News for hackers. Stuff that matters.
Re:Serious Chrome zero-day by flukus on Wednesday March 06, 2019 @06:36PM (#19324110)
> According to the official release notes, this vulnerability involves a memory mismanagement bug in a part of Chrome called FileReader. That’s a programming tool that makes it easy for web developers to pop up menus and dialogs asking you to choose from a list of local files, for example when you want to pick a file to upload or an attachment to add to your webmail.

It sounds like the bug occurs interacting with external code, win32 or equivalent. Even if chrome were written in a "safe" language this section would likely be in unsafe block.

Re:Serious Chrome zero-day by pcwalton on Wednesday March 06, 2019 @07:25PM (#19324472)
According to the patch, the problem involves memory management of DOM objects (specifically ArrayBuffers), not objects from native libraries.