Browse all 38 CVE security advisories affecting electron. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Paused |
|---|---|---|---|---|
| CVE-2021-39184 | Sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API — electronCWE-668 | 6.8 | Medium | 2021-10-12 |
| CVE-2020-26272 | Electron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFs — electronCWE-668 | 5.4 | Medium | 2021-01-28 |
| CVE-2020-15215 | Context isolation bypass in Electron — electronCWE-693 | 5.6 | Medium | 2020-10-06 |
| CVE-2020-15174 | Unpreventable top-level navigation in Electron — electronCWE-693 | 7.5 | High | 2020-10-06 |
| CVE-2020-15096 | Context isolation bypass via Promise in Electron — electronCWE-501 | 6.8 | Medium | 2020-07-07 |
| CVE-2020-4075 | Arbitrary file read via window-open IPC in Electron — electronCWE-552 | 6.8 | Medium | 2020-07-07 |
| CVE-2020-4076 | Context isolation bypass via leaked cross-context objects in Electron — electronCWE-501 | 7.8 | High | 2020-07-07 |
| CVE-2020-4077 | Context isolation bypass via contextBridge in Electron — electronCWE-501 | 7.7 | High | 2020-07-07 |
This page lists every published CVE security advisory associated with electron. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.