Description
Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.
Remediation
References
https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix
https://nodesecurity.io/advisories/539
Related Vulnerabilities
CVE-2016-10663 Vulnerability in npm package wixtoolset
CVE-2018-3721 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash
CVE-2016-9878 Vulnerability in maven package org.springframework:spring-webmvc
CVE-2016-1000339 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2019-12395 Vulnerability in maven package us.dynmap:dynmap