high8.1Public exploit code
CVE-2018-15685
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options,…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Electron WebPreferences - Remote Code Execution2018-08-27 · remote · multiple · Verified
Impact
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Electronjs | Electron | Versions 1.7.15, 1.8.7, 2.0.7, 3.0.0 |