Baja
CVE-2026-34766
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 102
Restablecer filtros
Alta
CVE-2026-34725
dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration
Alta
CVE-2025-68619
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
Media
CVE-2025-59417
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
Media
CVE-2025-55305
Electron has ASAR Integrity Bypass via resource modification
Media
CVE-2024-46993
Electron vulnerable to Heap Buffer Overflow in NativeImage
Alta
CVE-2024-46992
electron ASAR Integrity bypass by just modifying the content
Alta
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Baja
CVE-2024-45835
Mattermost Desktop App fails to sufficiently configure Electron Fuses
Alta
CVE-2024-39698
electron-updater Code Signing Bypass on Windows
Baja
CVE-2024-36287
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
Alta
CVE-2024-34347
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
Alta
CVE-2024-29900
@electron/packager's build process memory potentially leaked into final executable
Alta
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
Alta
CVE-2024-1648
Cross-site Scripting in electron-pdf
Media
CVE-2023-44402
ASAR Integrity bypass via filetype confusion in electron
Alta
Explotada en ataques
CVE-2023-5217
Electron affected by libvpx's heap buffer overflow in vp8 encoding
Alta
Explotada en ataques
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
Media
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Media
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
Alta
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Crítica
CVE-2022-25908
Command Injection in create-choo-electron
Crítica
Explotada en ataques
CVE-2022-4135
Heap buffer overflow in GPU
Media
CVE-2022-36077
Exfiltration of hashed SMB credentials on Windows via file:// redirect
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.