Skip to content
Fencer Intel
high 8.8

CVE-2018-1000006 in the critical feed json

Remote Code Execution in electron

published 8y ago modified 4mo ago also GHSA-w222-53c6-c86p , EUVD-2018-0166

cvss
8.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
88.8%
EPSS 88.8% chance of exploitation in 30 days, percentile 99.7%
public exploits
3
Metasploit and Exploit-DB

Summary

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.

Patch / fix

  • npm electron 1.6.16, 1.7.11, 1.8.2-beta.4

Is CVE-2018-1000006 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Timeline

  1. Published
  2. First public exploit (Metasploit exploit/windows/browser/exodus)

Exploit prediction

88.84% chance of exploitation in the next 30 days, higher than 99.7% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • Metasploit exploit/windows/browser/exodus Exodus Wallet (ElectronJS Framework) remote Code Execution metasploit exploit, manual rank, 2018-01-25
  • EDB-44357 Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit) remote, 2018-03-29
  • EDB-43899 Exodus Wallet (ElectronJS Framework) - Remote Code Execution remote, 2018-01-25

CVSS scores

assigned by version score vector
NVD 3.0 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 2.0 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C
GitHub 3.0 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
npm electron
>=1.7.0, <1.7.11
>=1.6.0, <1.6.16
>=1.8.0, <1.8.2-beta.4
1.7.11
1.6.16
1.8.2-beta.4

Classification

Weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.