Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
7.8 HIGH
CVE-2026-34779 — Electron: AppleScript injection in app.moveToApplicationsFolder on macOS

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on macOS, app.moveToApplicationsFo…

electron | Authentication
Apr 04, 2026 Apr 14, 2026
Apr 04, 2026
Apr 14, 2026
6.5 MEDIUM
CVE-2026-34778 — Electron: Service worker can spoof executeJavaScript IPC replies

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, a service worker running in a session cou…

electron | Remote | Information Disclosure
Apr 04, 2026 Apr 20, 2026
Apr 04, 2026
Apr 20, 2026
5.4 MEDIUM
CVE-2026-34777 — Electron: Incorrect origin passed to permission request handler for iframe requests

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, when an iframe requests fullscreen, point…

electron | Remote | Authorization
Apr 04, 2026 Apr 20, 2026
Apr 04, 2026
Apr 20, 2026
5.3 MEDIUM
CVE-2026-34776 — Electron: Out-of-bounds read in second-instance IPC on macOS and Linux

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on macOS and Linux, apps that call app.re…

electron | Memory Corruption
Apr 04, 2026 Apr 27, 2026
Apr 04, 2026
Apr 27, 2026
9.8 CRITICAL
CVE-2026-34775 — Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.4, 40.8.4, and 41.0.0, the nodeIntegrationInWorker webPreference…

electron | Remote | Misconfiguration
Apr 04, 2026 Apr 22, 2026
Apr 04, 2026
Apr 22, 2026
8.1 HIGH
CVE-2026-34774 — Electron: Use-after-free in offscreen child window paint callback

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 39.8.1, 40.7.0, and 41.0.0, apps that use offscreen rendering and allow child…

electron | Remote | Memory Corruption
Apr 04, 2026 Apr 22, 2026
Apr 04, 2026
Apr 22, 2026
7.5 HIGH
CVE-2026-34773 — Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on Windows, app.setAsDefaultProtocolClien…

electron | Remote | Misconfiguration
Apr 04, 2026 Apr 22, 2026
Apr 04, 2026
Apr 22, 2026
8.8 HIGH
CVE-2026-34772 — Electron: Use-after-free in download save dialog callback

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow downloads and prog…

electron | Remote | Memory Corruption
Apr 04, 2026 Apr 22, 2026
Apr 04, 2026
Apr 22, 2026
8.8 HIGH
CVE-2026-34771 — Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permi…

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that register an asynchronous…

electron | Remote | Memory Corruption
Apr 04, 2026 Apr 22, 2026
Apr 04, 2026
Apr 22, 2026
8.8 HIGH
CVE-2026-34770 — Electron: Use-after-free in PowerMonitor on Windows and macOS

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, apps that use the powerMonitor mod…

electron | Remote | Memory Corruption
Apr 04, 2026 Apr 22, 2026
Apr 04, 2026
Apr 22, 2026
7.8 HIGH
CVE-2026-34769 — Electron: Renderer command-line switch injection via undocumented commandLineSwitches web…

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitche…

electron | Misconfiguration
Apr 04, 2026 Apr 09, 2026
Apr 04, 2026
Apr 09, 2026
7.8 HIGH
CVE-2026-34768 — Electron: Unquoted executable path in app.setLoginItemSettings on Windows

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on Windows, app.setLoginItemSettin…

electron | Misconfiguration
Apr 04, 2026 Apr 09, 2026
Apr 04, 2026
Apr 09, 2026
6.5 MEDIUM
CVE-2026-34767 — Electron: HTTP Response Header Injection in custom protocol handlers and webRequest

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.3, 40.8.3, and 41.0.3, apps that register custom protocol handle…

electron | Remote | Injection
Apr 04, 2026 Apr 09, 2026
Apr 04, 2026
Apr 09, 2026
5.4 MEDIUM
CVE-2026-34766 — Electron: USB device selection not validated against filtered device list

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, the select-usb-device event callba…

electron | Remote | Authorization
Apr 04, 2026 Apr 09, 2026
Apr 04, 2026
Apr 09, 2026
Showing 20 of 5494 Results