All 38 CVE vulnerabilities found in electron, with AI-generated Chinese analysis, references, and POCs.
Vendor: electron
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2021-39184 | Sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API CWE-668 | 6.8 | Medium | 2021-10-12 |
| CVE-2020-26272 | Electron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFs CWE-668 | 5.4 | Medium | 2021-01-28 |
| CVE-2020-15215 | Context isolation bypass in Electron CWE-693 | 5.6 | Medium | 2020-10-06 |
| CVE-2020-15174 | Unpreventable top-level navigation in Electron CWE-693 | 7.5 | High | 2020-10-06 |
| CVE-2020-15096 | Context isolation bypass via Promise in Electron CWE-501 | 6.8 | Medium | 2020-07-07 |
| CVE-2020-4075 | Arbitrary file read via window-open IPC in Electron CWE-552 | 6.8 | Medium | 2020-07-07 |
| CVE-2020-4076 | Context isolation bypass via leaked cross-context objects in Electron CWE-501 | 7.8 | High | 2020-07-07 |
| CVE-2020-4077 | Context isolation bypass via contextBridge in Electron CWE-501 | 7.7 | High | 2020-07-07 |
All 38 known CVE vulnerabilities affecting electron with full Chinese analysis, references, and POCs where available.