Vulnerabilities in electron
69 resultsCVE-2026-70603MEDIUMElectron: shell.openPath path validation bypass via embedded null byteEPSS 0.1%CVE-2026-34768LOWElectron: Unquoted executable path in app.setLoginItemSettings on WindowsEPSS 0.1%CVE-2026-34778MEDIUMElectron: Service worker can spoof executeJavaScript IPC repliesEPSS 0.1%CVE-2026-34777MEDIUMElectron: Incorrect origin passed to permission request handler for iframe requestsEPSS 0.1%CVE-2024-46992HIGHElectron ASAR Integrity bypass by just modifying the contentEPSS 0.1%CVE-2026-70597MEDIUMElectron: Parent process code-sign check is spoofableEPSS 0.1%CVE-2026-34764LOWElectron has a use-after-free in offscreen shared texture release() callbackEPSS 0.1%CVE-2026-102677HIGHElectron: Sandboxed preload code cache can be poisoned by a compromised rendererEPSS 0.1%CVE-2026-102672MEDIUMElectron: Local race condition in Squirrel.Mac update installation on macOSEPSS 0.1%