Login Request a demo
EL
Vendor
Electronjs
3 products with CVEs on record
61
CVEs
0
On KEV
5
New 30D
Products
EL
Electron
Electronjs
9.9
59 CVEs0 on KEV5 new
PO
Poddycast
Electronjs
8.8
1 CVEs0 on KEV0 new
ZO
Zonote
Electronjs
9.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-102677
EL
Electron
Electronjs
8.8
0%
Sep 29Electron: Sandboxed preload code cache can be poisoned by a compromised renderer
CVE-2026-102676
EL
Electron
Electronjs
9.8
0%
Sep 29Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
CVE-2026-102675
EL
Electron
Electronjs
7.4
0%
Sep 29Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled
CVE-2026-102674
EL
Electron
Electronjs
6.1
0%
Sep 29Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
CVE-2026-102673
EL
Electron
Electronjs
6.1
0%
Sep 29Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab
CVE-2026-70612
EL
Electron
Electronjs
5.4
0%
Aug 5Electron: Sandboxed iframes can launch external protocol handlers
CVE-2026-70611
EL
Electron
Electronjs
6.9
0%
Aug 5Electron: DevTools embedder handler executes arbitrary files via shell open
CVE-2026-70610
EL
Electron
Electronjs
5.4
1%
Aug 5Electron: contextBridge object copy honors prototype setters
CVE-2026-70609
EL
Electron
Electronjs
5.7
1%
Aug 5Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter
CVE-2026-70608
EL
Electron
Electronjs
7.2
0%
Aug 5Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path
CVE-2026-70607
EL
Electron
Electronjs
5.3
1%
Aug 5Electron: window.open features string controls some window options considered privileged
CVE-2026-70606
EL
Electron
Electronjs
5.9
0%
Aug 5Electron: ProtocolResponse.url reuses the default session cache instead of the registering session
CVE-2026-70605
EL
Electron
Electronjs
5.9
0%
Aug 5Electron: HTTP redirect followed into local file loader
CVE-2026-70604
EL
Electron
Electronjs
7.4
0%
Aug 5Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads
CVE-2026-70603
EL
Electron
Electronjs
6.0
0%
Aug 5Electron: shell.openPath path validation bypass via embedded null byte
CVE-2026-70602
EL
Electron
Electronjs
6.6
0%
Aug 5Electron: Extension tab APIs operate across session boundaries
CVE-2026-70601
EL
Electron
Electronjs
7.5
0%
Aug 5Electron: Context isolation bypass via Function.prototype.bind hijack
CVE-2026-70600
EL
Electron
Electronjs
4.3
0%
Aug 5Electron: Cross-origin iframe can position native autofill popup
CVE-2026-70599
EL
Electron
Electronjs
5.9
0%
Aug 5Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin
CVE-2026-70598
EL
Electron
Electronjs
3.9
0%
Aug 5Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
CVE-2026-70597
EL
Electron
Electronjs
6.3
0%
Aug 5Electron: Parent process code-sign check is spoofable
CVE-2026-34781
EL
Electron
Electronjs
3.3
0%
Apr 7Electron crashes in clipboard.readImage() on malformed clipboard image data
CVE-2026-34765
EL
Electron
Electronjs
8.8
0%
Apr 7Electron named window.open targets not scoped to the opener's browsing context
CVE-2026-34764
EL
Electron
Electronjs
5.5
0%
Apr 6Electron has a use-after-free in offscreen shared texture release() callback
CVE-2026-34780
EL
Electron
Electronjs
6.1
0%
Apr 4Electron: Context Isolation bypass via contextBridge VideoFrame transfer
CVE-2026-34779
EL
Electron
Electronjs
7.8
0%
Apr 4Electron: AppleScript injection in app.moveToApplicationsFolder on macOS
CVE-2026-34778
EL
Electron
Electronjs
6.5
0%
Apr 3Electron: Service worker can spoof executeJavaScript IPC replies
CVE-2026-34777
EL
Electron
Electronjs
5.4
0%
Apr 3Electron: Incorrect origin passed to permission request handler for iframe requests
CVE-2026-34776
EL
Electron
Electronjs
5.3
0%
Apr 3Electron: Out-of-bounds read in second-instance IPC on macOS and Linux
CVE-2026-34775
EL
Electron
Electronjs
9.8
0%
Apr 3Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes
CVE-2026-34774
EL
Electron
Electronjs
8.1
0%
Apr 3Electron: Use-after-free in offscreen child window paint callback
CVE-2026-34773
EL
Electron
Electronjs
7.5
0%
Apr 3Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows
CVE-2026-34772
EL
Electron
Electronjs
8.8
0%
Apr 3Electron: Use-after-free in download save dialog callback
CVE-2026-34771
EL
Electron
Electronjs
8.8
0%
Apr 3Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks
CVE-2026-34770
EL
Electron
Electronjs
8.8
0%
Apr 3Electron: Use-after-free in PowerMonitor on Windows and macOS
CVE-2026-34768
EL
Electron
Electronjs
7.8
0%
Apr 3Electron: Unquoted executable path in app.setLoginItemSettings on Windows
CVE-2026-34767
EL
Electron
Electronjs
6.5
0%
Apr 3Electron: HTTP Response Header Injection in custom protocol handlers and webRequest
CVE-2026-34766
EL
Electron
Electronjs
5.4
0%
Apr 3Electron: USB device selection not validated against filtered device list
CVE-2026-34769
EL
Electron
Electronjs
8.8
0%
Apr 3Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
CVE-2023-44402
EL
Electron
Electronjs
7.0
0%
Dec 1Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2023-39956
EL
Electron
Electronjs
6.6
0%
Sep 6Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2023-29198
EL
Electron
Electronjs
8.5
1%
Sep 6Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2023-23623
EL
Electron
Electronjs
9.8
1%
Sep 6Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2022-36077
EL
Electron
Electronjs
6.1
1%
Nov 8The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2022-29257
EL
Electron
Electronjs
7.2
1%
Jun 13Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS
CVE-2022-29247
EL
Electron
Electronjs
9.8
1%
Jun 13Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS
CVE-2022-21718
EL
Electron
Electronjs
5.0
1%
Mar 22Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2021-39184
EL
Electron
Electronjs
8.6
1%
Oct 12Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2021-32772
PO
Poddycast
Electronjs
8.8
2%
Aug 3Poddycast is a podcast app made with Electron
CVE-2020-26272
EL
Electron
Electronjs
6.5
2%
Jan 28The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS
CVE-2020-35717
ZO
Zonote
Electronjs
9.0
4%
Jan 1zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true)
CVE-2020-15215
EL
Electron
Electronjs
5.6
1%
Oct 6Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass
CVE-2020-15174
EL
Electron
Electronjs
7.5
1%
Oct 6In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as per our security…
CVE-2020-4077
EL
Electron
Electronjs
9.9
1%
Jul 7In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass
CVE-2020-4076
EL
Electron
Electronjs
9.0
0%
Jul 7In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass
CVE-2020-4075
EL
Electron
Electronjs
7.5
1%
Jul 7In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, arbitrary local file read is possible by defining unsafe window options on a child window opened via window.open
CVE-2020-15096
EL
Electron
Electronjs
6.8
1%
Jul 7In Electron before versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass, meaning that code running in the main world context in the renderer can…
CVE-2018-15685
EL
Electron
Electronjs
8.1
10%
Aug 23GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a…
CVE-2017-16151
EL
Electron
Electronjs
9.8
3%
Jun 7Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron
CVE-2018-1000136
EL
Electron
Electronjs
8.1
5%
Mar 23Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 contains an improper handling of values vulnerability in Webviews that can result in remote code…