CVE-2020-15096

Status: ModifiedMedium (6.8)—

In Electron before versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using "contextIsolation" are affected. There are no app-side workarounds, you must update your Electron version to be protected. This is fixed in versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21.

CVSS

Version: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Base score: 6.8

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.81%
Percentile among all scored CVEs: 56
Score date: 10/7/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1190 Exploit Public-Facing Applicationinitial access
Primary impactT1059 Command and Scripting Interpreterexecution

Source: official MITRE CTID mapping (CVE → ATT&CK).

🛡️ ATT&CK mitigations that cover these techniques

Privileged Account Management Vulnerability Scanning Restrict Web-Based Content Network Segmentation Limit Software Installation Limit Access to Resource Over Network

Affected technologies (1)

Electronjs — Electron

CWEs

CWE-501
NVD-CWE-Other

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2020-15096",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 2.3
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "electron",
          "product": "electron",
          "versions": [
            {
              "status": "affected",
              "version": "< 6.1.1"
            },
            {
              "status": "affected",
              "version": ">= 7.0.0, < 7.2.4"
            },
            {
              "status": "affected",
              "version": ">= 8.0.0, < 8.2.4"
            },
            {
              "status": "affected",
              "version": ">=9.0.0-beta.0, < 9.0.0-beta.21"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-07-07T00:15:10.417",
  "references": [
    {
      "url": "https://github.com/electron/electron/security/advisories/GHSA-6vrv-94jv-crrg",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/electron/electron/security/advisories/GHSA-6vrv-94jv-crrg",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-501"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Electron before versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using \"contextIsolation\" are affected. There are no app-side workarounds, you must update your Electron version to be protected. This is fixed in versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21."
    },
    {
      "lang": "es",
      "value": "En Electron antes de las versiones 6.1.1, 7.2.4, 8.2.4 y 9.0.0-beta21, se presenta una omisión de aislamiento de contexto, quiere decir que el código que se ejecuta en el contexto mundial principal en el renderizador puede alcanzar el contexto de Electron aislado y llevar a cabo acciones privilegiadas. Las aplicaciones que usan \"contextIsolation\" están afectadas. No existen soluciones alternativas para la aplicación, deben actualizar su versión de Electron para estar protegidos. Esto es corregido en las versiones 6.1.1, 7.2.4, 8.2.4 y 9.0.0-beta21"
    }
  ],
  "lastModified": "2026-06-17T02:56:02.740",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2EC9F8A-F7E4-4232-AE3D-8C832272F912",
              "versionEndExcluding": "6.1.1"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B52CBB9A-2E1B-4ED7-8DAD-33B5CD063D45",
              "versionEndExcluding": "7.2.4",
              "versionStartIncluding": "7.0.0"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31A476AD-CF63-41DE-8B71-7CB8CB828BA7",
              "versionEndExcluding": "8.2.4",
              "versionStartIncluding": "8.0.0"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87556FB9-4AEC-4C3A-8DF6-4480728C8605"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB793B7F-1C9D-445D-A849-CB28577CA760"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C340AA9-8D81-4927-9447-DFCF0DD385AC"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8DF366B-644E-4C43-9DF1-37F1ADD36532"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta12:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BAC64CED-4F36-4667-B909-4265DDEBDA3F"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta13:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17574861-A808-406A-9B0D-403AD99EA160"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta14:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79CB734A-05B3-4388-BD8F-ECD3FD699D87"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E0E7E72-B138-4E09-BEE0-219643377314"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta16:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B19F82AA-3660-4AC5-920E-7E36534ADF36"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta17:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29850E51-1EB9-4E9E-9AAC-ACAC12CDCAB6"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta18:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84544C05-24A7-4CDE-B6E1-EC05B6CD9836"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta19:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8AF3443-F01C-407F-BEE2-A8E601A09211"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F962D5DC-C4EE-42C0-9BA8-C17B5ADAE178"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB7A193D-7B1F-45F0-B385-DE8C75D7088D"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BFFB27D-B11F-4F5B-8624-27042F8A664A"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF67CE0D-79D8-4CCC-8152-6989D681B618"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "965FE481-DC51-4123-B47A-4825E7231B33"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAC42DF7-3344-4C5C-B01A-B24F7C7FA47A"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CA4015A-6D70-490E-AEFD-1C64F582F9DA"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72B0EAB3-F11C-42B3-8F4A-3D4B652A2740"
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:9.0.0:beta9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2F409DE-D2A1-49A6-AA57-D735F4B07D29"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}