CVE-2025-27608

Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting XSS vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the...

CVE-2025-27608 Self Cross-Site Scripting in Arduino IDE

Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting XSS vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the...

FreeBSD : electron{33,34} -- Incorrect handle provided in unspecified circumstances in Mojo (01a7e1e1-d249-4dd8-9a4a-ef95b5747afb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 01a7e1e1-d249-4dd8-9a4a-ef95b5747afb advisory. Electron developers report: This update fixes the following vulnerability: Tenable has extracted the...

electron{33,34} -- Incorrect handle provided in unspecified circumstances in Mojo

Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2025-2783...

FreeBSD : electron{33,34} -- Type Confusion in V8 (964aa5da-f094-47fe-9ebd-2142f9157440)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 964aa5da-f094-47fe-9ebd-2142f9157440 advisory. Electron developers report: This update fixes the following vulnerability: Tenable has extracted the...

Improper Isolation or Compartmentalization

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization that allows an attacker who can convince a user to follow a...

nodejs-electron-33.4.6-1.1 on GA media (moderate)

nodejs-electron-33.4.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:14917-1 Rating: moderate Cross-References: CVE-2025-1920 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2025:14917-1 nodejs-electron-33.4.6-1.1 on GA media

These are all security issues fixed in the nodejs-electron-33.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

electron{33,34} -- Type Confusion in V8

Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2025-1920...

CVE-2024-57061

An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...

Termius 安全漏洞

Termius is an SSH client from Termius, Inc. A security vulnerability exists in Termius versions 9.9.0 through 9.16.0, which stems from an insecure Electron Fuses configuration that could allow a physically proximate attacker to execute arbitrary code...

CVE-2024-57061

An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...

CVE-2024-57061

Termius desktop client (versions 9.9.0–9.16.0) is affected by an issue where an insecure Electron Fuses configuration enables a physically proximate attacker to execute arbitrary code. Root cause: misconfigured Electron Fuses in the app, allowing code execution. Impact: high, with potential compr...

CVE-2024-57061

An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...

Malicious code in digits-electron-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cbfd2aa51f6d4ff7a9bc75c482e5fde9d3f100b1f911d8f55dbc642696897aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14884-1 nodejs-electron-33.4.4-1.1 on GA media

These are all security issues fixed in the nodejs-electron-33.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in v8. Remediation A fix was pushed into the...

FreeBSD : electron33 -- multiple vulnerabilities (6ba9e26e-c9c6-49f7-ae43-47e5864f0b66)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6ba9e26e-c9c6-49f7-ae43-47e5864f0b66 advisory. Electron develpers report: This update fixes the following vulnerabilities: Tenable has...

FreeBSD : electron32 -- multiple vulnerabilities (6e27040b-61b7-4989-9471-dfb10c3cd76e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6e27040b-61b7-4989-9471-dfb10c3cd76e advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has extracted the...

electron33 -- multiple vulnerabilities

Electron develpers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2025-0445. Security: backported fix for CVE-2025-0995. Security: backported fix for CVE-2025-0998...