Description
Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.
Remediation
References
https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix
https://nodesecurity.io/advisories/539
Related Vulnerabilities
CVE-2020-5497 Vulnerability in maven package org.mitre:openid-connect-common
CVE-2019-10421 Vulnerability in maven package org.jenkins-ci.plugins:azure-event-grid-notifier
CVE-2021-21162 Vulnerability in maven package org.webjars.npm:electron
CVE-2019-3772 Vulnerability in maven package org.springframework.integration:spring-integration-xml
CVE-2023-26156 Vulnerability in maven package org.webjars.npm:chromedriver