GitHub Electron 1.7.15 1.8.7 2.0.7 and 3.0.0-beta.6 in certain scenarios involving IFRAME elements and \nativeWindowOpen: true\ or \sandbox: true\ options is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution.