Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xrgp-tcyv-qka8
Vulnerability ID VCID-xrgp-tcyv-qka8
Aliases CVE-2026-34781
GHSA-f37v-82c4-4x64
Summary Electron: Crash in clipboard.readImage() on malformed clipboard image data
Status Published
Exploitability 0.5
Weighted Severity 4.5
Risk 2.2
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-476 NULL Pointer Dereference
CWE-1287 Improper Validation of Specified Type of Input
System Score Found at
cvssv3 5.0 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34781.json
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 5e-05 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 5e-05 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 5e-05 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
epss 5e-05 https://api.first.org/data/v1/epss?cve=CVE-2026-34781
cvssv3.1_qr LOW https://github.com/advisories/GHSA-f37v-82c4-4x64
cvssv3.1 2.8 https://github.com/electron/electron
generic_textual LOW https://github.com/electron/electron
cvssv3.1 2.8 https://github.com/electron/electron/commit/a48f03fb8d03933547281ddb2dbb6c6b9e705287
generic_textual LOW https://github.com/electron/electron/commit/a48f03fb8d03933547281ddb2dbb6c6b9e705287
cvssv3.1 2.8 https://github.com/electron/electron/pull/50475
generic_textual LOW https://github.com/electron/electron/pull/50475
cvssv3.1 2.8 https://github.com/electron/electron/releases/tag/v39.8.5
generic_textual LOW https://github.com/electron/electron/releases/tag/v39.8.5
cvssv3.1 2.8 https://github.com/electron/electron/releases/tag/v40.8.5
generic_textual LOW https://github.com/electron/electron/releases/tag/v40.8.5
cvssv3.1 2.8 https://github.com/electron/electron/releases/tag/v41.1.0
generic_textual LOW https://github.com/electron/electron/releases/tag/v41.1.0
cvssv3.1 2.8 https://github.com/electron/electron/releases/tag/v42.0.0-alpha.5
generic_textual LOW https://github.com/electron/electron/releases/tag/v42.0.0-alpha.5
cvssv3.1 2.8 https://github.com/electron/electron/security/advisories/GHSA-f37v-82c4-4x64
cvssv3.1_qr LOW https://github.com/electron/electron/security/advisories/GHSA-f37v-82c4-4x64
generic_textual LOW https://github.com/electron/electron/security/advisories/GHSA-f37v-82c4-4x64
ssvc Track https://github.com/electron/electron/security/advisories/GHSA-f37v-82c4-4x64
cvssv3.1 2.8 https://nvd.nist.gov/vuln/detail/CVE-2026-34781
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2026-34781
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34781.json
https://api.first.org/data/v1/epss?cve=CVE-2026-34781
https://github.com/electron/electron
https://github.com/electron/electron/commit/a48f03fb8d03933547281ddb2dbb6c6b9e705287
https://github.com/electron/electron/pull/50475
https://github.com/electron/electron/releases/tag/v39.8.5
https://github.com/electron/electron/releases/tag/v40.8.5
https://github.com/electron/electron/releases/tag/v41.1.0
https://github.com/electron/electron/releases/tag/v42.0.0-alpha.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34781
2456279 https://bugzilla.redhat.com/show_bug.cgi?id=2456279
GHSA-f37v-82c4-4x64 https://github.com/advisories/GHSA-f37v-82c4-4x64
GHSA-f37v-82c4-4x64 https://github.com/electron/electron/security/advisories/GHSA-f37v-82c4-4x64
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34781.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron/commit/a48f03fb8d03933547281ddb2dbb6c6b9e705287
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron/pull/50475
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron/releases/tag/v39.8.5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron/releases/tag/v40.8.5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron/releases/tag/v41.1.0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron/releases/tag/v42.0.0-alpha.5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/electron/electron/security/advisories/GHSA-f37v-82c4-4x64
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-08T16:10:12Z/ Found at https://github.com/electron/electron/security/advisories/GHSA-f37v-82c4-4x64
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2026-34781
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.02435
EPSS Score 0.00014
Published At April 8, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-07T21:20:04.924615+00:00 GHSA Importer Import https://github.com/advisories/GHSA-f37v-82c4-4x64 38.1.0