CPE
A vulnerability in Electron prevents popups opened from sandboxed iframes from inheriting security restrictions, allowing potentially malicious content to access the embedding application's full origin.