Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 22/03/2022 Updated: 24/07/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 5 | Impact Score: 1.4 | Exploitability Score: 3.1

VMScore: 357

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not configured a custom `select-bluetooth-device` event handler. This has been patched and Electron versions `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` contain the fix. Code from the GitHub Security Advisory can be added to the app to work around the issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
electronjs electron
electronjs electron 17.0.0

CWE-862 https://github.com/electron/electron/pull/32178 https://github.com/electron/electron/security/advisories/GHSA-3p22-ghq8-v749 https://github.com/electron/electron/pull/32240 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-21718

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect