Skip to contentElectron vulnerabilities
Newest
- electronElectron: USB device selection not validated against filtered device listCVE-2026-34766Fix available3.3 Low
- electronWordPress Electron theme <= 1.8.2 - Broken Access Control vulnerabilityCVE-2025-58056.5 Medium
- electronElectron is vulnerable to Code Injection via resource modificationCVE-2025-55305Fix available6.1 Medium
- electronElectron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPathCVE-2024-46993Fix available4.4 Medium
- electronElectron ASAR Integrity bypass by just modifying the contentCVE-2024-46992Fix available7.8 High
- electron, electron electron-builder +1 moreCode Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6CVE-2024-39698Fix available7.5 High
- electron packager, electron-packager project electron-packager +1 more@electron/packager's build process memory potentially leaked into final executableCVE-2024-29900Fix available7.5 High
- electron electron-builderelectron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)CVE-2024-27303Fix available7.3 High
- electronASAR Integrity bypass via filetype confusion in electronCVE-2023-44402Fix available6.1 Medium
- electronElectron: Out-of-package code execution when launched with arbitrary cwdCVE-2023-39956Fix available6.1 Medium
- electronContext isolation bypass via nested unserializable return value in ElectronCVE-2023-29198Fix available6.0 Medium
- atom electronContent-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in ElectronCVE-2023-23623Fix available7.5 High
- electronElectron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirectCVE-2022-36077Fix available7.2 High
- electronElectron's AutoUpdater module fails to validate certain nested components of the bundleCVE-2022-29257Fix available6.6 Medium
- electronExposure of Resource to Wrong Sphere in ElectronCVE-2022-29247Fix available2.2 Low
- electronRenderers can obtain access to random bluetooth device without permission in ElectronCVE-2022-21718Fix available3.4 Low
- electronSandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage APICVE-2021-39184Fix available6.8 Medium
- electronElectron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFsCVE-2020-26272Fix available5.4 Medium
- electronContext isolation bypass in ElectronCVE-2020-15215Public exploitFix available5.6 Medium
- electronUnpreventable top-level navigation in ElectronCVE-2020-15174Fix available7.5 High
- electronArbitrary file read via window-open IPC in ElectronCVE-2020-4075Fix available6.8 Medium
- electronContext isolation bypass via contextBridge in ElectronCVE-2020-4077Fix available7.7 High
- electronContext isolation bypass via leaked cross-context objects in ElectronCVE-2020-4076Fix available7.8 High
- electronContext isolation bypass via Promise in ElectronCVE-2020-15096Fix available6.8 Medium
- electronElectron vulnerable to remote command executionCVE-2017-12581Fix available8.1 High