electron vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-115570 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.4 · Oct 23, 2026
• CVE-2026-102677 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.8 · Sep 29, 2026
• CVE-2026-102676 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 8.3 · Sep 29, 2026
• CVE-2026-102675 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.4 · Sep 29, 2026
• CVE-2026-102674 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 8.2 · Sep 29, 2026
• CVE-2026-102673 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 8.2 · Sep 29, 2026
• CVE-2026-70608 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.2 · Aug 5, 2026
• CVE-2026-70604 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.4 · Aug 5, 2026
• CVE-2026-70601 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.5 · Aug 5, 2026
• CVE-2026-54257 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Critical 9.3 · Jun 23, 2026
• CVE-2026-34780 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 8.3 · Apr 3, 2026
• CVE-2026-34774 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 8.1 · Apr 3, 2026
• CVE-2026-34771 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.5 · Apr 3, 2026
• CVE-2026-34770 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7 · Apr 3, 2026
• CVE-2026-34769 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.7 · Apr 3, 2026
• CVE-2024-46992 Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.8 · Jun 30, 2025
• CVE-2024-29900 Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution.High 7.5 · Mar 29, 2024
• CVE-2023-23623 Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS.High 7.5 · Sep 6, 2023
• CVE-2022-36077 The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS.High 7.2 · Nov 8, 2022
• CVE-2020-15174 In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as pHigh 7.5 · Oct 6, 2020
• CVE-2020-4077 In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass.High 7.7 · Jul 6, 2020
• CVE-2020-4076 In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass.High 7.8 · Jul 6, 2020
• CVE-2011-3582 A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactioHigh 8.8 · Jan 22, 2020
• CVE-2017-12581 GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability.High 8.1 · Aug 5, 2017