E
Vendor security profile
electron
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs41
Critical1
CISA KEV0
Public exploit2
Patch rate%46
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
17
0
2
0
16
6
0
CVE KEV
CVE severity distribution
41toplam CVE
Critical1 (2%)
High18 (44%)
Medium19 (46%)
Low3 (7%)
Patch and exploitation view
%46
Verified patch
%0
CISA KEV
%5
Public exploit
19Patch available
0Partial
0Workaround
0Vendor: no patch
22Unknown
Latest vulnerabilities
9.8
CVE-2026-86405
Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop
SE
Patch status unknownEPSS %0
9.8
CVE-2026-85531
Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x
SE
Patch status unknownEPSS %0
6.5
CVE-2026-85209
IDOR in AVEZ Electronics's LMS
AE
Patch status unknownEPSS %0
7.8
CVE-2026-102677
Electron: Sandboxed preload code cache can be poisoned by a compromised renderer
E
Patch verifiedEPSS %0
8.3
CVE-2026-102676
Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
E
Patch status unknownEPSS %0
7.4
CVE-2026-102675
Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled
E
Patch status unknownEPSS %0
8.2
CVE-2026-102674
Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
E
Patch status unknownEPSS %0
8.2
CVE-2026-102673
Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab
E
Patch status unknownEPSS %0
9.8
CVE-2026-12718
SQLi in Karel Electronics' KarelIPS
KE
Patch status unknownEPSS %0
7.7
CVE-2026-86585
Improper Verification of the Firmware Signature vulnerability
FE
Patch status unknownEPSS %0