CVE-2017-16151

CVE-2017-16151

Vendor Hackerone
Product electron node module
Weakness CWE-94 · Code injection
Published June 7, 2018
Last update September 16, 2024

CVSS base score

What the vulnerability does

01Description

Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.

Key dates

02Disclosure timeline

June 7, 2018 CVE published
September 16, 2024 Record updated