diff --git a/bun.lock b/bun.lock
index f0a4f9147b3..9dbd7895ccc 100644
--- a/bun.lock
+++ b/bun.lock
@@ -216,7 +216,7 @@
         "vite-plugin-top-level-await": "^1.6.0",
       },
       "optionalDependencies": {
-        "electron": "^44.9.0",
+        "electron": "^44.10.0",
         "robotjs": "^0.9.1",
       },
     },
@@ -2209,7 +2209,7 @@
 
     "ejs": ["ejs@3.1.10", "", { "dependencies": { "jake": "^10.8.5" }, "bin": { "ejs": "bin/cli.js" } }, "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA=="],
 
-    "electron": ["electron@44.9.0", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-boP8zA5OIoMGYe3uWP4IqB1VJNoEzdHYgcBaVYnd1DBv5TogwXkbM4yJGSfNmYCzalVQ5J3TAIbaKOY+ILTnyg=="],
+    "electron": ["electron@44.10.0", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-ss4pCfrQKV4TWkuVYtWB4HmeysPZgB96cSYNKYZv1UVCRP4vQMGNW5oopFbvx6Bbfce1XtP5pm5RDuKehp0svQ=="],
 
     "electron-builder": ["electron-builder@24.13.3", "", { "dependencies": { "app-builder-lib": "24.13.3", "builder-util": "24.13.1", "builder-util-runtime": "9.2.4", "chalk": "^4.1.2", "dmg-builder": "24.13.3", "fs-extra": "^10.1.0", "is-ci": "^3.0.0", "lazy-val": "^1.0.5", "read-config-file": "6.3.2", "simple-update-notifier": "2.0.0", "yargs": "^17.6.2" }, "bin": { "electron-builder": "cli.js", "install-app-deps": "install-app-deps.js" } }, "sha512-yZSgVHft5dNVlo31qmJAe4BVKQfFdwpRw7sFp1iQglDRCDD6r22zfRJuZlhtB5gp9FHUxCMEoWGq10SkCnMAIg=="],
 
diff --git a/bunfig.toml b/bunfig.toml
index 3b293d6a4b0..8b02493d5f7 100644
--- a/bunfig.toml
+++ b/bunfig.toml
@@ -10,4 +10,6 @@ preload = ["./tests/setup.ts"]
 minimumReleaseAge = 604800
 # happy-dom 21.0.4 (2026-10-20) fixes 3 high alerts (#7384). Remove the entry after 2026-10-27, when
 # it is a week old.
-minimumReleaseAgeExcludes = ["happy-dom"]
+# electron 44.10.0 (2026-10-27) bundles Node 24.22.1, the CVE-2026-111497 fix (#7358). Remove the
+# entry after 2026-11-03, when it is a week old.
+minimumReleaseAgeExcludes = ["happy-dom", "electron"]
diff --git a/package.json b/package.json
index 31c2fe8c017..863d19e9823 100644
--- a/package.json
+++ b/package.json
@@ -261,7 +261,7 @@
     "vite-plugin-top-level-await": "^1.6.0"
   },
   "optionalDependencies": {
-    "electron": "^44.9.0",
+    "electron": "^44.10.0",
     "robotjs": "^0.9.1"
   },
   "files": [