E
Electron
Security Risk Profile
50
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 87 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 6, 2017 to present
87
Total CVEs
10
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
50/100
medium
📈 3 in Last 30 Days
Severity Distribution
Critical
1High
9Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
3
2
Use After Free
2
3
XSS
1
Most Affected Products
1. Electron Electron82
2. npm/electron9
3. Electron Electron-builder Node.js9
4. npm/app-builder-lib2
5. Electron2
Recent Vulnerabilities
See more →CVE-2026-71551
CVSS 7.8high
Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist
Aug 18, 2026🔧 No Patch
CVE-2026-70611
CVSS 6.9medium
Electron: DevTools embedder handler executes arbitrary files via shell open
Aug 5, 2026
CVE-2026-70597
CVSS 6.3medium
Electron: Parent process code-sign check is spoofable
Aug 5, 2026
CVE-2026-54672
CVSS 7.8high
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
Jun 30, 2026
EOL-electron-43
unknown
Jun 30, 2026
EOL-electron-42
unknown
May 5, 2026
REDHAT-BUG-2455020
CVSS 7.0high
Apr 4, 2026🔧 No Patch
REDHAT-BUG-2455026
CVSS 7.0high
Apr 4, 2026🔧 No Patch
REDHAT-BUG-2454995
CVSS 7.0high
Apr 4, 2026🔧 No Patch
REDHAT-BUG-2455004
CVSS 7.0high
Apr 4, 2026🔧 No Patch
Monitor Electron in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.