Electron
Security Risk Profile
41
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 85 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 6, 2017 to present
85
Total CVEs
8
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
41/100
medium
🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
1High
7Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
2
2
Use After Free
2
3
XSS
1
Most Affected Products
1. Electron Electron82
2. npm/electron9
3. Electron Electron-builder Node.js8
4. Electron2
5. Cursor Cursor1
Recent Vulnerabilities
See more →CVE-2026-70611
CVSS 6.9medium
Electron: DevTools embedder handler executes arbitrary files via shell open
8/5/2026
CVE-2026-70597
CVSS 6.3medium
Electron: Parent process code-sign check is spoofable
8/5/2026
EOL-electron-43
unknown
6/30/2026
EOL-electron-42
unknown
5/5/2026
REDHAT-BUG-2455020
CVSS 7.0high
4/4/2026🔧 No Patch
REDHAT-BUG-2455026
CVSS 7.0high
4/4/2026🔧 No Patch
REDHAT-BUG-2454995
CVSS 7.0high
4/4/2026🔧 No Patch
REDHAT-BUG-2455004
CVSS 7.0high
4/4/2026🔧 No Patch
EOL-electron-41
unknown
3/10/2026
EOL-electron-40
unknown
1/13/2026
Monitor Electron in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.