Sploitus

CVE-2021-41392

No indexed exploits for CVE-2021-41392 yet

static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.

Affected products
Boostnote, Electron
Boostnote
≤ 0.22.0
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
2.8% (85th percentile)
Weakness
CWE-74
NVD status
Modified
Published
2021-09-17
CVE-2021-41392 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2021-41392 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2021-41392 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.