CVE-2020-15215

unknown
Published 2020-10-06 · Modified 2026-03-13
CVSS v3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2
VIR risk

Description

Context isolation bypass in Electron

Predictions

Exploit likelihood
30%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact

EcosystemPackageVulnerableFixed
npm npmelectron>=8.0.0-beta.0,<8.5.28.5.2
npm npmelectron>=9.0.0-beta.0,<9.3.19.3.1
npm npmelectron>=10.0.0-beta.0,<10.1.210.1.2
npm npmelectron>=11.0.0-beta.0,<11.0.0-beta.611.0.0-beta.6

References

Verify integrity in audit chain (admin only). AS-IS.