What is CVE-2024-46992?

CVE-2024-46992 is a high-severity vulnerability in Electron, classified under Improper Validation of Integrity Check Value. CVSS score: 7.8/10. Published 2025-07-01.

How severe is CVE-2024-46992?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Electron

CVE-2024-46992

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 30.0.0-alpha.1 to before 30.0.5 and 31.0.0-alpha.1 to before 31.0.0-beta.1, Electron is vulnerable to an ASA…

EPSS: 0.001 (1.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Electron — versions >= 30.0.0-alpha.1, < 30.0.5, >= 31.0.0-alpha.1, < 31.0.0-beta.1

Weakness classification (CWE)

CWE-354 — Improper Validation of Integrity Check Value

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-46992?: CVE-2024-46992 is a high-severity vulnerability in Electron, classified under Improper Validation of Integrity Check Value. CVSS score: 7.8/10. Published 2025-07-01.
How severe is CVE-2024-46992?: High severity. CVSS v3 base score is 7.8 out of 10.