33.2.1
12 years ago
11 days ago
Known vulnerabilities in the electron package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access Restriction Bypass due to an inappropriate implementation in the How to fix Access Restriction Bypass? Upgrade | <31.7.5>=32.0.0-alpha.1 <32.2.5>=33.0.0 <33.2.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <31.7.5>=32.0.0-alpha.1 <32.2.5 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') via a crafted HTML page. An attacker can potentially exploit heap corruption. How to fix Access of Resource Using Incompatible Type ('Type Confusion')? Upgrade | <32.2.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Access Control due to an inappropriate implementation in Extensions. An attacker can bypass site isolation. How to fix Improper Access Control? Upgrade | <31.7.4>=32.0.0 <32.2.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') via a crafted HTML page. An attacker can potentially exploit heap corruption. How to fix Access of Resource Using Incompatible Type ('Type Confusion')? Upgrade | <31.7.4>=32.0.0 <32.2.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Write in Dawn. How to fix Out-of-bounds Write? Upgrade | <31.7.4>=32.0.0 <32.2.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow through the How to fix Heap-based Buffer Overflow? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in Fonts. How to fix Heap-based Buffer Overflow? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in Skia. How to fix Heap-based Buffer Overflow? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in Skia. How to fix Heap-based Buffer Overflow? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion via the V8 engine. How to fix Type Confusion? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-Bounds Write via the V8 engine. An attacker can potentially exploit heap corruption by crafting a malicious HTML page. How to fix Out-of-Bounds Write? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in Skia How to fix Heap-based Buffer Overflow? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter via a crafted HTML page. An attacker can perform an out of bounds memory write by sending a specially crafted HTML content. How to fix External Control of Assumed-Immutable Web Parameter? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion. An attacker can access memory locations outside of the intended bounds by crafting a malicious HTML page that triggers type confusion in the V8 engine. How to fix Type Confusion? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read via a crafted HTML page. An attacker can access memory locations outside the intended boundary by crafting a malicious HTML page that triggers the flaw. How to fix Out-of-bounds Read? Upgrade | <31.7.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in Skia. How to fix Out-of-bounds Read? Upgrade | <31.7.2>=32.2.0 <32.2.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion via crafted HTML content. How to fix Type Confusion? Upgrade | <31.7.1>=32.2.0 <32.2.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion in How to fix Type Confusion? Upgrade | <31.7.1>=32.2.0 <32.2.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion in v8 engine. How to fix Type Confusion? A fix was pushed into the | * |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read via a crafted HTML page. An attacker can potentially perform a sandbox escape by manipulating the memory outside its intended buffer limits. How to fix Out-of-bounds Read? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read through the V8 engine. An attacker can access memory locations outside of the intended bounds by crafting a malicious HTML page. Note: This is only exploitable if the user navigates to or is redirected to a malicious web page. How to fix Out-of-bounds Read? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via specific UI gestures in the How to fix Use After Free? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow through the Note: This is only exploitable if the user navigates to or is redirected to a malicious web page. How to fix Heap-based Buffer Overflow? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Race Condition via a crafted Chrome Extension. An attacker who convinced a user to install a malicious extension can inject scripts or HTML into a privileged page. How to fix Race Condition? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.6>=30.0.0 <30.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <30.4.0>=31.0.0 <31.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <30.4.0>=31.0.0 <31.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.5>=30.0.0 <30.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to the improper handling of memory in the How to fix Use After Free? Upgrade | <29.4.5>=30.0.0 <30.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.5>=30.0.0 <30.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.5>=30.0.0 <30.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion via a crafted HTML page in the V8 engine. **Note: ** This is only exploitable if the user navigates to or is redirected to the malicious page. How to fix Type Confusion? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read through the How to fix Out-of-bounds Read? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the Note: 126.0.6478.56 is the fixed version for Windows and Mac. Version 126.0.6478.54 fixes the vulnerability in Linux How to fix Use After Free? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to the improper handling of memory in the Note: 126.0.6478.56 is the fixed version for Windows and Mac. Version 126.0.6478.54 fixes the vulnerability in Linux How to fix Use After Free? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the How to fix Heap-based Buffer Overflow? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the How to fix Heap-based Buffer Overflow? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion due to the How to fix Type Confusion? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in the scheduling process. An attacker can execute arbitrary code inside a sandbox by using a crafted HTML page. How to fix Use After Free? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-Bounds Write through the How to fix Out-of-Bounds Write? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow through the How to fix Heap-based Buffer Overflow? Upgrade | <29.4.3>=30.0.0-alpha.1 <30.1.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade | <29.4.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in How to fix Heap-based Buffer Overflow? Upgrade | <22.3.25>=23.0.0 <24.8.5>=25.0.0 <25.8.4>=26.0.0 <26.2.4>=27.0.0-alpha.1 <27.0.0-beta.8 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in WebRTC, exploitable via a crafted HTML page. How to fix Out-of-bounds Read? Upgrade | <22.3.16 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <27.3.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow via a crafted HTML page. An attacker can potentially exploit heap corruption by deceiving a user to visit a malicious web page. How to fix Heap-based Buffer Overflow? Upgrade | <27.3.3 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Privilege Context Switching Error in How to fix Privilege Context Switching Error? Upgrade | <29.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-Bounds memory access in How to fix Out-of-Bounds? Upgrade | <27.3.10>=28.0.0 <28.3.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Integer Overflow or Wraparound when decoding videos with a large frame size. An attacker can cause memory corruption within the AV1 decoder by providing a specially crafted video file. How to fix Integer Overflow or Wraparound? Upgrade | <27.3.11>=28.0.0 <28.3.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Write in the How to fix Out-of-bounds Write? Upgrade | <27.3.11>=28.0.0 <28.3.1>=29.0.0 <29.3.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the ANGLE component. An attacker can potentially exploit heap corruption through a crafted HTML page. How to fix Heap-based Buffer Overflow? Upgrade | <27.3.11>=28.0.0 <28.3.1>=29.0.0 <29.3.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to improper handling of objects in memory in the Dawn component. An attacker can cause heap corruption and potentially execute arbitrary code by convincing a user to visit a specially crafted HTML page. How to fix Use After Free? Upgrade | <27.3.11>=28.0.0 <28.3.1>=29.0.0 <29.3.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer due to an inappropriate implementation in the V8 engine. An attacker can potentially perform out of bounds memory access by crafting a malicious HTML page. How to fix Improper Restriction of Operations within the Bounds of a Memory Buffer? Upgrade | <29.3.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to improper handling in the How to fix Use After Free? Upgrade | <27.3.9>=28.0.0-alpha.1 <28.2.10>=29.0.0-alpha.1 <29.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion due to a flaw in the WebAssembly component. An attacker can execute arbitrary code on the victim's machine by convincing them to visit a maliciously crafted HTML page. How to fix Type Confusion? Upgrade | <27.3.9>=28.0.0-alpha.1 <28.2.10>=29.0.0-alpha.1 <29.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to improper handling of objects in memory in the ANGLE graphics engine. An attacker can cause heap corruption and potentially execute arbitrary code by convincing a user to visit a specially crafted HTML page. How to fix Use After Free? Upgrade | <27.3.9>=28.0.0-alpha.1 <28.2.10>=29.0.0-alpha.1 <29.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to the improper handling of objects in memory in the How to fix Use After Free? Upgrade | <27.3.9>=28.0.0-alpha.1 <28.2.10>=29.0.0-alpha.1 <29.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to NULL Pointer Dereference in V8, due to an object lifecycle issue involving scope inheritance. How to fix NULL Pointer Dereference? Upgrade | <27.3.8>=28.0.0 <28.2.9>=29.0.0 <29.1.6 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Denial of Service (DoS) via an Out of bounds memory access in V8. How to fix Denial of Service (DoS)? Upgrade | <27.3.6>=28.0.0-alpha.1 <28.2.7>=29.0.0-alpha.1 <29.1.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <27.3.5>=28.0.0 <28.2.6 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <27.3.4>=28.0.0 <28.2.5 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the Web Audio feature. An attacker can potentially exploit heap corruption by crafting a malicious HTML page. How to fix Use After Free? Upgrade | <26.6.8>=27.0.0 <27.3.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read allowing a remote attacker to exploit heap corruption via a crafted HTML page. Note: The Stable channel has been updated to 120.0.6099.234 for Mac devices. How to fix Out-of-bounds Read? Upgrade | <26.6.7 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Write allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Note: The Stable channel has been updated to 120.0.6099.234 for Mac devices. How to fix Out-of-bounds Write? Upgrade | <26.6.6>=27.0.0 <27.2.3>=28.0.0 <28.1.4 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion due to a type confusion in V8. A remote attacker could exploit heap corruption via a crafted HTML page. Note: The Stable channel has been updated to 120.0.6099.234 for Mac devices. How to fix Type Confusion? Upgrade | <26.6.6>=27.0.0 <27.2.3>=28.0.0 <28.1.4 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <26.6.5>=27.0.0 <27.2.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the ANGLE component. How to fix Heap-based Buffer Overflow? Upgrade | <26.6.5>=27.0.0 <27.2.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the ANGLE component. An attacker can potentially exploit heap corruption by convincing a user to visit a crafted HTML page. How to fix Use After Free? Upgrade | <26.6.5>=27.0.0 <27.2.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade | <26.6.5>=27.0.0 <27.2.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the WebRTC framework, used to provide Real-Time Communications (RTC) capabilities via JavaScript APIs. How to fix Heap-based Buffer Overflow? Upgrade | <26.6.3>=27.0.0 <27.2.0>=28.0.0 <28.1.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the Media Stream process. An attacker can potentially exploit heap corruption by crafting a malicious HTML page. How to fix Use After Free? Upgrade | <26.6.3>=27.0.0 <27.2.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity when the An attacker can edit files inside the Note This is only exploitable if your app is launched from a filesystem the attacker has write access to and is specific to macOS, as these fuses are only supported on macOS. How to fix Insufficient Verification of Data Authenticity? Upgrade | <22.3.24>=24.0.0-alpha.1 <24.8.3>=25.0.0-alpha.1 <25.8.1>=26.0.0-alpha.1 <26.2.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the USB component. How to fix Integer Overflow or Wraparound? Upgrade | <25.9.4>=26.0.0-alpha.1 <26.5.0>=27.0.0-alpha.1 <27.0.4 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Input Validation in the USB component. How to fix Improper Input Validation? Upgrade | <25.9.4>=26.0.0-alpha.1 <26.5.0>=27.0.0-alpha.1 <27.0.4 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Access Control via nested unserializable return value when using Note This issue is exploitable under either of two conditions:
How to fix Improper Access Control? Upgrade | <23.2.3>=24.0.0-alpha.1 <25.0.0-alpha.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-Bounds when the How to fix Out-of-Bounds? Upgrade | <22.3.23>=23.0.0 <24.8.2>=25.0.0 <25.8.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. How to fix Out-of-bounds Read? Upgrade | <22.3.5 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in Metrics by allowing a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. How to fix Heap-based Buffer Overflow? Upgrade | <21.4.4>=22.0.0 <22.3.5 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in WebRTC, causing heap corruption. How to fix Use After Free? Upgrade | <20.3.12>=21.0.0 <21.4.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in Network Service via a crafted HTML page and specific interactions. How to fix Heap-based Buffer Overflow? Upgrade | <20.3.10>=21.0.0-alpha.1 <21.3.5 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in Mojo, via heap corruption. How to fix Use After Free? Upgrade | <20.3.9>=21.0.0 <21.4.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <19.1.7>=20.0.0 <20.3.7 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in Crashpad in Google Chrome on Android, which allows a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. How to fix Heap-based Buffer Overflow? Upgrade | <19.1.7>=20.0.0 <20.3.7 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Denial of Service (DoS) due to type confusion in V8, which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. How to fix Denial of Service (DoS)? Upgrade | <19.1.7>=20.0.0 <20.3.7 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <19.1.7>=20.0.0 <20.3.7 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the Web Workers, which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. How to fix Use After Free? Upgrade | <19.1.7>=20.0.0 <20.3.7 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Information Exposure in that it reveals hashed credentials when the target of a redirect is an SMB URL, such as one using the NOTE: This vulnerability is only exploitable on Windows. How to fix Information Exposure? Upgrade | <18.3.7>=19.0.0-beta.1 <19.0.11>=20.0.0-beta.1 <20.0.1 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in Layout. How to fix Use After Free? Upgrade | <19.1.5>=20.0.0 <20.3.5 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Input Validation in file system. How to fix Improper Input Validation? Upgrade | <19.1.5>=20.0.0 <21.2.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion in V8. How to fix Type Confusion? Upgrade | <19.1.5>=20.0.0 <20.3.5 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in Frames, via a crafted HTML page. How to fix Use After Free? Upgrade | <18.3.14>=19.0.0 <19.1.0 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in regular expressions (V8). How to fix Use After Free? Upgrade | <15.5.3>=16.0.0 <16.2.4>=17.0.0 <17.4.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | >=20.0.0 <20.1.2>=19.0.0 <19.1.0<18.3.12 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | >=19.0.0 <19.1.0<18.3.14 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <18.3.12>=19.0.0 <19.0.16>=20.0.0 <20.1.2 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <18.3.14>=20.0.0 <20.1.4 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Denial of Service (DoS) due to insufficient validation of untrusted input in V8. How to fix Denial of Service (DoS)? Upgrade | <18.3.14 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in SwiftShader. How to fix Use After Free? Upgrade | <19.0.15 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade | <18.3.11 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Authentication by allowing the creation of cookies that have an empty name field and whose value impersonates a cookie name prefix. Note: Upgrading to the fixed version will delete any previously stored cookies that meet the conditions by causing them to fail their How to fix Improper Authentication? Upgrade | <18.3.11 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free when How to fix Use After Free? Upgrade | <18.3.11>=19.0.0 <19.0.15 |
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access Control Bypass due to insufficient policy enforcement in How to fix Access Control Bypass? Upgrade | <18.3.9 |