P5 Verified
Electron: Sandboxed preload code cache can be poisoned by a compromised renderer
CVE-2026-102677. EPSS 0.0009 (percentile 0.00415), scored 2026-10-03. Fixed version: 9f0109679540320c5dc5b7bef0aa94733058e8c2. Fixed version: 87cd122b5de69555831cd752578b810dd6e504d8. Fixed version: d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2. Fixed version: 000453e399bd1dee5e86376cdd9ece5fc071e601. Fixed version: 25ba8be57c65a83d8c14ebb8aa37693df17a04f3. Fixed version: c38d6fd68756f04647ea857bdb6a2abec332e217.
- CVE / CWE
- CVE-2026-102677 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.0
- CVSS
- Unavailable · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H · osv
- EPSS
- 0.0009 · percentile 0.00415 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: 9f0109679540320c5dc5b7bef0aa94733058e8c2
- Product unavailable · Fixed version: 87cd122b5de69555831cd752578b810dd6e504d8
- Product unavailable · Fixed version: d5940d84eb9a4c73cc6b0a0c20cbfd1cfe437fa2
- Product unavailable · Fixed version: 000453e399bd1dee5e86376cdd9ece5fc071e601
- Product unavailable · Fixed version: 25ba8be57c65a83d8c14ebb8aa37693df17a04f3
- Product unavailable · Fixed version: c38d6fd68756f04647ea857bdb6a2abec332e217
Provenance
- OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-102677.html