Skip to main content

Chromium RCE 漏洞修复

· 2 min read

在 Google Chromium 中发现了一个远程代码执行漏洞,影响所有最近版本的 Electron。任何访问远程内容的 Electron 应用都容易受到此漏洞的攻击,无论是否启用了 [沙箱选项]。

🌐 A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the sandbox option is enabled.

我们发布了两个新的 Electron 版本 1.7.81.6.14,其中都包含了对该漏洞的修复。我们强烈建议所有 Electron 开发者立即将他们的应用更新到最新的稳定版本:

🌐 We've published two new versions of electron 1.7.8 and 1.6.14, both of which include a fix for this vulnerability. We urge all Electron developers to update their apps to the latest stable version immediately:

npm i electron@latest --save-dev

要了解有关保持你的 Electron 应用安全的最佳做法,请参阅我们的 [安全教程]。

🌐 To learn more about best practices for keeping your Electron apps secure, see our security tutorial.

如果你希望报告 Electron 中的漏洞,请提交 [GitHub 安全咨询]。

🌐 Please file a GitHub Security Advisory if you wish to report a vulnerability in Electron.