Latest vulnerabilities for "electronjs electron node.js" - SecAlerts

Where

Sort:

Recently updated

Recently published

-Infinity

0

electronjs Electron Node.jsElectron crashes in clipboard.readImage() on malformed clipboard image data

Risk 17

Severity

3.3

First published (updated )

electronjs Electron Node.jsElectron named window.open targets not scoped to the opener's browsing context

Risk 79

Severity

8.8

First published (updated )

electronjs Electron Node.jsElectron has a use-after-free in offscreen shared texture release() callback

Risk 32

Severity

5.5

First published (updated )

electronjs Electron Node.jsElectron: Context Isolation bypass via contextBridge VideoFrame transfer

Risk 71

Severity

8.4

First published (updated )

electronjs Electron Node.jsElectron: AppleScript injection in app.moveToApplicationsFolder on macOS

Risk 68

Severity

7.8

First published (updated )

electronjs Electron Node.jsElectron: Service worker can spoof executeJavaScript IPC replies

Risk 38

Severity

6.5

First published (updated )

electronjs Electron Node.jsElectron: Incorrect origin passed to permission request handler for iframe requests

Risk 34

Severity

5.4

First published (updated )

electronjs Electron Node.jsElectron: Out-of-bounds read in second-instance IPC on macOS and Linux

Risk 37

Severity

5.3

First published (updated )

electronjs Electron Node.jsElectron: nodeIntegrationInWorker not correctly scoped in shared renderer processes

Risk 86

Severity

9.8

First published (updated )

electronjs Electron Node.jsElectron: Use-after-free in offscreen child window paint callback

Risk 75

Severity

8.1

First published (updated )

electronjs Electron Node.jsElectron: Registry key path injection in app.setAsDefaultProtocolClient on Windows

Risk 43

Severity

7.5

First published (updated )

electronjs Electron Node.jsElectron: Use-after-free in download save dialog callback

Risk 77

Severity

8.8

First published (updated )

electronjs Electron Node.jsElectron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks

Risk 77

Severity

8.8

First published (updated )

electronjs Electron Node.jsElectron: Use-after-free in PowerMonitor on Windows and macOS

Risk 77

Severity

8.8

First published (updated )

electronjs Electron Node.jsElectron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Risk 77

Severity

8.8

First published (updated )

electronjs Electron Node.jsElectron: Unquoted executable path in app.setLoginItemSettings on Windows

Risk 69

Severity

7.8

First published (updated )

npm/electronElectron: HTTP Response Header Injection in custom protocol handlers and webRequest

Risk 37

Severity

6.5

First published (updated )

electronjs Electron Node.jsElectron: USB device selection not validated against filtered device list

Risk 34

Severity

5.4

First published (updated )

npm/electronCode Injection

Risk 87

Severity

9.8

First published (updated )

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203