Electron
Security incidents tagged Electron. Newest first.
0 Electron incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 1137
- Longest quiet run: 1135 days (Sep 14–Oct 22)
Show 2 older incidents2 older incidents
September 2023 1
Highlibwebp heap overflow exploited in the wild (CVE-2023-4863)Patched
libwebp (Google Chrome and everything that bundles libwebp) Patched
A heap overflow in libwebp's lossless decoder, found by Apple SEAR and Citizen Lab after the BLASTPASS iPhone exploit, was exploited in the wild. Because libwebp is everywhere, browsers, Electron apps and image libraries that bundle it all had to ship updates.
Open incident →CVE-2023-4863
March 2023 1
- CriticalPatched
3CX DesktopApp supply-chain attack (trojanized signed builds)
Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.
3CX DesktopApp (Electron)Closed Apr 20, 2023
