CVE-2024-46992

{
  "id": "CVE-2024-46992",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-46992",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-01T14:32:53.122906Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "electron",
          "product": "electron",
          "versions": [
            {
              "status": "affected",
              "version": ">= 30.0.0-alpha.1, < 30.0.5"
            },
            {
              "status": "affected",
              "version": ">= 31.0.0-alpha.1, < 31.0.0-beta.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-07-01T02:15:20.977",
  "references": [
    {
      "url": "https://github.com/electron/electron/security/advisories/GHSA-xw5q-g62x-2qjc",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://www.electronjs.org/docs/latest/tutorial/fuses",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-354"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 30.0.0-alpha.1 to before 30.0.5 and 31.0.0-alpha.1 to before 31.0.0-beta.1, Electron is vulnerable to an ASAR Integrity bypass. This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. This issue is specific to Windows, apps using these fuses on macOS are not impacted. Specifically this issue can only be exploited if the app is launched from a filesystem the attacker has write access too. i.e. the ability to edit files inside the .app bundle on macOS which these fuses are supposed to protect against. This issue has been patched in versions 30.0.5 and 31.0.0-beta.1. There are no workarounds for this issue."
    },
    {
      "lang": "es",
      "value": "Electron es un framework de código abierto para escribir aplicaciones de escritorio multiplataforma con JavaScript, HTML y CSS. Desde la versión 30.0.0-alpha.1 hasta la anterior a la 30.0.5 y desde la 31.0.0-alpha.1 hasta la anterior a la 31.0.0-beta.1, Electron es vulnerable a una omisión de integridad ASAR. Esto solo afecta a las apps que tienen habilitados los fusibles embeddedAsarIntegrityValidation y onlyLoadAppFromAsar. Las apps sin estos fusibles habilitados no se ven afectadas. Este problema es específico de Windows; las apps que usan estos fusibles en macOS no se ven afectadas. En concreto, este problema solo se puede explotar si la app se inicia desde un sistema de archivos al que el atacante tiene acceso de escritura, es decir, la capacidad de editar archivos dentro del paquete .app en macOS, contra el cual se supone que estos fusibles protegen. Este problema se ha corregido en las versiones 30.0.5 y 31.0.0-beta.1. No existen soluciones alternativas."
    }
  ],
  "lastModified": "2026-06-17T07:56:19.707",
  "sourceIdentifier": "security-advisories@github.com"
}