CVE-2018-15685

GitHub Electron versions 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6 are affected by a WebPreferences vulnerability when using IFRAME with nativeWindowOpen: true or sandbox: true, enabling remote code execution. The issue arises in Electron’s WebPreferences handling and can be triggered in nested wind...

CVE-2018-15685: Initialization of a Resource with an Insecure Default

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...

Electron WebPreferences Remote Command Execution Vulnerability

Electron is an open source library developed by Github to build cross-platform desktop applications using HTML, CSS and JavaScript.Electron accomplishes this by merging Chromium and Node.js into the same runtime environment and applications for Mac, Windows and Linux systems. A remote command...