npm/electron CVE-2018-1000006: high 8.8, EPSS 84.38%

Remote Code Execution in electron

Action: Upgrade electron to 1.6.16 or later.

npm i electron@1.7.11

npm i electron@1.6.16

npm i electron@1.8.2-beta.4

Affected

Fixed versions

Sources

• osv: GHSA-w222-53c6-c86p
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000006
• https://electronjs.org/blog/protocol-handler-fix
• https://github.com/advisories/GHSA-w222-53c6-c86p
• https://github.com/electron/electron/releases/tag/v1.8.2-beta.4
• https://medium.com/@Wflki/exploiting-electron-rce-in-exodus-wallet-d9e6db13c374
• https://www.exploit-db.com/exploits/43899
• https://www.exploit-db.com/exploits/44357
• https://www.npmjs.com/advisories/563
• http://www.securityfocus.com/bid/102796

CVE-2018-1000006 · published 2018-01-23T03:57:44Z · modified 2023-11-08T03:59:33.174686Z · JSON