Electron protocol handler RCE affects GitHub Desktop, Atom, and many Electron apps on Windows. Update all Electron-based applications. Electron apps that register custom URI handlers are a persistent attack surface for remote code execution.
GitHub Desktop before 1.0.13 on Windows, Atom before 1.23.2 on Windows, and other products that use electron before 1.8.2-beta.3 allow remote websites to execute arbitrary code via custom protocol handler misregistration.
Exploit-DB.ai delivers real-time AI-triaged zero-day alerts directly to your inbox.
Activate Supernova →