CVE-2017-16151 | BDVDB-2026-101892 Detail

HackerOneelectron node module

Description#

Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-94 Improper Control of Generation of Code ('Code Injection')

References#

https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix
https://nodesecurity.io/advisories/539

Exploit#

No public exploit known

History#

Version 12018-06-07Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.