Skip to contentElectronjs vulnerabilities
Newest
- electronElectron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFsCVE-2020-26272Fix available5.4 Medium
- electronjs zonotezonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because...CVE-2020-35717Public exploit9.0 Critical
- electronContext isolation bypass in ElectronCVE-2020-15215Public exploitFix available5.6 Medium
- electronUnpreventable top-level navigation in ElectronCVE-2020-15174Fix available7.5 High
- electronArbitrary file read via window-open IPC in ElectronCVE-2020-4075Fix available6.8 Medium
- electronContext isolation bypass via contextBridge in ElectronCVE-2020-4077Fix available7.7 High
- electronContext isolation bypass via leaked cross-context objects in ElectronCVE-2020-4076Fix available7.8 High
- electronContext isolation bypass via Promise in ElectronCVE-2020-15096Fix available6.8 Medium
- electronjs electronElectron webPreferences vulnerability can be used to perform remote code executionCVE-2018-15685Public exploitFix availableEPSS 10.3%8.1 High
- electronjs electron, hackerone electron node module +1 moreChromium Remote Code Execution in electronCVE-2017-16151Fix available9.8 Critical
- electronjs electronElectron Vulnerable to Code Execution by Re-Enabling Node.js IntegrationCVE-2018-1000136Fix available8.1 High
- electronjs electronElectron protocol handler browser vulnerable to Command InjectionCVE-2018-1000118Fix available8.8 High