CVE-2025-55305: Electron Missing V8 Snapshot Validatorcve-2025-55305-electron-missing-v8-snapshot-validator
The application defaults its main delegate constructor without registering a V8 context snapshot validator. If ASAR integrity measures rely on a clean JavaScript execution environment, failing to validate the initial V8 snapshot allows attackers with local write access to bypass those measures.