CVE-2026-92299 in Electron SDK
Riassunto
di MITRE • 16/09/2026
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop thumbnails at arbitrary resolution without user consent or operating system permission prompts.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.