Electronjs Electron vulnerabilities
59 published vulnerabilities in Electronjs Electron. The most were published in 2026 (39), and 39 so far in 2026.
Electronjs Electron vulnerabilities by year
2017
2018
2020
2021
2022
2023
2026
Most exploited Electronjs Electron vulnerabilities
- CVE-2017-16151 Chromium Remote Code Execution in electron
- CVE-2018-1000118 Electron protocol handler browser vulnerable to Command Injection
- CVE-2026-34780 Electron: Context Isolation bypass via contextBridge VideoFrame transfer
- CVE-2026-102676 Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
- CVE-2026-102673 Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab
- CVE-2026-102674 Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
- CVE-2026-34774 Electron: Use-after-free in offscreen child window paint callback
- CVE-2018-15685 Electron webPreferences vulnerability can be used to perform remote code execution
- CVE-2018-1000136 Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration
- CVE-2026-102677 Electron: Sandboxed preload code cache can be poisoned by a compromised renderer
- CVE-2026-34769 Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
- CVE-2020-4076 Context isolation bypass via leaked cross-context objects in Electron
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.