High
Exploited in attacks
CVE-2023-4863
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 109
Reset filters
Medium
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Medium
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
High
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Critical
CVE-2022-25908
Command Injection in create-choo-electron
Critical
Exploited in attacks
CVE-2022-4135
Heap buffer overflow in GPU
Medium
CVE-2022-36077
Exfiltration of hashed SMB credentials on Windows via file:// redirect
Medium
CVE-2022-41710
Markdownify has Files or Directories Accessible to External Parties
High
CVE-2022-41709
Markdownify subject to Remote Code Execution via malicious markdown file
Medium
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
Low
CVE-2022-29247
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Critical
CVE-2019-17625
Rambox RCE Vulnerability
High
CVE-2017-12581
Electron vulnerable to remote command execution
Medium
CVE-2017-1000424
Electron vulnerable to URL spoofing via PDFium
Low
CVE-2022-21718
Renderers can obtain access to random bluetooth device without permission in Electron
High
ghsa-v3wr-67px-44xg
Execution with Unnecessary Privileges in arc-electron
Medium
CVE-2021-33041
Cross-site Scripting in vmd
Critical
CVE-2021-44685
Command injection in git-it-electron
Medium
CVE-2021-39184
Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Medium
CVE-2020-26272
IPC messages delivered to the wrong frame in Electron
Medium
ghsa-7wwv-vh3v-89cq
ReDOS vulnerabities: multiple grammars
Low
CVE-2020-15215
Context isolation bypass in Electron
High
CVE-2020-15174
Unpreventable top-level navigation
Critical
ghsa-j8qr-rvcv-crhv
Malicious Package in electron-native-notify
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.