Priority MEDIUM 50
Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00664 · Published 2023-09-06 · Fixed in 22.0.1, 23.0.0-alpha.2 CWE-670
Priority MEDIUM 48
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be le…
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.10297 · Published 2018-08-23 · Fixed in 1.7.16, 1.8.8 +2 CWE-1188
Priority MEDIUM 47
Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02675 · Published 2018-06-07 · Fixed in 1.6.14, 1.7.8 CWE-94
Priority MEDIUM 45
zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.03755 · Published 2021-01-01 · No fix listed CWE-79
Priority MEDIUM 44
Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01089 · Published 2022-06-13 · Fixed in 15.5.5, 16.2.6 +2 CWE-668
Priority MEDIUM 44
In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01003 · Published 2020-07-07 · Fixed in 8.2.4, 7.2.4 CWE-501
Priority MEDIUM 43
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00479 · Published 2026-09-29 · Partial fix · 41.10.6, 42.9.2 +2 CWE-1188
Priority MEDIUM 43
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00294 · Published 2026-04-03 · Partial fix · 38.8.6, 39.8.4 +2 CWE-653
Priority MEDIUM 43
Poddycast is a podcast app made with Electron.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02391 · Published 2021-08-03 · Fixed in 0.8.1 CWE-78
Priority MEDIUM 43
Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 contains an improper handling of values vulnerability in Webviews that can result in remote code execution.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.05082 · Published 2018-03-23 · Fixed in 1.7.13, 1.8.4 +1 CWE-20
Priority MEDIUM 43
Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02404 · Published 2018-03-07 · Fixed in 1.8.2-beta5 CWE-78
Priority MEDIUM 40
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00292 · Published 2026-04-03 · Partial fix · 38.8.6, 39.8.0 +2 CWE-416
Priority MEDIUM 40
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00249 · Published 2026-04-03 · Fixed in 38.8.6, 39.8.1 +2 CWE-416
Priority MEDIUM 40
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.003 · Published 2026-04-03 · Partial fix · 38.8.6, 39.8.0 +2 CWE-88
Priority MEDIUM 40
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00305 · Published 2026-04-07 · Partial fix · 39.8.5, 40.8.5 +2 CWE-668
Priority LOW 39
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00099 · Published 2026-09-29 · Partial fix · 42.10.0, 43.5.0 +1 CWE-20
Priority LOW 39
The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00688 · Published 2022-11-08 · Partial fix · 21.0.0-beta.1, 20.0.1 +2 CWE-200
Priority LOW 39
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0105 · Published 2021-10-12 · Fixed in 11.5.0, 12.1.0 +1 CWE-668
Priority LOW 39
In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass.
CVSS 3.1CRITICAL 9.0· Local · No auth · No interaction · EPSS 0.00367 · Published 2020-07-07 · Fixed in 8.2.4, 7.2.4 CWE-501
Priority LOW 38
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00431 · Published 2026-08-05 · Fixed in 39.8.10, 41.10.3 +1 CWE-1021
Priority LOW 38
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.4· Network · No auth · User interaction · EPSS 0.00333 · Published 2026-04-04 · Partial fix · 39.8.0, 40.7.0 +1 CWE-1188
Priority LOW 38
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00452 · Published 2026-04-03 · Partial fix · 39.8.1, 40.7.0 +1 CWE-416
Priority LOW 38
Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.0059 · Published 2023-09-06 · Fixed in 22.3.6, 23.2.3 +2 CWE-754
Priority LOW 37
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00212 · Published 2026-04-03 · Partial fix · 38.8.6, 39.8.0 +3 CWE-416
Priority LOW 36
In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-f…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01346 · Published 2020-10-06 · Fixed in 8.5.1, 9.3.0 +1 CWE-20
Load more
THREATIST.IORead the docs