Skip to main content

Atom

3 CVEs product

Monthly

CVE-2018-1000006 Jan 24, 23:29 npm HIGH POC PATCH THREAT Act Now

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Microsoft Electron Atom
NVD GitHub Exploit-DB
CVSS 3.0
8.8
EPSS
84.4%
CVE-2020-35897 Dec 31, 10:15 Cargo MEDIUM PATCH This Month

An issue was discovered in the atom crate before 0.3.6 for Rust. Rated medium severity (CVSS 4.7). No vendor patch available.

Information Disclosure Race Condition Atom
NVD
CVSS 3.1
4.7
EPSS
0.2%
CVE-2016-1202 Apr 25, 18:59 npm HIGH PATCH This Week

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Node.js Electron Atom
NVD GitHub
CVSS 3.0
7.8
EPSS
0.1%
EPSS 84% CVSS 8.8
HIGH POC PATCH THREAT Act Now

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Microsoft Electron +1
NVD GitHub Exploit-DB
EPSS 0% CVSS 4.7
MEDIUM PATCH This Month

An issue was discovered in the atom crate before 0.3.6 for Rust. Rated medium severity (CVSS 4.7). No vendor patch available.

Information Disclosure Race Condition Atom
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Node.js Electron +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy