Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-55305
Awaiting Analysis
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-04 Sep, 2025 | 23:15
Updated At-05 Sep, 2025 | 17:47

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0, 37.0.0-alpha.1 through 37.3.1 and 38.0.0-alpha.1 through 38.0.0-beta.6, ASAR Integrity Bypass via resource modification. This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. This issue is fixed in versions 35.7.5, 36.8.1, 37.3.1 and 38.0.0-beta.6.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.16.1MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
Type: Secondary
Version: 3.1
Base score: 6.1
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
CPE Matches
Weaknesses
CWE IDTypeSource
CWE-94Primarysecurity-advisories@github.com
CWE-829Primarysecurity-advisories@github.com
CWE ID: CWE-94
Type: Primary
Source: security-advisories@github.com
CWE ID: CWE-829
Type: Primary
Source: security-advisories@github.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/electron/electron/commit/23a02934510fcf951428e14573d9b2d2a3c4f28bsecurity-advisories@github.com
N/A
https://github.com/electron/electron/commit/2e5a0b7220ebf955c6785cc5adb2e2b1cf77dac1security-advisories@github.com
N/A
https://github.com/electron/electron/commit/3f92511cdecc39f46b0e86cce40a0c691e301c9dsecurity-advisories@github.com
N/A
https://github.com/electron/electron/commit/fdf29ce83870109d403f5c23ae529dbd0e8f4feesecurity-advisories@github.com
N/A
https://github.com/electron/electron/pull/48101security-advisories@github.com
N/A
https://github.com/electron/electron/pull/48102security-advisories@github.com
N/A
https://github.com/electron/electron/pull/48103security-advisories@github.com
N/A
https://github.com/electron/electron/pull/48104security-advisories@github.com
N/A
https://github.com/electron/electron/security/advisories/GHSA-vmqv-hx8q-j7mgsecurity-advisories@github.com
N/A
Hyperlink: https://github.com/electron/electron/commit/23a02934510fcf951428e14573d9b2d2a3c4f28b
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/commit/2e5a0b7220ebf955c6785cc5adb2e2b1cf77dac1
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/commit/3f92511cdecc39f46b0e86cce40a0c691e301c9d
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/commit/fdf29ce83870109d403f5c23ae529dbd0e8f4fee
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/pull/48101
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/pull/48102
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/pull/48103
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/pull/48104
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/electron/electron/security/advisories/GHSA-vmqv-hx8q-j7mg
Source: security-advisories@github.com
Resource: N/A
Change History
0Changes found
Details not found