Medium
CVE-2026-34773
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 109
Reset filters
Medium
CVE-2026-34772
Electron: Use-after-free in download save dialog callback
High
CVE-2026-34771
Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks
High
CVE-2026-34770
Electron: Use-after-free in PowerMonitor on Windows and macOS
High
CVE-2026-34769
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
Low
CVE-2026-34768
Electron: Unquoted executable path in app.setLoginItemSettings on Windows
Medium
CVE-2026-34767
Electron: HTTP Response Header Injection in custom protocol handlers and webRequest
Low
CVE-2026-34766
Electron: USB device selection not validated against filtered device list
High
CVE-2026-34725
dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration
High
CVE-2025-68619
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
Medium
CVE-2025-59417
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
Medium
CVE-2025-55305
Electron has ASAR Integrity Bypass via resource modification
Medium
CVE-2024-46993
Electron vulnerable to Heap Buffer Overflow in NativeImage
High
CVE-2024-46992
electron ASAR Integrity bypass by just modifying the content
High
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Low
CVE-2024-45835
Mattermost Desktop App fails to sufficiently configure Electron Fuses
High
CVE-2024-39698
electron-updater Code Signing Bypass on Windows
Low
CVE-2024-36287
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
High
CVE-2024-34347
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
High
CVE-2024-29900
@electron/packager's build process memory potentially leaked into final executable
High
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
High
CVE-2024-1648
Cross-site Scripting in electron-pdf
Medium
CVE-2023-44402
ASAR Integrity bypass via filetype confusion in electron
High
Exploited in attacks
CVE-2023-5217
Electron affected by libvpx's heap buffer overflow in vp8 encoding
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.