CVE-2026-48046:詳細資料

CVE-2026-48046

2026-08-11
14h17 +00:00
A08-Soft and Data Integrity Fail
2026-10-23
19h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote code execution. Version 2.5.0 contains a patch.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-494 Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

參考資料