EL
Product
electron
50
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 3High 16Medium 26Low 5
Watch
Add electron to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102676 | 9.8 | Sep 29 | Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions Affected: < 41.10.6; >= 42.0.0-alpha.1, < 42.9.2; >= 43.0.0-alpha.1, < 43.4.1; >= 44.0.0-alpha.1, < 44.0.0-beta.5 |
| CVE-2026-34775 | 9.8 | Apr 3 | Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes Affected: < 38.8.6; >= 39.0.0-alpha.1, < 39.8.4; >= 40.0.0-alpha.1, < 40.8.4; >= 41.0.0-alpha.1, < 41.0.0 |
| CVE-2026-54257 | 9.3 | Jun 23 | Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow Affected: >= 42.3.1, < 42.3.3 |
Showing 3