CVE-2026-18397 - SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.
The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.
Опубликовано: Oct 01, 2026 22:17
Изменено: Oct 02, 2026 20:17
