Critical severity9.8NVD Advisory· Published Sep 17, 2021· Updated Jun 17, 2026
CVE-2021-41392
CVE-2021-41392
Description
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Boost Note/Boost Notedescription
- Range: <=0.22.0
Patches
Vulnerability mechanics
References
1- github.com/BoostIO/BoostNote-App/issues/856nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.