EL
Product
Electron
59
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 23Medium 27Low 2
Watch
Add Electron to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70610 | 5.4 | Aug 5 | Electron: contextBridge object copy honors prototype setters Affected: before 39.8.9; 40.0.0 before 40.9.2; 41.0.0 before 41.2.2; 42.0.0; 42.0.0; 42.0.0; +6 more |
| CVE-2026-34777 | 5.4 | Apr 3 | Electron: Incorrect origin passed to permission request handler for iframe requests Affected: before 38.8.6; 39.0.0 before 39.8.1; 40.0.0 before 40.8.1; 41.0.0; 41.0.0; 41.0.0; +11 more |
| CVE-2026-34766 | 5.4 | Apr 3 | Electron: USB device selection not validated against filtered device list Affected: before 38.8.6; 39.0.0 before 39.8.0; 40.0.0 before 40.7.0; 41.0.0; 41.0.0; 41.0.0; +10 more |
| CVE-2026-70607 | 5.3 | Aug 5 | Electron: window.open features string controls some window options considered privileged Affected: before 39.8.8; 40.0.0 before 40.9.0; 41.0.0 through 41.2.1; 42.0.0; 42.0.0; 42.0.0; +5 more |
| CVE-2026-34776 | 5.3 | Apr 3 | Electron: Out-of-bounds read in second-instance IPC on macOS and Linux Affected: before 38.8.6; 39.0.0 before 39.8.1; 40.0.0 before 40.8.1; 41.0.0; 41.0.0; 41.0.0; +11 more |
| CVE-2022-21718 | 5.0 | Mar 22 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS Affected: before 13.6.6; 14.0.0 before 14.2.4; 15.0.0 before 15.3.5; 16.0.0 before 16.0.6; 17.0.0; 17.0.0; +3 more |
| CVE-2026-70600 | 4.3 | Aug 5 | Electron: Cross-origin iframe can position native autofill popup Affected: before 39.8.8; 40.0.0 before 40.9.0; 41.0.0 through 41.2.1; 42.0.0; 42.0.0; 42.0.0; +5 more |
| CVE-2026-70598 | 3.9 | Aug 5 | Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size Affected: before 39.8.10; 40.0.0 before 40.9.0; 41.0.0 before 41.2.1; 42.0.0; 42.0.0; 42.0.0; +5 more |
| CVE-2026-34781 | 3.3 | Apr 7 | Electron crashes in clipboard.readImage() on malformed clipboard image data Affected: through 39.8.4; 40.0.0 through 40.8.4; 41.0.0 before 41.1.0; 41.2.0; 42.0.0; 42.0.0; +2 more |