CVE-2017-16151

    Dashboard / Vulnerabilities / CVE-2017-16151

    CVE-2017-16151

    Published: 7 Jun 2018Last Modified: 7 Aug 2026

    Summary:

    Details: Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.

    References: https://nodesecurity.io/advisories/539, https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -01ca2252cd5410c34c7e794672c7b59de301b4d4

    Affected versions

    v1.7.7
    v1.7.6
    v1.7.5
    v1.7.4
    v1.7.3
    v1.7.2
    v1.7.1
    v1.7.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High