Skip to content
OpenAdvisories

Package · npm

electron

79 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-54257

    Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

    Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.1 until 42.3.3, Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow. Most apps will crash and some may per…

    electron electron electron npm
  • Critical 9.6
    CVE-2022-4135 Exploited EPSS 32%

    Heap buffer overflow in GPU

    Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu npm
    KEV Nov 28, 2022
  • Critical 9.8
    CVE-2017-16151

    Chromium Remote Code Execution in electron

    Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless …

    HackerOne electron node module electron npm