CNNVD-202508-304 Information

CNNVD ID

CNNVD-202508-304

Related CVE

CVE-2025-54871

• CNNVD Published: 2025-08-05

Description (Chinese)

Electron Capture是Steve Seguin个人开发者的一个窗口捕获软件。 Electron Capture 2.19.1及之前版本存在安全漏洞，该漏洞源于允许绕过macOS TCC隐私保护，可能导致任意Node.js代码执行。

Description (English)

Electron Capture is a window capture software for Steve Seguin personal developers. Electron Capture 2.19.1 and previous versions contain a security loophole, which stems from allowing for the circumvention of MacOS TCC privacy protection and may lead to arbitrary enforcement of the Node.js code.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-05

Last Modified

2026-02-24

References

https://github.com/steveseguin/electroncapture/commit/3837f54e75911bb99fa45cfa138a5e401d16f531 https://github.com/steveseguin/electroncapture/releases/tag/2.20.0 https://github.com/steveseguin/electroncapture/security/advisories/GHSA-8849-p3j4-jq4h https://access.redhat.com/security/cve/cve-2025-54871

Patch

https://github.com/steveseguin/electroncapture/releases