CVE-2026-48046:详情

CVE-2026-48046

2026-08-11
14h17 +00:00
A08-Soft and Data Integrity Fail
2026-10-23
19h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote code execution. Version 2.5.0 contains a patch.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-494 Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

参考资料