2 matches found
CVE-2018-15685
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...
8.1CVSS8.4AI score0.10427EPSS
SaveExploits4References2
Electron WebPreferences Remote Command Execution Vulnerability
Electron is an open source library developed by Github to build cross-platform desktop applications using HTML, CSS and JavaScript.Electron accomplishes this by merging Chromium and Node.js into the same runtime environment and applications for Mac, Windows and Linux systems. A remote command...
8.1CVSS8.2AI score0.10427EPSS
SaveExploits4References1
20