Protection Mechanism Failure in atom-shell

CVE-2024-26163

atom-shell
chromiumembeddedframework.runtime
electron
electron-nightly
electron-prebuilt
org.webjars.npm:electron
org.webjars.npm:electron-prebuilt

Medium

4.7/10

Summary

Microsoft Edge (Chromium-based in versions prior to 122.0.6261.129) Security Feature Bypass Vulnerability.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: CHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

CWE-693 - Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References

Advisory Timeline

Published Mar 14, 2024