Skip to content

Commit 0f43a1e

Browse files
authored
Add WeChat and yesterday's news: [2021-04-20 Recent Chromium bug used to attack Chinese WeChat users](https://therecord.media/recent-chromium-bug-used-to-attack-chinese-wechat-users/)
[2021-04-20 Recent Chromium bug used to attack Chinese WeChat users](https://therecord.media/recent-chromium-bug-used-to-attack-chinese-wechat-users/)
1 parent 27d66c9 commit 0f43a1e

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

README.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,11 +70,13 @@ Official Application List: [https://www.electronjs.org/apps](https://www.electro
7070
| **App** | **Sandbox** | **Built With** | **Source** | **Desktop Platforms** | **Risks** | **Other Examples** |
7171
|---|---|---|---|---|---|---|
7272
| [Slack](https://slack.com/) | Enabled | Electron |**Closed Source** | Windows, macOS, Linux | Untrusted desktop application without source code, but sandbox enabled. | [2020-09-28 XSS to HTML injection RCE](https://hackerone.com/reports/783877) |
73-
| [Twitch](https://twitch.com/) | **DISABLED** | Electron |**Closed Source** | Windows, macOS | Untrusted desktop application without source code |
73+
| [Twitch](https://twitch.com/) | **DISABLED** | Electron | **Closed Source** | Windows, macOS | Untrusted desktop application without source code |
7474
| [VSCode](https://code.visualstudio.com/) | **DISABLED** | Electron | [https://github.com/microsoft/vscode](https://github.com/microsoft/vscode) | Windows, macOS, Linux | Untrusted VSCode extensions can execute malicious code on your computer. | [ZDNet: Malicious extensions](https://www.zdnet.com/article/microsoft-releases-emergency-security-updates-for-windows-and-visual-studio/), [CVE-2020-17023 package.json RCE](https://msrc.microsoft.com/update-guide/en-us/vulnerability/CVE-2020-17023), [CVE-2020-17022 Image based RCE](https://msrc.microsoft.com/update-guide/en-us/vulnerability/CVE-2020-17022) |
7575
| [Signal](https://https://signal.org/) | **DISABLED** | Electron | [https://github.com/signalapp/Signal-Desktop](https://github.com/signalapp/Signal-Desktop) | Windows, macOS, Linux | A JavaScript based exploit would lead to RCE |
7676
| [FB Messenger](https://www.messenger.com/desktop) | **DISABLED** | Electron | **Closed Source** | Windows | Any JS based exploit would lead to RCE. |
7777
| [Microsoft Teams](https://code.visualstudio.com/) | **DISABLED** | Electron | **Closed Source** | Windows, macOS | Untrusted desktop application without source code. |
7878
| [Keybase](https://keybase.io/) | **DISABLED** | Electron | [https://github.com/keybase/client](https://github.com/keybase/client) | Windows, macOS, Linux | A JavaScript based exploit would lead to RCE |
7979
| [Discord](https://discord.com/) | **DISABLED** | Electron | **Closed Source** | Windows, macOS, Linux | Untrusted desktop application without source code. A JavaScript based exploit would lead to RCE |
80+
| [WeChat](https://pc.weixin.qq.com/) | **DISABLED** | Electron | **Closed Source** | [Windows](https://pc.weixin.qq.com/) | Untrusted desktop application without source code. | [2021-04-20 Recent Chromium bug used to attack Chinese WeChat users](https://therecord.media/recent-chromium-bug-used-to-attack-chinese-wechat-users/) |
81+
8082

0 commit comments

Comments
 (0)