CVE-2018-15685
HIGH 8.1EPSS 10.4%
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution.
- CVSS v3.0
- 8.1 HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.0
- 8.1 HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 10.43% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2018-08-23
- Updated
- 2024-08-05
Proof-of-concept exploits (2)
- jamoski3112/Electron_RCE0★ · 2018-08-27
- rahulr311295/Electron_RCE0★ · 2018-08-27