CVE-2017-16151
CVE-2017-16151
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.
CVSS 9.8 · Critical · EPSS 2.7% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
electron node module
- Versions
- < 1.6.14 || >= 1.7.0 < 1.7.8: Affected
No fix published
electron npm
- Affected ranges
- SEMVER: < 1.6.14
Update to 1.6.14
electron npm
- Affected ranges
- SEMVER: ≥ 1.7.0, < 1.7.8
Update to 1.7.8