Sploitus

56 exploited vulnerabilities in Electron

Showing 1–50 of 56, highest-scoring first

Vendors
Unknown, Dompurify, Electron, Termius, Siyuan, Notesnook
With known exploits
56
Affected Electronjs Electron versions
< 15.5.5, 16.2.6, 17.2.0, 16.0.0, 17.0.0, 18.0.0, 38.8.6, 39.8.0, 40.7.0, 41.0.0, 39.8.1, 40.8.0, 1.7.12, 1.8.3, 2.0.0, 40.8.1
Affected Boostnote versions
≤ 0.22.0
Affected b3log Siyuan versions
< 3.6.2, 3.6.1
Affected Joplin Project Joplin versions
< 3.1
Affected Rambox versions
= 0.6.9
Affected Webcatalog versions
< 49.0
Affected Vikunja versions
< 2.2.2

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2026-32626
CVSS 10.0 CRITICAL 2026-03-13FIX AVAILABLE
CVE-2022-29247
CVSS 10.0 HIGH 2022-06-13FIX AVAILABLE
CVE-2026-34775
CVSS 9.8 CRITICAL 2026-04-03FIX AVAILABLE
CVE-2024-57061
CVSS 9.8 CRITICAL 2025-03-19
CVE-2021-41392
CVSS 9.8 CRITICAL 2021-09-17FIX AVAILABLE
CVE-2026-34449
CVSS 9.6 CRITICAL 2026-03-31FIX AVAILABLE
CVE-2026-33976
CVSS 9.6 CRITICAL 2026-03-27FIX AVAILABLE
CVE-2026-33334
CVSS 9.6 CRITICAL 2026-03-24FIX AVAILABLE
CVE-2025-47777
CVSS 9.6 CRITICAL 2025-05-14FIX AVAILABLE
CVE-2024-49362
CVSS 9.6 CRITICAL 2024-11-14
CVE-2026-54257
CVSS 9.3 CRITICAL 2026-06-15FIX AVAILABLE
CVE-2017-12581
CVSS 9.3 HIGH 2017-08-06FIX AVAILABLE
CVE-2026-39846
CVSS 9.0 CRITICAL 2026-04-07FIX AVAILABLE
CVE-2026-33066
CVSS 9.0 CRITICAL 2026-03-18FIX AVAILABLE
CVE-2026-33067 1 exploit
CVSS 9.0 CRITICAL 2026-03-18FIX AVAILABLE
Exploit for Cross-site Scripting in B3Log Siyuan
CVE-2026-32751
CVSS 9.0 CRITICAL 2026-03-16FIX AVAILABLE
CVE-2019-17625 1 exploit
CVSS 9.0 CRITICAL 2019-10-16
Exploit for OS Command Injection in Rambox
CVE-2026-34765
CVSS 8.8 HIGH 2026-04-07FIX AVAILABLE
CVE-2026-34772
CVSS 8.8 HIGH 2026-04-03FIX AVAILABLE
CVE-2026-34771
CVSS 8.8 HIGH 2026-04-03FIX AVAILABLE
CVE-2026-34770
CVSS 8.8 HIGH 2026-04-03FIX AVAILABLE
CVE-2026-34769
CVSS 8.8 HIGH 2026-04-03FIX AVAILABLE
CVE-2026-33336
CVSS 8.8 HIGH 2026-03-24FIX AVAILABLE
CVE-2023-42222 3 exploits
CVSS 8.8 HIGH 2023-09-27FIX AVAILABLE
WebCatalog 48.4 Arbitrary Protocol Execution / Code Execution VulnerabilityWebCatalog 48.4 - Arbitrary Protocol Execution
CVE-2026-40107
CVSS 8.7 HIGH 2026-04-09FIX AVAILABLE
CVE-2026-33955
CVSS 8.6 HIGH 2026-03-27FIX AVAILABLE
CVE-2025-22136
CVSS 8.6 HIGH 2025-01-08FIX AVAILABLE
CVE-2026-34780
CVSS 8.3 HIGH 2026-04-03FIX AVAILABLE
CVE-2026-34774
CVSS 8.1 HIGH 2026-04-03FIX AVAILABLE
CVE-2024-57783
CVSS 8.1 HIGH 2025-06-02FIX AVAILABLE
CVE-2018-1000136
CVSS 8.1 HIGH 2018-03-23FIX AVAILABLE
CVE-2026-33335
CVSS 8.0 HIGH 2026-03-24FIX AVAILABLE
CVE-2026-34779
CVSS 7.8 HIGH 2026-04-03FIX AVAILABLE
CVE-2026-34768
CVSS 7.8 HIGH 2026-04-03FIX AVAILABLE
CVE-2024-46992
CVSS 7.8 HIGH 2025-06-30FIX AVAILABLE
CVE-2026-34773
CVSS 7.5 HIGH 2026-04-03FIX AVAILABLE
CVE-2023-23623
CVSS 7.5 HIGH 2023-09-06FIX AVAILABLE
CVE-2022-36077
CVSS 7.2 HIGH 2022-11-08FIX AVAILABLE
CVE-2022-29257
CVSS 6.6 MEDIUM 2022-06-13FIX AVAILABLE
CVE-2026-34778
CVSS 6.5 MEDIUM 2026-04-03FIX AVAILABLE
CVE-2026-34767
CVSS 6.5 MEDIUM 2026-04-03FIX AVAILABLE
CVE-2024-48463 2 exploits
CVSS 6.5 MEDIUM 2024-11-04FIX AVAILABLE
Bruno IDE Desktop Command Injection VulnerabilityBruno IDE Desktop Command Injection
CVE-2025-55305
CVSS 6.1 MEDIUM 2025-08-19FIX AVAILABLE
CVE-2023-44402
CVSS 6.1 MEDIUM 2023-12-01FIX AVAILABLE
CVE-2023-39956
CVSS 6.1 MEDIUM 2023-09-06FIX AVAILABLE
CVE-2021-33041
CVSS 6.1 MEDIUM 2021-05-17FIX AVAILABLE
CVE-2024-46993
CVSS 6.0 MEDIUM 2025-06-30FIX AVAILABLE
CVE-2023-29198
CVSS 6.0 MEDIUM 2023-09-06FIX AVAILABLE
CVE-2026-34764
CVSS 5.5 MEDIUM 2026-04-03FIX AVAILABLE
CVE-2026-34777
CVSS 5.4 MEDIUM 2026-04-03FIX AVAILABLE