What is CVE-2018-1000006?

CVE-2018-1000006 is a vulnerability in N/a. Published 2018-01-24.

Is CVE-2018-1000006 known to be exploited?

13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2018-1000006

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can b…

EPSS: 0.923 (99.7th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

References

43899 (exploit, x_refsource_EXPLOIT-DB)
github.com/electron/electron/releases/tag/v1.8.2-beta.4 (x_refsource_CONFIRM)
medium.com/@Wflki/exploiting-electron-rce-in-exodus-wallet-d9e6db13c374 (x_refsource_MISC)
electronjs.org/blog/protocol-handler-fix (x_refsource_CONFIRM)
102796 (vdb-entry, x_refsource_BID)
44357 (exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2018-1000006?: CVE-2018-1000006 is a vulnerability in N/a. Published 2018-01-24.
Is CVE-2018-1000006 known to be exploited?: 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.