Electron vulnerabilities
70 CVEs and advisories name Electron as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-21718Renderers can obtain access to random bluetooth device without permission in Electron
- CVE-2021-39184Sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
- CVE-2020-26272Electron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFs
- CVE-2020-15215Context isolation bypass in Electron
- CVE-2020-15174Unpreventable top-level navigation in Electron
- CVE-2020-15096Context isolation bypass via Promise in Electron
- CVE-2020-4075Arbitrary file read via window-open IPC in Electron
- CVE-2020-4076Context isolation bypass via leaked cross-context objects in Electron
- CVE-2020-4077Context isolation bypass via contextBridge in Electron
- CVE-2011-3582A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for