Media
CVE-2026-34773
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 109
Restablecer filtros
Media
CVE-2026-34772
Electron: Use-after-free in download save dialog callback
Alta
CVE-2026-34771
Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks
Alta
CVE-2026-34770
Electron: Use-after-free in PowerMonitor on Windows and macOS
Alta
CVE-2026-34769
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
Baja
CVE-2026-34768
Electron: Unquoted executable path in app.setLoginItemSettings on Windows
Media
CVE-2026-34767
Electron: HTTP Response Header Injection in custom protocol handlers and webRequest
Baja
CVE-2026-34766
Electron: USB device selection not validated against filtered device list
Alta
CVE-2026-34725
dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration
Alta
CVE-2025-68619
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
Media
CVE-2025-59417
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
Media
CVE-2025-55305
Electron has ASAR Integrity Bypass via resource modification
Media
CVE-2024-46993
Electron vulnerable to Heap Buffer Overflow in NativeImage
Alta
CVE-2024-46992
electron ASAR Integrity bypass by just modifying the content
Alta
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Baja
CVE-2024-45835
Mattermost Desktop App fails to sufficiently configure Electron Fuses
Alta
CVE-2024-39698
electron-updater Code Signing Bypass on Windows
Baja
CVE-2024-36287
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
Alta
CVE-2024-34347
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
Alta
CVE-2024-29900
@electron/packager's build process memory potentially leaked into final executable
Alta
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
Alta
CVE-2024-1648
Cross-site Scripting in electron-pdf
Media
CVE-2023-44402
ASAR Integrity bypass via filetype confusion in electron
Alta
Explotada en ataques
CVE-2023-5217
Electron affected by libvpx's heap buffer overflow in vp8 encoding
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.