Skip to content
OpenAdvisories

Package · npm

electron

79 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2023-5217 Exploited Public exploit EPSS 49%

    Electron affected by libvpx's heap buffer overflow in vp8 encoding

    Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

    Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
    KEV Oct 2, 2023
  • High 8.8
    CVE-2023-4863 Exploited Public exploit EPSS 100%

    libwebp: OOB write in BuildHuffmanTable

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

    Google Chrome libwebp chromium Browsers Debian Ubuntu Alpine npm PyPI Go crates.io NuGet
    KEV Sep 13, 2023
  • High 8.1
    CVE-2018-15685 Public exploit EPSS 10%

    Electron webPreferences vulnerability can be used to perform remote code execution

    GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code executio…

    electron npm
  • High 8.8
    CVE-2018-1000006 Public exploit EPSS 89%

    Remote Code Execution in electron

    GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitra…

    electron npm