Electron

Electron

39 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-34780

  • EPSS 0.33%
  • Veröffentlicht 04.04.2026 00:02:02
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 39.0.0-alpha.1 to before 39.8.0, 40.0.0-alpha.1 to before 40.7.0, and 41.0.0-alpha.1 to before 41.0.0-beta.8, apps that pass VideoFr...

7.8

CVE-2026-34779

  • EPSS 0.16%
  • Veröffentlicht 04.04.2026 00:00:41
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on macOS, app.moveToApplicationsFolder() used an AppleScript fallback path that did n...

6.5

CVE-2026-34778

  • EPSS 0.12%
  • Veröffentlicht 03.04.2026 23:59:07
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, a service worker running in a session could spoof reply messages on the internal IPC channel...

5.4

CVE-2026-34777

  • EPSS 0.12%
  • Veröffentlicht 03.04.2026 23:57:36
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, when an iframe requests fullscreen, pointerLock, keyboardLock, openExternal, or media permis...

5.3

CVE-2026-34776

  • EPSS 0.22%
  • Veröffentlicht 03.04.2026 23:56:42
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on macOS and Linux, apps that call app.requestSingleInstanceLock() were vulnerable to an out...

9.8

CVE-2026-34775

  • EPSS 0.29%
  • Veröffentlicht 03.04.2026 23:55:20
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.4, 40.8.4, and 41.0.0, the nodeIntegrationInWorker webPreference was not correctly scoped in all configurations. In...

8.1

CVE-2026-34774

  • EPSS 0.44%
  • Veröffentlicht 03.04.2026 23:52:38
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 39.8.1, 40.7.0, and 41.0.0, apps that use offscreen rendering and allow child windows via window.open() may be vulnerable to a u...

7.5

CVE-2026-34773

  • EPSS 0.24%
  • Veröffentlicht 03.04.2026 23:50:42
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on Windows, app.setAsDefaultProtocolClient(protocol) did not validate the protocol name befo...

8.8

CVE-2026-34772

  • EPSS 0.21%
  • Veröffentlicht 03.04.2026 23:49:20
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow downloads and programmatically destroy sessions may be vulnerable to ...

8.8

CVE-2026-34771

  • EPSS 0.29%
  • Veröffentlicht 03.04.2026 23:47:23
  • Zuletzt bearbeitet 24.07.2026 22:10:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that register an asynchronous session.setPermissionRequestHandler() may be vulne...