Filters
Electronjs ElectronASAR Integrity bypass via filetype confusion in electron
7
First published (updated )
Electronjs ElectronElectron: Out-of-package code execution when launched with arbitrary cwd
6.6
First published (updated )
Electronjs ElectronContext isolation bypass via nested unserializable return value in Electron
8.5
First published (updated )
Electronjs ElectronContent-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in Electron
9.8
First published (updated )
Electronjs ElectronElectron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Electronjs ElectronElectron's AutoUpdater module fails to validate certain nested components of the bundle
7.2
First published (updated )
Electronjs ElectronExposure of Resource to Wrong Sphere in Electron
9.8
First published (updated )
Electronjs ElectronRenderers can obtain access to random bluetooth device without permission in Electron
First published (updated )
Electronjs ElectronSandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
8.6
First published (updated )
Electronjs PoddycastImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in helper_entries
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Electronjs ElectronIPC messages misrouted in Electron
6.5
First published (updated )
Electronjs ElectronContext isolation bypass in Electron
6.8
First published (updated )
Electronjs ElectronUnpreventable top-level navigation in Electron
7.5
First published (updated )
Electronjs ElectronContext isolation bypass via Promise in Electron
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Electronjs ElectronArbitrary file read via window-open IPC in Electron
7.5
First published (updated )
Electronjs ElectronContext isolation bypass via leaked cross-context objects in Electron
First published (updated )
Electronjs ElectronContext isolation bypass via contextBridge in Electron
9.9
First published (updated )
Electronjs ElectronGitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elemen…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Electronjs ElectronOS Command Injection, Command Injection
9.3
First published (updated )