electron kayıtları
electron üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-154 Improper Neutralization of Variable Name Delimiters1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-426 Untrusted Search Path1
- CWE-427 Uncontrolled Search Path Element1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2017-12581İstismar yok | GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability.electron · electron · CWE-78 | Yüksek8,1 | — | %6,7 | 5 Ağu 2017 |
32İzleyin | CVE-2026-54673İstismar yok | electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`electron · builder-util-runtime · CWE-200 | Yüksek8,2 | — | %0,4 | 30 Haz 2026 |
31İzleyin | CVE-2026-54672İstismar yok | electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`electron · electron-builder · CWE-427 | Yüksek7,8 | — | %0,2 | 30 Haz 2026 |
30İzleyin | CVE-2024-39698İstismar yok | Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6electron · electron-builder · CWE-154 | Yüksek7,5 | — | %0,4 | 9 Tem 2024 |
29İzleyin | CVE-2024-27303İstismar yok | electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)electron · electron-builder · CWE-426 | Yüksek7,3 | — | %0,3 | 6 Mar 2024 |
- CVE-2017-1258134İzleyin
GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability.
YüksekCVSS 8,1İstismar yokEPSS %7electron · electron5 Ağu 2017
- CVE-2026-5467332İzleyin
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
YüksekCVSS 8,2İstismar yokEPSS %0electron · builder-util-runtime30 Haz 2026
- CVE-2026-5467231İzleyin
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
YüksekCVSS 7,8İstismar yokEPSS %0electron · electron-builder30 Haz 2026
- CVE-2024-3969830İzleyin
Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6
YüksekCVSS 7,5İstismar yokEPSS %0electron · electron-builder9 Tem 2024
- CVE-2024-2730329İzleyin
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
YüksekCVSS 7,3İstismar yokEPSS %0electron · electron-builder6 Mar 2024