E
Electron
Security Risk Profile
49
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 89 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 6, 2017 to present
89
Total CVEs
11
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
49/100
medium
📈 1 in Last 30 Days
Severity Distribution
Critical
1High
10Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
3
2
Use After Free
2
3
Infoleak
1
4
CSRF
1
5
XSS
1
Most Affected Products
1. Electron Electron83
2. Electron Electron-builder Node.js10
3. npm/electron9
4. electron-updater2
5. npm/app-builder-lib2
Recent Vulnerabilities
See more →EOL-electron-44
unknown
Aug 25, 2026
CVE-2026-71551
CVSS 7.8high
Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist
Aug 18, 2026🔧 No Patch
CVE-2026-70611
CVSS 6.9medium
Electron: DevTools embedder handler executes arbitrary files via shell open
Aug 5, 2026
CVE-2026-70597
CVSS 6.3medium
Electron: Parent process code-sign check is spoofable
Aug 5, 2026
CVE-2026-54672
CVSS 7.8high
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
Jun 30, 2026
CVE-2026-54673
CVSS 8.2high
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Jun 30, 2026
EOL-electron-43
unknown
Jun 30, 2026
EOL-electron-42
unknown
May 5, 2026
REDHAT-BUG-2455020
CVSS 7.0high
Apr 4, 2026🔧 No Patch
REDHAT-BUG-2455026
CVSS 7.0high
Apr 4, 2026🔧 No Patch
Monitor Electron in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.