Electron

United States Open Source www.electronjs.org ↗
C
CAUTION
10
Total CVEs
4
Crit / High
3
Medium
0%
Unpatched
77%
Patched
7.1
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
77%
Unpatched
0%
Under Review
23%
✓ 10 patched ✗ 0 unpatched ~ 3 under review
▸ Intelligence by Audience
PoC Available
3 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"electron" port:443
org:"Electron" http.status:200
Top EPSS (Exploitation Probability)
CVE-2020-15174 1.35% exploitation probability
CVE-2020-4075 1.18% exploitation probability
CVE-2021-39184 1.05% exploitation probability
CVE-2022-29257 0.89% exploitation probability
CVE-2024-29900 0.63% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
10
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
7.1
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-08
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
GAO Finds Cybersecurity Gaps in Federal Health Record System - Legis1
Legis1 2026-08-25
HHS OCR Issues Notice of Proposed Rulemaking to Strengthen Cybersecurity for ePHI - Blank Rome LLP
Blank Rome LLP 2026-05-08
Violet teaming as a resilient framework for bridging civilian-military electronic health record interoperability - Frontiers
Frontiers 2026-05-15
Voting machines have real security issues. Researchers worry they could be weaponized by election deniers. - Politico
Politico 2026-08-13
AI Finds 38 Security Flaws in Electronic Health Record Platform - Dark Reading
Dark Reading 2026-04-29
When GPS Lies at Sea: How Electronic Warfare is Threatening Ships and Their Crews - Georgia Tech News Center
Georgia Tech News Center 2026-03-12
▸ Recent CVEs showing 20 of 13
CVE IDSeverityPatchEPSSDate
CVE-2026-102672 6.7 MEDIUM PATCH UNDER REVIEW — 2026-10-13
CVE-2026-102675 7.4 HIGH PATCH UNDER REVIEW — 2026-09-29
CVE-2026-54673 PoC 6.5 MEDIUM PATCHED / FIX AVAILABLE 0.24% 2026-06-30
CVE-2026-54672 PoC 7.8 HIGH PATCHED / FIX AVAILABLE 0.19% 2026-06-30
CVE-2025-55305 6.1 MEDIUM PATCHED / FIX AVAILABLE 0.27% 2025-09-04
CVE-2024-46993 4.4 MEDIUM PATCHED / FIX AVAILABLE 0.15% 2025-07-01
CVE-2024-46992 7.8 HIGH PATCHED / FIX AVAILABLE 0.11% 2025-07-01
CVE-2024-29900 7.5 HIGH PATCH UNDER REVIEW 0.63% 2024-03-29
CVE-2022-29257 PoC 6.6 MEDIUM PATCHED / FIX AVAILABLE 0.89% 2022-06-13
CVE-2021-39184 6.8 MEDIUM PATCHED / FIX AVAILABLE 1.05% 2021-10-12
CVE-2020-15174 7.5 HIGH PATCHED / FIX AVAILABLE 1.35% 2020-10-06
CVE-2020-4075 6.8 MEDIUM PATCHED / FIX AVAILABLE 1.18% 2020-07-07
CVE-2020-4076 7.8 HIGH PATCHED / FIX AVAILABLE 0.37% 2020-07-07
View all 13 CVEs for Electron →
▸Intel
Founded2013
CountryUnited States
LicenseOpen Source
Trust ScoreC — CAUTION
Max CVSS8.4
Last Updated2026-07-08
▸Top Weaknesses
CWE-122
Heap-Based Buffer Overflow
2 occurrences in Electron CVEs (20% of total)
CWE-122 ⓘ
2
CWE-345
Unknown Weakness Type
1 occurrence in Electron CVEs (10% of total)
CWE-345 ⓘ
1
CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
Unknown Weakness Type
1 occurrence in Electron CVEs (10% of total)
CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition) ⓘ
1
CWE-668
Unknown Weakness Type
1 occurrence in Electron CVEs (10% of total)
CWE-668 ⓘ
1
CWE-200
Sensitive Information Exposure
1 occurrence in Electron CVEs (10% of total)
CWE-200 ⓘ
1
CWE-471
Unknown Weakness Type
1 occurrence in Electron CVEs (10% of total)
CWE-471 ⓘ
1
CWE-749
Unknown Weakness Type
1 occurrence in Electron CVEs (10% of total)
CWE-749 ⓘ
1
CWE-78
Unknown Weakness Type
1 occurrence in Electron CVEs (10% of total)
CWE-78 ⓘ
1
▸Company Profile

Electron is an open-source framework developed by GitHub (now under Microsoft) that enables developers to build cross-platform desktop applications using web technologies like JavaScript, HTML, and CSS. It powers many popular applications such as Visual Studio Code, Slack, and Discord, making it a significant component in modern software development. From a cybersecurity perspective, Electron's reliance on Chromium and Node.js introduces unique attack surfaces, including vulnerabilities in embedded Chromium components and Node.js integration, which have been tracked in CVEs.

▸Response Metrics
Est. MTTR ⓘ ~44 days (Good)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +100% worse
CVE count 2026 vs 2025:  3 → 6 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€540K
Est. GDPR High
€5.4M

Based on 0 critical CVEs, 0 CISA KEV, 90% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Electron C valtersit.com