Vulnerabilities in electron
69 resultsCVE-2026-113800MEDIUMElectron: HID and USB permission checks can be attributed to the wrong originEPSS 0.2%CVE-2026-102674HIGHElectron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictionsEPSS 0.2%CVE-2026-34776MEDIUMElectron: Out-of-bounds read in second-instance IPC on macOS and LinuxEPSS 0.2%CVE-2026-113796MEDIUMElectron: SameSite cookie restrictions are not applied to windows opened from linksEPSS 0.2%CVE-2026-114121MEDIUMElectron: openExternal permission requests can be attributed to the wrong originEPSS 0.2%CVE-2026-34767MEDIUMElectron: HTTP Response Header Injection in custom protocol handlers and webRequestEPSS 0.2%CVE-2026-102675HIGHElectron: File and HTTP protocol handlers allow cross-origin reads without corsEnabledEPSS 0.2%CVE-2026-34772MEDIUMElectron: Use-after-free in download save dialog callbackEPSS 0.2%CVE-2023-44402MEDIUMASAR Integrity bypass via filetype confusion in electronEPSS 0.2%CVE-2026-70599MEDIUMElectron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe OriginEPSS 0.2%CVE-2026-70611MEDIUMElectron: DevTools embedder handler executes arbitrary files via shell openEPSS 0.2%CVE-2026-114122LOWElectron: Frame subscription trusts GPU-supplied frame geometryEPSS 0.2%CVE-2026-114124LOWElectron: Off-screen rendering on macOS trusts GPU-supplied frame geometryEPSS 0.2%CVE-2026-70600LOWElectron: Cross-origin iframe can position native autofill popupEPSS 0.2%CVE-2026-34766LOWElectron: USB device selection not validated against filtered device listEPSS 0.2%CVE-2026-34779MEDIUMElectron: AppleScript injection in app.moveToApplicationsFolder on macOSEPSS 0.2%CVE-2024-46993MEDIUMElectron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPathEPSS 0.2%CVE-2026-34781LOWElectron crashes in clipboard.readImage() on malformed clipboard image dataEPSS 0.1%CVE-2026-70598LOWElectron: Off-screen rendering trusts GPU-supplied geometry over shared-memory sizeEPSS 0.1%CVE-2026-102673HIGHElectron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTabEPSS 0.1%