Login Request a demo
EL
Product
Electron
by Electronjs · last CVE Sep 29, 2026
59
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities59In the news0Timeline
Severity mix
Critical 7High 23Medium 27Low 2
Severity
All severities59Critical7High23Medium27Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Electron to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-4077
9.9
1%
Jul 7
In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass
Affected: 7.0.0 before 7.2.4; 8.0.0 before 8.2.4; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +17 more
CVE-2026-102676
9.8
0%
Sep 29
Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Affected: before 41.10.6; 42.0.0 before 42.9.2; 43.0.0 before 43.4.1; 44.0.0; 44.0.0; 44.0.0; +10 more
CVE-2026-34775
9.8
0%
Apr 3
Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes
Affected: before 38.8.6; 39.0.0 before 39.8.4; 40.0.0 before 40.8.4; 41.0.0; 41.0.0; 41.0.0; +11 more
CVE-2023-23623
9.8
1%
Sep 6
Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in Electron
Affected: 22.0.0; 22.0.0; 22.0.0; 22.0.0; 22.0.0; 22.0.0; +4 more
CVE-2022-29247
9.8
1%
Jun 13
Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS
Affected: before 15.5.5; 16.0.1 before 16.2.6; 17.0.1 before 17.2.0; 16.0.0; 16.0.0; 16.0.0; +20 more
CVE-2017-16151
9.8
3%
Jun 7
Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron
Affected: before 1.7.8
CVE-2020-4076
9.0
0%
Jul 7
In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass
Affected: 7.0.0 before 7.2.4; 8.0.0 before 8.2.4; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +17 more
Showing 7