# Electron v42.11.1 — electron v42.11.1

- Product: Electron (https://whatsnew.fyi/product/electron)
- Vendor: OpenJS Foundation
- Date: 2026-09-01
- Version: v42.11.1
- Original notes: https://github.com/electron/electron/releases/tag/v42.11.1
- Permalink: https://whatsnew.fyi/product/electron/releases/v42.11.1
- Labels: Platforms: Desktop

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Fixed chrome.tabs.query() returning tab url and title to extensions without the tabs permission or host access, aligning with tabs.get
- **fixed** — Fixed a renderer crash when an array with a throwing property getter is passed across contextBridge, and several main/utility-process crashes when option objects passed to Electron APIs contain throwing accessors or Proxy traps
- **security** — Backported fixes for CVE-2026-15764, CVE-2026-15765, CVE-2026-15766, CVE-2026-15767, CVE-2026-15768, CVE-2026-15769, CVE-2026-15770, CVE-2026-15771, CVE-2026-15772, CVE-2026-15773, CVE-2026-15774, CVE-2026-15775, CVE-2026-15776, CVE-2026-15777, CVE-2026-15778

#### Release Notes for v42.11.1

##### Fixes

* Fixed `chrome.tabs.query()` returning tab `url` and `title` to extensions without the `tabs` permission or host access, aligning with `tabs.get`. [#53355](https://github.com/electron/electron/pull/53355) <sup>(Also in [43](https://github.com/electron/electron/pull/53356), [44](https://github.com/electron/electron/pull/53354), [45](https://github.com/electron/electron/pull/53353))</sup>
* Fixed a renderer crash when an array with a throwing property getter is passed across `contextBridge`, and several main/utility-process crashes when option objects passed to Electron APIs contain throwing accessors or Proxy traps. [#53329](https://github.com/electron/electron/pull/53329) <sup>(Also in [43](https://github.com/electron/electron/pull/53330), [44](https://github.com/electron/electron/pull/53331))</sup>
##### Other Changes

* Security: backported fixes for CVE-2026-15764, CVE-2026-15765, CVE-2026-15766, CVE-2026-15767, CVE-2026-15768, CVE-2026-15769, CVE-2026-15770, CVE-2026-15771, CVE-2026-15772, CVE-2026-15773, CVE-2026-15774, CVE-2026-15775, CVE-2026-15776, CVE-2026-15777, CVE-2026-15778. [#53344](https://github.com/electron/electron/pull/53344)