Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Electron named window.open targets not scoped to the opener's browsing context

Electron: Use-after-free in download save dialog callback

Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks

Electron: Use-after-free in PowerMonitor on Windows and macOS

Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Electron: Use-after-free in offscreen child window paint callback

GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability

Electron: AppleScript injection in app.moveToApplicationsFolder on macOS

Electron: Unquoted executable path in app.setLoginItemSettings on Windows

Electron: Context isolation bypass via Function.prototype.bind hijack

Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows

Electron: Mitigation for compromised eMudhra intermediate certificates

Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled

Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

Electron: DevTools embedder handler executes arbitrary files via shell open

Electron: Local race condition in Squirrel.Mac update installation on macOS

Electron: Extension tab APIs operate across session boundaries

Electron: Service worker can spoof executeJavaScript IPC replies

Electron: HTTP Response Header Injection in custom protocol handlers and webRequest

Electron: Parent process code-sign check is spoofable

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Electron: shell.openPath path validation bypass via embedded null byte

Electron: ProtocolResponse.url reuses the default session cache instead of the registering session

Electron: HTTP redirect followed into local file loader

Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter

Electron has a use-after-free in offscreen shared texture release() callback

Electron: openExternal permission requests can be attributed to the wrong origin

Electron: HID and USB permission checks can be attributed to the wrong origin

Electron: Pointer lock permission requests can be attributed to the wrong frame

Electron: Sandboxed iframes can launch external protocol handlers

Electron: contextBridge object copy honors prototype setters

Electron: Incorrect origin passed to permission request handler for iframe requests

Electron: USB device selection not validated against filtered device list

Electron: window.open features string controls some window options considered privileged

Electron: Out-of-bounds read in second-instance IPC on macOS and Linux

Electron: Cross-origin iframe can position native autofill popup

Electron: SameSite cookie restrictions are not applied to windows opened from links

Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry

Electron: Frame subscription trusts GPU-supplied frame geometry

Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size

Electron crashes in clipboard.readImage() on malformed clipboard image data

Electron: Extension tabs.query returns tab URLs and titles without the tabs permission