{"id":"CVE-2017-16151","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-16151","generatedAt":"2026-10-28T19:46:57.868Z","title":"Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron.","description":"Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.","published":"2018-06-07T02:29:04.000Z","lastModified":"2026-06-17T01:08:53.000Z","status":"Modified","sourceIdentifier":"support@hackerone.com","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-94"],"affected":["electronjs/electron"],"epss":{"score":0.02675,"percentile":0.85705,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (2.67%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix","tags":["Broken Link"],"source":"support@hackerone.com"},{"url":"https://nodesecurity.io/advisories/539","tags":["Third Party Advisory"],"source":"support@hackerone.com"},{"url":"https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://nodesecurity.io/advisories/539","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-16151","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}