Electrum

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    3
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-117603

    Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass

    Last Modified: Nov 02, 2026
    Published: Oct 27, 2026

    CVE-2026-117602

    Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution

    Last Modified: Oct 27, 2026
    Published: Oct 27, 2026

    CVE-2026-117601

    Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions

    Last Modified: Oct 28, 2026
    Published: Oct 27, 2026

    CVE-2022-31246

    paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data). On Windows, this can lead to capture of credentials over SMB. On Linux and UNIX, it can lead to a denial of service by specifying the /dev/zero filename.

    Last Modified: Nov 21, 2024
    Published: Jun 17, 2022

    CVE-2018-1000022

    Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin theft, if the user's wallet is not password protected. This attack appear to be exploitable via The victim must visit a web page with specially crafted javascript. This vulnerability appears to have been fixed in 3.0.5.

    Last Modified: Nov 21, 2024
    Published: Feb 09, 2018
    Items Per Page
    Electrum Vulnerabilities & Security CVEs | CVE-DB