diff --git a/app/.npmrc b/app/.npmrc
index 137b0270b55..21d145008ad 100644
--- a/app/.npmrc
+++ b/app/.npmrc
@@ -1,3 +1,3 @@
 runtime = electron
 disturl = https://electronjs.org/headers
-target = 28.2.9
+target = 28.3.3
diff --git a/package.json b/package.json
index 210a67670af..9d5d72e1cc5 100644
--- a/package.json
+++ b/package.json
@@ -159,7 +159,7 @@
     "@types/webpack-hot-middleware": "^2.25.6",
     "@types/webpack-merge": "^5.0.0",
     "@types/xml2js": "^0.4.11",
-    "electron": "28.2.9",
+    "electron": "28.3.3",
     "electron-builder": "^24.13.3",
     "electron-packager": "^17.1.2",
     "eslint-plugin-github": "^4.10.1",
diff --git a/script/validate-electron-version.ts b/script/validate-electron-version.ts
index 473fe22bf3e..2a4ef1ef993 100644
--- a/script/validate-electron-version.ts
+++ b/script/validate-electron-version.ts
@@ -15,8 +15,8 @@ type ChannelToValidate = 'production' | 'beta'
  * to a previous version of GitHub Desktop without losing all settings.
  */
 const ValidElectronVersions: Record<ChannelToValidate, string> = {
-  production: '28.2.9',
-  beta: '28.2.9',
+  production: '28.3.3',
+  beta: '28.3.3',
 }
 
 const channel =
diff --git a/yarn.lock b/yarn.lock
index 54399249f42..4a2e0bc1bdd 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3978,10 +3978,10 @@ electron-winstaller@*, electron-winstaller@^5.0.0:
     lodash.template "^4.2.2"
     temp "^0.9.0"
 
-electron@28.2.9:
-  version "28.2.9"
-  resolved "https://registry.yarnpkg.com/electron/-/electron-28.2.9.tgz#7c94a4901b1cb40993906f060a14a108039ac817"
-  integrity sha512-6b6G6jq4ypKxdCRNjULmqWEott4GJe2kaAykLonaTaeFqoFFHbzOu4k6pAzurseFhv452aUob9DAH6eI7UlOUw==
+electron@28.3.3:
+  version "28.3.3"
+  resolved "https://registry.yarnpkg.com/electron/-/electron-28.3.3.tgz#2df898f653c4f77b66b4cf3eeba79d8bea6d03c0"
+  integrity sha512-ObKMLSPNhomtCOBAxFS8P2DW/4umkh72ouZUlUKzXGtYuPzgr1SYhskhFWgzAsPtUzhL2CzyV2sfbHcEW4CXqw==
   dependencies:
     "@electron/get" "^2.0.0"
     "@types/node" "^18.11.18"