676575134395949485706877404844445","318563180853368295389635752733970980725","338697159069973325940955916171823615437","27513186537579621354759514465698969710","248794963789461237121578854028472729042","202356998013711111734258045529081016063","99863336717754546229939780904891749231","258032962131531610834714151040434994248","210379830990459436935744236436572611574","257615555074122256882655352316356589419","250120484666968593209399938784002608188","90243815877299185652387964908372475607","185560598973977910439791399189327502817","306460319225493980320594400861554409284","103273203760672105377856825998382623208","267184998288225122987513280379258582865","53557311846959317478434270853997637754","17578048502706677925911135631604791879","178004062859580561927519940250462828260","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","3948705258101531661485224480137892599","241243474508281110046435759785406558065"],"threshold":0.9},"id":"CVE-2026-102677-0429becd","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-102677-04a61846","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_win.cc"},"deprecated":false,"digest":{"line_hashes":["18168080414355061726774139139641102507","280736933400310981567976517335947879042","137942097715505811156187150594324158058","157623138267408501131938333029949253428","109580323381380122976737283189905040378","96510536172223009726855169933114968621","15493854490817710500057452953748584727","218775342414107081125054045903977031804","63587449562396815481089309489431617187"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"248506346983806351909891705204099640678","length":769},"id":"CVE-2026-102677-08a602e8","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc","function":"IsPreloadIdServedToFrame"}},{"deprecated":false,"digest":{"line_hashes":["187701269219132800653537624154018743411","197377759802376290773443589576219845063","88208482334894512760447625893516027547","176888041750551260185636094202725441250","52601806839050519839329916218487858682","224880798331880448608455110939848305711","29819548055233332801793968827880934911","121480078114941039815672656672387879819","140290810136000862910675033920506419446","259577933912058717284323583761656770956","22343469960176940591041916328676137272","314032086589785297712823851997760965823","45069017490567937440057723392693162760","192930091687162084326700191060249140341","200963242128509485279070121416482094003","163689629252820804725562641998533736142","99863336717754546229939780904891749231","258032962131531610834714151040434994248","210379830990459436935744236436572611574","257615555074122256882655352316356589419","250120484666968593209399938784002608188","90243815877299185652387964908372475607","185560598973977910439791399189327502817","306460319225493980320594400861554409284","103273203760672105377856825998382623208","267184998288225122987513280379258582865","53557311846959317478434270853997637754","17578048502706677925911135631604791879","178004062859580561927519940250462828260","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","72914435939149854220799550483784052427","261020509864539791718316125288237230699"],"threshold":0.9},"id":"CVE-2026-102677-0967c40f","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/electron_browser_client.cc"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/api/electron_api_web_contents.cc"},"deprecated":false,"digest":{"line_hashes":["323876708886528385364933281441112654765","44531664495082372049787945962142068431","289163799047821110780703836118055684443","87147331292662210894689562176345352453","328450939450122868745081626868266670020","298632676575134395949485706877404844445","318563180853368295389635752733970980725","338697159069973325940955916171823615437","27513186537579621354759514465698969710","248794963789461237121578854028472729042","202356998013711111734258045529081016063","99863336717754546229939780904891749231","258032962131531610834714151040434994248","210379830990459436935744236436572611574","257615555074122256882655352316356589419","250120484666968593209399938784002608188","90243815877299185652387964908372475607","185560598973977910439791399189327502817","306460319225493980320594400861554409284","103273203760672105377856825998382623208","267184998288225122987513280379258582865","53557311846959317478434270853997637754","17578048502706677925911135631604791879","178004062859580561927519940250462828260","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","3948705258101531661485224480137892599","241243474508281110046435759785406558065"],"threshold":0.9},"id":"CVE-2026-102677-09815e7b"},{"deprecated":false,"digest":{"function_hash":"11839357046685150868980489906351850128","length":280},"id":"CVE-2026-102677-09a60e53","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"spec/fixtures/native-addon/echo/binding.cc","function":"Init"}},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_linux.cc"},"deprecated":false,"digest":{"line_hashes":["19122924628815479136940271761721509787","269358831072548517190404932873839626459","194506384172646353672904959142677426804","231556607737428944624092838432299465097","214500470331709391331243104952347481920","164407700261249016091328428759474830865","273658211151515486524583714197946095573","328089786576289367772670334850852621601","35592937924054267604316525628421605735"],"threshold":0.9},"id":"CVE-2026-102677-0a1f9317","signature_type":"Line"},{"digest":{"function_hash":"84445653221046951918196599730004315110","length":1710},"id":"CVE-2026-102677-0e3316bf","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/api/electron_api_web_contents.cc","function":"WebContents::MaybeSendRendererStartupData"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"function":"Get","file":"shell/browser/preload_code_cache.cc"},"deprecated":false,"digest":{"function_hash":"264520674465608311905677484657322386470","length":521},"id":"CVE-2026-102677-11287883","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"282936313082141270105077797509613107838","length":1621},"id":"CVE-2026-102677-13e96d8d","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"function":"ElectronBrowserMainParts::PostEarlyInitialization","file":"shell/browser/electron_browser_main_parts.cc"}},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/renderer/electron_renderer_client.h"},"deprecated":false,"digest":{"line_hashes":["106630383262248997257730086749376540345","145920595995393033457765938705738052059","56808855366185746878781653552698793895","124798682566627096055617122897619317659","339507761510523818894997391941224039190","82956280196168538028636287764531832108","308096271366812820078479895939084443981","131044009498420557638214111164256877898","202298420118720065842792650228486662509","313170994090211622200589619830480282448","20885423339452519326470919963115675000","263862244470668880317770945439618623405"],"threshold":0.9},"id":"CVE-2026-102677-15a969d1","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"317477897044239357660342637699954599694","length":462},"id":"CVE-2026-102677-17f7a506","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_win.cc","function":"NodeBindingsWin::NodeBindingsWin"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/renderer/web_worker_observer.h"},"deprecated":false,"digest":{"line_hashes":["116845076937383745641902229189878786310","201343205840029072056948100181976045017","294107052711412901267670933410646849008","266698199045362253933423476987080055057","8170522567335629518854938973326361778","135020422105359451471838434089580889610","227847877900283036602590972179725204847"],"threshold":0.9},"id":"CVE-2026-102677-1acf34af"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/preload_code_cache.cc","function":"Get"},"deprecated":false,"digest":{"function_hash":"264520674465608311905677484657322386470","length":521},"id":"CVE-2026-102677-1e2ab101"},{"source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/preload_code_cache.h"},"deprecated":false,"digest":{"line_hashes":["23502642046232870537864689785944161280","133860302453990715375217017199335145732","55445174055244424792477677747118177219","54036219258868289639392099680333016910","192757767910590609721473172430966868662","220899921258288579311799402782609927222","264418830828078922645700179220234061932","240371311772216333333003380785261554257","148510489298908290214686080136059566501","309458786327875824893913982241312544051","211310497466936054046506553948874633034","132180048135684017981419617686935472799","83800796865909777219588521607897422907"],"threshold":0.9},"id":"CVE-2026-102677-1f00df89","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-102677-23545eb4","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/renderer_startup_data.h"},"deprecated":false,"digest":{"line_hashes":["32897972946630975182327061897855340243","60814692337830798081390012818351050239","133636763096863617255820211578107289143","141728492821189039675860477808569587769","99996678521403369771296942084077248113","34643263199913178063648487972824318827","276089788455214798097820822812414108933"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"function":"WebWorkerObserver::Create","file":"shell/renderer/web_worker_observer.cc"},"deprecated":false,"digest":{"length":163,"function_hash":"59376260553317120176110942072817112545"},"id":"CVE-2026-102677-2516b1d3"},{"deprecated":false,"digest":{"line_hashes":["299838570197567519635241933746894122545","318793135832295640206885146379141298258","265155071246816866427547637252595393898","117733110891905159115948385056603738482","155167957048853558084557809373475913704","207229192355930638695213977019752521236","266514121124933070272937813836032769296","84870007563085679731186997242985186328"],"threshold":0.9},"id":"CVE-2026-102677-269f3a77","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/services/node/node_service.cc"}},{"deprecated":false,"digest":{"line_hashes":["270938652896245718142665658451859583688","310779313768392402225484523147058861374","44146569664863112142201017841492860541","225412956012503694453690421179196159673","260687157943261606406802898785718257719","157531724254025645239861552013240017513","234404869842107638848427728010037633871","220001257939427761902319226599814863146","41378929746040596703298796953200063361","40721844151251716782225225143918392780"],"threshold":0.9},"id":"CVE-2026-102677-2c578a20","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/renderer/electron_render_frame_observer.cc"}},{"deprecated":false,"digest":{"line_hashes":["32897972946630975182327061897855340243","60814692337830798081390012818351050239","133636763096863617255820211578107289143","141728492821189039675860477808569587769","99996678521403369771296942084077248113","34643263199913178063648487972824318827","276089788455214798097820822812414108933"],"threshold":0.9},"id":"CVE-2026-102677-2c9ed16b","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/renderer_startup_data.h"}},{"deprecated":false,"digest":{"function_hash":"128141060973518271901459651373420161387","length":450},"id":"CVE-2026-102677-2e1b6119","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/renderer/electron_renderer_client.cc","function":"ElectronRendererClient::GetEnvironment"}},{"id":"CVE-2026-102677-2ef86b46","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/api/electron_api_web_contents.cc","function":"WebContents::MaybeSendRendererStartupData"},"deprecated":false,"digest":{"function_hash":"84445653221046951918196599730004315110","length":1710}},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/renderer_startup_data.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["283421436253944693120562599380805785941","8394563476238643454708143893374498300","243132536657238604019119437894584768912","209531570975281542150284708595409707013","92292526101810363046115242077255441734","81034989801024640743193657553194230390","178287223883726740010599718520275500047","170595155892276075813169674132633792194","277973543919221013643979985358377971820","309077703133026631128126776554265014471","301193497354707608007233287828653538896","80271254696035923863979651634156826023","315242016534936339494346283997315365180","164813499290335461138748271838684080789","103382327716692795451546819633828134370","94841214108110954902454905232736310308","190471885881199262695021778534482147357","186944067400856419638579847965961152800","272411891543343590515472636552030739890","18033127599203180893648746200090261882","109412648791302454566861013806905343520","44757939172521438623347372034696820046","61460604226106624567968599118363129747","40291414281421976639895861029532470919","316777104181798538239721926146362860216","8224723839288398007490250511934870801","73563298546586654797404681754930072586","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","50034012703222041116792797741764650135","68627293935209647813350096133700290943"]},"id":"CVE-2026-102677-31e4bb79","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"49695440297549353587450435271438590747","length":108},"id":"CVE-2026-102677-346efe0f","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_linux.cc","function":"NodeBindings::Create"}},{"digest":{"line_hashes":["323876708886528385364933281441112654765","44531664495082372049787945962142068431","289163799047821110780703836118055684443","87147331292662210894689562176345352453","323667950643804799076856521794616583652","203109499243502476911636598280489728184","265690553254822171836336824471386146160","21301689466746877306444090103290011588","328450939450122868745081626868266670020","298632676575134395949485706877404844445","318563180853368295389635752733970980725","338697159069973325940955916171823615437","27513186537579621354759514465698969710","248794963789461237121578854028472729042","202356998013711111734258045529081016063","99863336717754546229939780904891749231","258032962131531610834714151040434994248","210379830990459436935744236436572611574","257615555074122256882655352316356589419","250120484666968593209399938784002608188","90243815877299185652387964908372475607","185560598973977910439791399189327502817","306460319225493980320594400861554409284","103273203760672105377856825998382623208","267184998288225122987513280379258582865","53557311846959317478434270853997637754","17578048502706677925911135631604791879","178004062859580561927519940250462828260","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","3948705258101531661485224480137892599","241243474508281110046435759785406558065"],"threshold":0.9},"id":"CVE-2026-102677-34a65d30","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/api/electron_api_web_contents.cc"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc","function":"ElectronWebContentsUtilityHandlerImpl::SetPreloadCodeCache"},"deprecated":false,"digest":{"length":271,"function_hash":"66174914814034873753162081376394625829"},"id":"CVE-2026-102677-412432ae","signature_type":"Function"},{"source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings.cc","function":"NodeBindings::~NodeBindings"},"deprecated":false,"digest":{"function_hash":"217746692076323496687751767459844789790","length":207},"id":"CVE-2026-102677-42b7f89d","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-102677-488a89bd","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/renderer_startup_data.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["283421436253944693120562599380805785941","8394563476238643454708143893374498300","243132536657238604019119437894584768912","209531570975281542150284708595409707013","92292526101810363046115242077255441734","81034989801024640743193657553194230390","178287223883726740010599718520275500047","170595155892276075813169674132633792194","277973543919221013643979985358377971820","322693175386151779254717374504325731183","301193497354707608007233287828653538896","80271254696035923863979651634156826023","315242016534936339494346283997315365180","164813499290335461138748271838684080789","103382327716692795451546819633828134370","94841214108110954902454905232736310308","190471885881199262695021778534482147357","186944067400856419638579847965961152800","272411891543343590515472636552030739890","18033127599203180893648746200090261882","109412648791302454566861013806905343520","44757939172521438623347372034696820046","61460604226106624567968599118363129747","40291414281421976639895861029532470919","316777104181798538239721926146362860216","8224723839288398007490250511934870801","73563298546586654797404681754930072586","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","50034012703222041116792797741764650135","68627293935209647813350096133700290943"]}},{"id":"CVE-2026-102677-5c5c75c0","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc","function":"IsPreloadIdServedToFrame"},"deprecated":false,"digest":{"function_hash":"248506346983806351909891705204099640678","length":769}},{"source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/api/electron_api_web_contents.cc","function":"WebContents::MaybeSendRendererStartupData"},"deprecated":false,"digest":{"function_hash":"84445653221046951918196599730004315110","length":1710},"id":"CVE-2026-102677-5ffd4b1b","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-102677-6001eae5","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/preload_code_cache.cc","function":"Set"},"deprecated":false,"digest":{"function_hash":"173690406288058402225269063908397878774","length":917}},{"target":{"file":"shell/browser/electron_browser_client.cc"},"deprecated":false,"digest":{"line_hashes":["187701269219132800653537624154018743411","197377759802376290773443589576219845063","88208482334894512760447625893516027547","176888041750551260185636094202725441250","52601806839050519839329916218487858682","224880798331880448608455110939848305711","29819548055233332801793968827880934911","121480078114941039815672656672387879819","140290810136000862910675033920506419446","259577933912058717284323583761656770956","22343469960176940591041916328676137272","314032086589785297712823851997760965823","45069017490567937440057723392693162760","192930091687162084326700191060249140341","200963242128509485279070121416482094003","163689629252820804725562641998533736142","99863336717754546229939780904891749231","258032962131531610834714151040434994248","210379830990459436935744236436572611574","257615555074122256882655352316356589419","250120484666968593209399938784002608188","90243815877299185652387964908372475607","185560598973977910439791399189327502817","306460319225493980320594400861554409284","103273203760672105377856825998382623208","267184998288225122987513280379258582865","53557311846959317478434270853997637754","17578048502706677925911135631604791879","178004062859580561927519940250462828260","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","72914435939149854220799550483784052427","261020509864539791718316125288237230699"],"threshold":0.9},"id":"CVE-2026-102677-6089a82a","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"},{"digest":{"line_hashes":["46343831585374774547782509733093755146","233288940301734147749637209202376210299","270819624870018301338868559867183108340","220692359517444060403890924072014883391"],"threshold":0.9},"id":"CVE-2026-102677-6197e678","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_win.h"},"deprecated":false},{"id":"CVE-2026-102677-628386c2","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/electron_browser_client.cc","function":"ElectronBrowserClient::GetExtraCreateNewWindowReplyData"},"deprecated":false,"digest":{"function_hash":"228999135404690658196465841159108476150","length":1429}},{"deprecated":false,"digest":{"line_hashes":["221286761020937251812239699006385586175","188753583530953364247970079049320783012","61136859749296093812050908416424923215","119506391987121157016195959401786934285","26393316587361386594517844106997111027","131814569348855878945538040390906042865","53795826427924510947681057712122994581","258210967742683056973295603087805013040","68945623496704261287158208277757419888","315735107945901463301845461250019305467","6095824199696258867881650570403940933","144807857311639451631000255101836857338","298391353230279718170449743728169625008","29345486805624055806603384201512034068","36941554238489078596203523240052846930","150344981553498289383211919870267454963","104396899166079790875025067810809530808","70309425408168262654376547154263170253","319357670124767353521702232838593835309","261424291619130642642567468116842961876","306651914123461701321899041804762108828","9532938582783442367552451131074991069","130733784679257030072383369057280402686","159740083064684798178631208849312598571","328084211728922397088791519868139995952","140667828459441938112812138013415176242","189660078322073942059723242824659990226","140835302595490283726919447755475993901","168568743193790913849313093269667654167","211053115159947639061482308883711493736"],"threshold":0.9},"id":"CVE-2026-102677-659407d2","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings.h"}},{"source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_linux.h"},"deprecated":false,"digest":{"line_hashes":["312916459798611360022555480690025200114","63843002278369203810553438788636901394","239206762827261732768090053954295452701","239334794452192513427083898962755261057"],"threshold":0.9},"id":"CVE-2026-102677-660d1157","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"258081054645781715420225726862492907093","length":106},"id":"CVE-2026-102677-7020af9f","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_win.cc","function":"NodeBindings::Create"}},{"deprecated":false,"digest":{"line_hashes":["23502642046232870537864689785944161280","133860302453990715375217017199335145732","55445174055244424792477677747118177219","54036219258868289639392099680333016910","192757767910590609721473172430966868662","220899921258288579311799402782609927222","264418830828078922645700179220234061932","240371311772216333333003380785261554257","148510489298908290214686080136059566501","309458786327875824893913982241312544051","211310497466936054046506553948874633034","132180048135684017981419617686935472799","83800796865909777219588521607897422907"],"threshold":0.9},"id":"CVE-2026-102677-70fabb31","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/preload_code_cache.h"}},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_util.cc"},"deprecated":false,"digest":{"line_hashes":["167485814571812591478926519434946751072","188449300763170500357190057732760865709","221469856431089538344984887389323227561","85429852984605358686694602830763312670","202120749061055297524170358481600737512","290482429325541736664273703428061999150","188582022147886786448083921104895871713","312934745792423367186686958014261610728"],"threshold":0.9},"id":"CVE-2026-102677-788774b4","signature_type":"Line"},{"target":{"file":"shell/browser/preload_code_cache.cc"},"deprecated":false,"digest":{"line_hashes":["164152555480390731009417453315729612780","271530264920600492679567903547225029512","54905484201854182225451177130949505360","187386913831169229401610946648788222148","52525296161364309002732212916163646180","144845396039504973239267370128496545618","201387591847393547926882192489479296471","158106499872945268910532816647085354843","76855885545223483362510131292386724796","273178839672465942084878085276273701437","67845495208080103025614494274840095553","16195712795850577718670500213176355612","39333788080459203377030583245395455935","211708584006985074566591100437487361857","167451801848656710190771857404319870722","321895731879813680879985026535411394415","37927912697164888703378415415012120653","224166502972826514166048292139177189976","261318314532328423757532691170273382878","322512553616171351970919188410851022644","27219349168120376018734286330170354427","224357746194202686444229443549642843032","327077175006782184885179214364426090304","151950987951955044828270906005039439220","240203550400885586354761362663332158180","163058050443444794894059888744793630357","323820820186760474447124778699223075725","234781445825155355822276011949915049676","315573250536492223317970914658276529454","276743520286920816203083717910211266735","144280351435126076974255281839074927189","97746897367747998243119754336039740616","68783013629382555574196284128003987325","224561875707183910733230370998496492416","72882061634130586085584059142010924328","120681002069651483949972576730519971752","93562733240714246127111802074062953072","11168358219383133635029514099344132979","95204146717257931986442330712032189732","271845610360892346102851328595265948231","337503807532254491705159088996811420913","311948816779720521343432240584132098595","49834362565964453462383474297735469629","287757906452196661746036177890545995623","262969975149489671512641224668460990874","178214164544584890189782410051882359197","153104501820838235036763510050451869057","179792562836322882151644878255014835075","310808421768291215557294706625612396040","70761263802414303825504370939787583416","17245669832480359156401198266765370022","269976499263756904889985166953163837778","109256428741195136653931297626748755659","147256422240218221557757333791584525511","258263541089471076541821696328496892919","340080310172387346817068445511452260787","37322383780097090386826077828252201829","196222215906373173670040564856878193417","334836289699548017971641005701299785972","107788576274502113744952577896473729668","172676781553573993376821579763146061652","28386204852595065194684703334365923004","67207469820270487465559673175949024196","87556517567203521333887414857482936774","124308356522965524108705131751218517613","151885128965193386301699263872951164388","32710991666331411219458131469908761344","113759407051568868123878418878484850608","62151746360611438670085849472655194902","115884170383087779375302173035612510606","224656755036714273754484240604958772793"],"threshold":0.9},"id":"CVE-2026-102677-79030274","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"},{"deprecated":false,"digest":{"function_hash":"61634541215885674796335232828932350222","length":1052},"id":"CVE-2026-102677-817e69e8","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/renderer_startup_data.cc","function":"Build"}},{"deprecated":false,"digest":{"function_hash":"228999135404690658196465841159108476150","length":1429},"id":"CVE-2026-102677-85b95c00","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/electron_browser_client.cc","function":"ElectronBrowserClient::GetExtraCreateNewWindowReplyData"}},{"source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/electron_browser_client.cc"},"deprecated":false,"digest":{"line_hashes":["187701269219132800653537624154018743411","197377759802376290773443589576219845063","88208482334894512760447625893516027547","176888041750551260185636094202725441250","52601806839050519839329916218487858682","224880798331880448608455110939848305711","29819548055233332801793968827880934911","121480078114941039815672656672387879819","140290810136000862910675033920506419446","259577933912058717284323583761656770956","22343469960176940591041916328676137272","314032086589785297712823851997760965823","45069017490567937440057723392693162760","192930091687162084326700191060249140341","200963242128509485279070121416482094003","163689629252820804725562641998533736142","99863336717754546229939780904891749231","258032962131531610834714151040434994248","210379830990459436935744236436572611574","257615555074122256882655352316356589419","250120484666968593209399938784002608188","90243815877299185652387964908372475607","185560598973977910439791399189327502817","306460319225493980320594400861554409284","103273203760672105377856825998382623208","267184998288225122987513280379258582865","53557311846959317478434270853997637754","17578048502706677925911135631604791879","178004062859580561927519940250462828260","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","72914435939149854220799550483784052427","261020509864539791718316125288237230699"],"threshold":0.9},"id":"CVE-2026-102677-897a40bf","signature_type":"Line","signature_version":"v1"},{"digest":{"length":521,"function_hash":"264520674465608311905677484657322386470"},"id":"CVE-2026-102677-8cd824b0","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/preload_code_cache.cc","function":"Get"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"49252856406417458960453981895656859374","length":465},"id":"CVE-2026-102677-976982fa","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_util.cc","function":"ExplicitMicrotasksScope::ExplicitMicrotasksScope"}},{"deprecated":false,"digest":{"line_hashes":["326419888438496191685744777384240027292","245710748554333080990817052790544683743","46368985446506235104635325756870318310","85041916600282149747188196218654277930","101520220082616729048717461193764236826","193196778279923761279849401376338209348","138178080024519305816332089393370393582","223114137127901046290066057819054630743","263683840848771802378915338097208678665","135125590920342189881121474946300495621","215971463779992334956034140058671865635","184480625606829995294409652980713611611","320016841469274254910363947197189016127","262023730804583887813591692612253692168","30995286922991355944445236319600438139","124407012789535398558063823097035019102","51219902329962541205365018459644115139","199956916342265456687597105223918774602","127777541615311311763950974279796891979","275207365727054037759778098171008840983","201174440141541933730531754369731210970","26231995652521566290980863529428512873","201478956274890685381121605388825775737","131922205638024976901093001811781395464","74401943862727417693192431222847780104","304250719911096245945703188595089773819","30566470847905981486624840804398274060","197649440793026548509657434166185312992","48193760461744699583488997196081755958","221095914657486461678072236535243484954","280382341030673383454429301665543182276","135545357015217438456188473134848630620","242009565024186074829154741323183490887","337818825984689191299071894813762542230","29478794555889548930149530784969056260","114323598778807434090764623666492477968","24580685129280263166138278865198207422","48930875886835425355397006443644205633","54352818786855146698053348068247407069","167884948644145839555859032724972629688","89026579248597001582476480268296826390","340108357384258393662565508813495574691","112443570740625054955870530511086355010","274514974606381408848437775061848848171","99599040351235803025425462408880874659","198160550207623230217426290660457027249","246673667059986868428651927942252562224","255095950399083869152074206896860243174","305801221784522674991015672059823122335","149674613429795475756099456035264647840","214565393781871500050029642140380222001","185013279610388566305150732270828836300","33642184055772599418489001321356805426","253507657558189886965992286578708682329","144322217935756170622643885899971387576","197411416264740807107294262079035018449","51674480919256455398262545323444181248","297592186691997274319220291428681181516","306890570457182013186076916813297896140","330256840361440548180396039774972150133","167655664826407039545756288060470531414","133249617595924448043222272860987281133","233274728652892338120184050073632154359","49210925114144328874791667745676879108","68479713026411421928284327698004853927","204498239836374598405222208285013110825","125336864636095360202070533643855113021","12050625773298527955683472067206691914","68739977319467824188799555907729001058","284516237128421678274993703712942238371","137920687443397308523718209349830101664","122482730064841934223474468471616660509","73327437305806977039291318881405889451","161236208001632896314179127886998493431","62480537259577666567501563906311414172","7675765633892988480543852203807682208","115123308690895015393785945165399014570","64427889084843995588028231767442078279","221792580828859382554731654882521002583","316136699153531017840645076331432369814"],"threshold":0.9},"id":"CVE-2026-102677-98e6369d","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings.cc"}},{"source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/preload_code_cache.h"},"deprecated":false,"digest":{"line_hashes":["23502642046232870537864689785944161280","133860302453990715375217017199335145732","55445174055244424792477677747118177219","54036219258868289639392099680333016910","192757767910590609721473172430966868662","220899921258288579311799402782609927222","264418830828078922645700179220234061932","240371311772216333333003380785261554257","148510489298908290214686080136059566501","309458786327875824893913982241312544051","211310497466936054046506553948874633034","132180048135684017981419617686935472799","83800796865909777219588521607897422907"],"threshold":0.9},"id":"CVE-2026-102677-9917ec34","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/renderer/web_worker_observer.cc","function":"WebWorkerObserver::WebWorkerObserver"},"deprecated":false,"digest":{"function_hash":"122122447454369817859159457256233048989","length":239},"id":"CVE-2026-102677-9dc9027d","signature_type":"Function","signature_version":"v1"},{"target":{"file":"shell/common/node_bindings_mac.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["95063919205060834441455654344654162244","10313576602400168764973074725931079759","219758088439680672276613954093158124563","77193998934267519227452777627849330733"]},"id":"CVE-2026-102677-9dd543ce","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2"},{"target":{"file":"shell/common/node_bindings_mac.cc"},"deprecated":false,"digest":{"line_hashes":["155718685605682119765445232086804820437","274494416178045339119412311487975547286","19333657249318141285017621586351425755","72800714879725584780115083883571446930","64756185344927776407743500583299062185","153981711436097927896111953176739288378","63084194927233836910162465213243590922","64972240572461175452627133817152358575","77582281568889619567450620508462378755"],"threshold":0.9},"id":"CVE-2026-102677-9f25382e","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc"},"deprecated":false,"digest":{"line_hashes":["163316213775067742962818305949406318045","217752088989994113505110553766525584251","125207590826716835828699820763998149584","33321506857507857420356299061422298718","78170956621046804518675901875390638726","130821966156228710160690750685425473089","124455806483814501048157587055958499763","235107862364075572632561492384617925371","149716920948794577025739171317888780584","107476154542492832840024852189393034328","50342092193705877604103775124796546615","98103236031364062927500655735527351505","199295281888342883344193439434898724204","235430341311087576189131015522470859492","104632141453812189286770965092305130569","111966527702485219273079758678872948117","77737013209896221022085084371935023798","216850031241680579129671470473786372768","175791006203155357117702408131757097051","105221079311922158293670613792853090486","296306109115862653511414830065859773158","124863899037832247614093577953214363438","20760892053583188056387383057323241526","74050777720338824754769216064658577689","321537167996455668105947140610498530219","217789232764171762887831901474437025204","181005084964832949344375688912502414701","86773075606990721380915410476918834275","178099857305203153948956290142342620384","11615882382213852959516508824682102715","279187747800192292708835391694430421531","22493638094617271075700095400709347660","75009184945545865333446559881763100483","293426938756806826667696541951321970332","235336138524732977323418581360950713775","174100917295972064411634402805581539874","236078909495619577666029426427673873772","7890163534234026654704363289408226910","117579496474765851700517111893804585251","336583551210776020427979686372846487586","197242113017469264118692471176018443181"],"threshold":0.9},"id":"CVE-2026-102677-9fe33147"},{"deprecated":false,"digest":{"function_hash":"173690406288058402225269063908397878774","length":917},"id":"CVE-2026-102677-a5e8b474","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/preload_code_cache.cc","function":"Set"}},{"source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/preload_code_cache.cc","function":"Set"},"deprecated":false,"digest":{"function_hash":"173690406288058402225269063908397878774","length":917},"id":"CVE-2026-102677-acb35908","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/preload_code_cache.cc"},"deprecated":false,"digest":{"line_hashes":["164152555480390731009417453315729612780","271530264920600492679567903547225029512","54905484201854182225451177130949505360","187386913831169229401610946648788222148","52525296161364309002732212916163646180","144845396039504973239267370128496545618","201387591847393547926882192489479296471","158106499872945268910532816647085354843","76855885545223483362510131292386724796","273178839672465942084878085276273701437","67845495208080103025614494274840095553","16195712795850577718670500213176355612","39333788080459203377030583245395455935","211708584006985074566591100437487361857","167451801848656710190771857404319870722","321895731879813680879985026535411394415","37927912697164888703378415415012120653","224166502972826514166048292139177189976","261318314532328423757532691170273382878","322512553616171351970919188410851022644","27219349168120376018734286330170354427","224357746194202686444229443549642843032","327077175006782184885179214364426090304","151950987951955044828270906005039439220","240203550400885586354761362663332158180","163058050443444794894059888744793630357","323820820186760474447124778699223075725","234781445825155355822276011949915049676","315573250536492223317970914658276529454","276743520286920816203083717910211266735","144280351435126076974255281839074927189","97746897367747998243119754336039740616","68783013629382555574196284128003987325","224561875707183910733230370998496492416","72882061634130586085584059142010924328","120681002069651483949972576730519971752","93562733240714246127111802074062953072","11168358219383133635029514099344132979","95204146717257931986442330712032189732","271845610360892346102851328595265948231","337503807532254491705159088996811420913","311948816779720521343432240584132098595","49834362565964453462383474297735469629","287757906452196661746036177890545995623","262969975149489671512641224668460990874","178214164544584890189782410051882359197","153104501820838235036763510050451869057","179792562836322882151644878255014835075","310808421768291215557294706625612396040","70761263802414303825504370939787583416","17245669832480359156401198266765370022","269976499263756904889985166953163837778","109256428741195136653931297626748755659","147256422240218221557757333791584525511","258263541089471076541821696328496892919","340080310172387346817068445511452260787","37322383780097090386826077828252201829","196222215906373173670040564856878193417","334836289699548017971641005701299785972","107788576274502113744952577896473729668","172676781553573993376821579763146061652","28386204852595065194684703334365923004","67207469820270487465559673175949024196","87556517567203521333887414857482936774","124308356522965524108705131751218517613","151885128965193386301699263872951164388","32710991666331411219458131469908761344","113759407051568868123878418878484850608","62151746360611438670085849472655194902","115884170383087779375302173035612510606","224656755036714273754484240604958772793"],"threshold":0.9},"id":"CVE-2026-102677-b23dfa29","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["163316213775067742962818305949406318045","217752088989994113505110553766525584251","125207590826716835828699820763998149584","33321506857507857420356299061422298718","78170956621046804518675901875390638726","130821966156228710160690750685425473089","124455806483814501048157587055958499763","235107862364075572632561492384617925371","149716920948794577025739171317888780584","107476154542492832840024852189393034328","50342092193705877604103775124796546615","98103236031364062927500655735527351505","199295281888342883344193439434898724204","235430341311087576189131015522470859492","104632141453812189286770965092305130569","111966527702485219273079758678872948117","77737013209896221022085084371935023798","216850031241680579129671470473786372768","175791006203155357117702408131757097051","105221079311922158293670613792853090486","296306109115862653511414830065859773158","124863899037832247614093577953214363438","20760892053583188056387383057323241526","74050777720338824754769216064658577689","321537167996455668105947140610498530219","217789232764171762887831901474437025204","181005084964832949344375688912502414701","86773075606990721380915410476918834275","178099857305203153948956290142342620384","11615882382213852959516508824682102715","279187747800192292708835391694430421531","22493638094617271075700095400709347660","75009184945545865333446559881763100483","293426938756806826667696541951321970332","235336138524732977323418581360950713775","174100917295972064411634402805581539874","236078909495619577666029426427673873772","7890163534234026654704363289408226910","117579496474765851700517111893804585251","336583551210776020427979686372846487586","197242113017469264118692471176018443181"],"threshold":0.9},"id":"CVE-2026-102677-b60683d8","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc"}},{"digest":{"function_hash":"145381480062676194850240208266834619958","length":324},"id":"CVE-2026-102677-ba55c2f0","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"file":"shell/browser/preload_code_cache.cc","function":"PathForId"},"deprecated":false},{"target":{"function":"ElectronRenderFrameObserver::ShouldNotifyClient","file":"shell/renderer/electron_render_frame_observer.cc"},"deprecated":false,"digest":{"function_hash":"220343673298737824269676835064679941510","length":500},"id":"CVE-2026-102677-bf2fc230","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2"},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/renderer_startup_data.cc"},"deprecated":false,"digest":{"line_hashes":["283421436253944693120562599380805785941","8394563476238643454708143893374498300","243132536657238604019119437894584768912","209531570975281542150284708595409707013","92292526101810363046115242077255441734","81034989801024640743193657553194230390","178287223883726740010599718520275500047","170595155892276075813169674132633792194","277973543919221013643979985358377971820","322693175386151779254717374504325731183","301193497354707608007233287828653538896","80271254696035923863979651634156826023","315242016534936339494346283997315365180","164813499290335461138748271838684080789","103382327716692795451546819633828134370","94841214108110954902454905232736310308","190471885881199262695021778534482147357","186944067400856419638579847965961152800","272411891543343590515472636552030739890","18033127599203180893648746200090261882","109412648791302454566861013806905343520","44757939172521438623347372034696820046","61460604226106624567968599118363129747","40291414281421976639895861029532470919","316777104181798538239721926146362860216","8224723839288398007490250511934870801","73563298546586654797404681754930072586","174592059805007212323799806383850786428","317823174469055260340300730269465695086","78762209049177339266138893204122839091","94953444176108667381049635124569909410","12363290448019970571017839622121898952","259685500435230857024362323258586907729","206280426807572051442401340935473019919","50034012703222041116792797741764650135","68627293935209647813350096133700290943"],"threshold":0.9},"id":"CVE-2026-102677-bf4e46cd","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"22274688006170169166150407768822975846","length":79},"id":"CVE-2026-102677-c3622377","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_mac.cc","function":"NodeBindingsMac::NodeBindingsMac"}},{"target":{"file":"shell/browser/electron_browser_main_parts.cc"},"deprecated":false,"digest":{"line_hashes":["285974179669711621677121732629614047827","3452220015471150844799314600897528636","154997768033793089812378877523503403557","325583186194604742361108585026740761947","193841198060604186711113930599928863718","312646468872699447424517562990599780959","243985809055188332569168526601912666903","238650395203521443630141786839872628471"],"threshold":0.9},"id":"CVE-2026-102677-c5a224c0","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2"},{"target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc","function":"ElectronWebContentsUtilityHandlerImpl::SetPreloadCodeCache"},"deprecated":false,"digest":{"function_hash":"66174914814034873753162081376394625829","length":271},"id":"CVE-2026-102677-cfbaa7a1","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"},{"target":{"file":"shell/browser/renderer_startup_data.h"},"deprecated":false,"digest":{"line_hashes":["32897972946630975182327061897855340243","60814692337830798081390012818351050239","133636763096863617255820211578107289143","141728492821189039675860477808569587769","99996678521403369771296942084077248113","34643263199913178063648487972824318827","276089788455214798097820822812414108933"],"threshold":0.9},"id":"CVE-2026-102677-d1020dbc","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"},{"target":{"file":"shell/renderer/web_worker_observer.cc"},"deprecated":false,"digest":{"line_hashes":["43783055753069054709652409831407710053","162240721476935916503292148280405245490","170615272982204302516123883914528270911","273347709438936592913007626473907329565","240187100195897322341967451807613929288","173129505875993620065284752390047881241","242753651471318308238817848057146592283","306751107922300662287560566730280142826","293032449411719249087801134966905295630","327849821297722705215620922609628455485","40813159732892483767851991113876929983","69422239248910235641623955987282432418","162191577462598363258059998835768204805","289188685885633929092171783072095745472","17983017502975389257926006061223748127","290965500850959131737326191628638769638","169501468190131028050055252855012738903","228922806184539802410002070413023191259"],"threshold":0.9},"id":"CVE-2026-102677-d2f6e909","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2"},{"digest":{"function_hash":"145381480062676194850240208266834619958","length":324},"id":"CVE-2026-102677-d4f3781d","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/preload_code_cache.cc","function":"PathForId"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601","target":{"function":"ElectronBrowserClient::GetExtraCreateNewWindowReplyData","file":"shell/browser/electron_browser_client.cc"},"deprecated":false,"digest":{"function_hash":"228999135404690658196465841159108476150","length":1429},"id":"CVE-2026-102677-d5eee783"},{"digest":{"function_hash":"145381480062676194850240208266834619958","length":324},"id":"CVE-2026-102677-db3f60bf","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/preload_code_cache.cc","function":"PathForId"},"deprecated":false},{"target":{"file":"shell/browser/renderer_startup_data.cc","function":"Build"},"deprecated":false,"digest":{"function_hash":"61634541215885674796335232828932350222","length":1052},"id":"CVE-2026-102677-dc0fb649","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"},{"digest":{"length":315,"function_hash":"255578192868293679707044092318990436361"},"id":"CVE-2026-102677-e6c87fc4","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"function":"NodeBindingsLinux::NodeBindingsLinux","file":"shell/common/node_bindings_linux.cc"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"55270650539447096603891474602680987843","length":264},"id":"CVE-2026-102677-ea838d68","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"function":"NodeBindings::InitEventLoop","file":"shell/common/node_bindings.cc"}},{"deprecated":false,"digest":{"function_hash":"257635908686602209021851363852601398842","length":106},"id":"CVE-2026-102677-eab91ff7","signature_type":"Function","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/common/node_bindings_mac.cc","function":"NodeBindings::Create"}},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3","target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc","function":"IsPreloadIdServedToFrame"},"deprecated":false,"digest":{"function_hash":"248506346983806351909891705204099640678","length":769},"id":"CVE-2026-102677-f02c3f7a","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217","target":{"file":"shell/browser/electron_web_contents_utility_handler_impl.cc"},"deprecated":false,"digest":{"line_hashes":["163316213775067742962818305949406318045","217752088989994113505110553766525584251","125207590826716835828699820763998149584","229739044483382355936920093763929867878","8740693855464322791497280175579994222","302273433414798824199988894417046186922","41787274473066674224399862290013220627","149716920948794577025739171317888780584","107476154542492832840024852189393034328","50342092193705877604103775124796546615","98103236031364062927500655735527351505","199295281888342883344193439434898724204","235430341311087576189131015522470859492","104632141453812189286770965092305130569","111966527702485219273079758678872948117","77737013209896221022085084371935023798","216850031241680579129671470473786372768","175791006203155357117702408131757097051","105221079311922158293670613792853090486","296306109115862653511414830065859773158","124863899037832247614093577953214363438","20760892053583188056387383057323241526","74050777720338824754769216064658577689","321537167996455668105947140610498530219","217789232764171762887831901474437025204","181005084964832949344375688912502414701","86773075606990721380915410476918834275","178099857305203153948956290142342620384","11615882382213852959516508824682102715","279187747800192292708835391694430421531","22493638094617271075700095400709347660","75009184945545865333446559881763100483","293426938756806826667696541951321970332","235336138524732977323418581360950713775","174100917295972064411634402805581539874","236078909495619577666029426427673873772","7890163534234026654704363289408226910","117579496474765851700517111893804585251","336583551210776020427979686372846487586","197242113017469264118692471176018443181"],"threshold":0.9},"id":"CVE-2026-102677-f2252906","signature_type":"Line"},{"target":{"file":"spec/fixtures/native-addon/echo/binding.cc"},"deprecated":false,"digest":{"line_hashes":["102814938609133318871084663470405987398","141847641754075199049772935523086276419","316951766810659431912375875277302101353","54778220905623699242888280731464589338","240882864156483475037952656272673840157","315561528729872462847024859553697691645","257992847695603066810955356963717454254","98502045850692244702469327714868622027","66001023771435092523067757384730562168","61348496058647861940334521460600622962"],"threshold":0.9},"id":"CVE-2026-102677-f4239621","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2"},{"id":"CVE-2026-102677-f82f5ca8","signature_type":"Line","signature_version":"v1","source":"https://github.com/electron/electron/commit/d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2","target":{"file":"shell/renderer/electron_renderer_client.cc"},"deprecated":false,"digest":{"line_hashes":["270194027871050470125769446203470195773","106734906342175187796206622553851768201","23761309825280085093476685473553417417","338088152213514386964119156774806859336","99710410452096320685409199808902296446","216273904162345588906409084599228063728","294445774493448729484598111657276622663","91751503337689060424340950602525875441","318558072798517561394675769105837423239","38113431701508376942721889657547348616","308336674938407901152737012752070272764","28603161068377732423815491653634466280","163450705739370726428131500845091886524","282054770360655251368828866765961413641","308394535634358971401109351875432504362","28807449045260051199875219620776439905","43349267050548593166204326607395089088","31577287583706891409592613748844546142","266422323331780776258665903729933416919","25582939090293318994013282509199167415","49809963667465349660373455395854250032","327746199393037608999710511089504309349","315861294732764585650318543646470150283","58076171270126504031673866084954203356","303076115265149701089982948985851188530","59264679969995963195634827652726176395","79170502254399678088065306422861402565","86038396503697115194806555652409180180","36269535450368605033339381623275827571","232196150512102740172831440769311715004","261857747468601115303258228978840760657","306110605209728667595203758884568109994","204928728215112565107598886765549131772","301097850594310009472392049985828960025","169845905487599874841027659230823851389","24574451868805924217738884476369191922","134070600254058913294402735280322403459","30850916724934308404616775054191219534","76273677395163651509935356988097739205","214086857913738061496368505700151280638","304666259235337005576069244590556131406","154701758419487323778453231916698833478","163248438885661254420218830126242026192","68107122909391544445473707987336113551","188627231472231348872835389563061394180","24923330408376767190321709824698239723","259983737235441704511233742567336999285","8720140451533577798627816149074455650","129106538444188410216365493109844246234","198575285769406653810298774960565984507","207190685352370853653619998198316176594","200445414418665672367680341275300071755","173536218219536285766340767631987462015","15720754593386761564940544367246647752","101185805583323959443525208268932560721","264807496953667254772246228032864698684","53048650976553889053829573964923192179","276903146482812188023813742192234868970","218310384268641037529396894179367542484","54266815429376160417276955584006286430","79134638340393449236088434338816428072","190458776177073659455257771903484827432","14807256947940488558807914760177594158","100772485626383961643710219604224018150","330505924713899765840766753555196765048","33239333230995875490029299811680959882","306800987630177461075850351173498701084","133361981237963828979231584564072302898","31242243347629710774680050946996097933","325708946539721608647595232827306884513","116364236386960434255318857265628356597","331790120351912237834946947785154327963","256672866346924116867715824823676583459"],"threshold":0.9}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"}]}