Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Electron Capture is Vulnerable to TCC Bypass via Misconfigured Node Fuses (macOS)
Vulnerability Description
Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRON_RUN_AS_NODE. This environment variable allows arbitrary Node.js code to be executed via the -e flag, which runs inside the main Electron context, inheriting any previously granted TCC entitlements (such as access to Documents, Downloads, etc.). This issue is fixed in version 2.20.0.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
访问控制不恰当
Vulnerability Title
Electron Capture 安全漏洞
Vulnerability Description
Electron Capture是Steve Seguin个人开发者的一个窗口捕获软件。 Electron Capture 2.19.1及之前版本存在安全漏洞，该漏洞源于允许绕过macOS TCC隐私保护，可能导致任意Node.js代码执行。
CVSS Information
N/A
Vulnerability Type
N/A