| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| electron | = 41.0.0≥ 40.0.0, < 40.7.0< 39.8.1 | 40.7.039.8.1 |
| electron | ≥ 40.0.0-alpha.1, < 40.7.0≥ 41.0.0-alpha.1, < 41.0.0< 39.8.1 | 40.7.041.0.039.8.1 |
Apps that use offscreen rendering and allow child windows via window.open() may be vulnerable to a use-after-free. If the parent offscreen WebContents is destroyed while a child window remains open, subsequent paint frames on the child dereference freed memory, which may lead to a crash or memory corruption.
Apps are only affected if they use offscreen rendering (webPreferences.offscreen: true) and their setWindowOpenHandler permits child windows. Apps that do not use offscreen rendering, or that deny child windows, are not affected.
Deny child window creation from offscreen renderers in your setWindowOpenHandler, or ensure child windows are closed before the parent is destroyed.
41.0.040.7.039.8.1If there are any questions or comments about this advisory, please email [email protected]
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí