News for hackers. Stuff that matters.

A comment on Chrome zero-day released on GitHub – fixed on V8 but still works on latest. Parent comment

Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by saurik on Monday April 12, 2021 @09:34PM (#26787242)
I would imagine the researcher showed a screenshot of the exploit being run on a copy of Chrom{e,ium} where he had disabled parts of the sandbox (that, or he has a more complex exploit with another maybe-undisclosed sandbox escape).
[ Parent | on HN ]
Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by r4j0x00 on Tuesday April 13, 2021 @03:29AM (#26789149)
Hey I'm the exploit author, just run "chrome.exe --no-sandbox exploit.html" it will work.
[ Parent | on HN ]
Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by superjan on Tuesday April 13, 2021 @06:59AM (#26790584)
What is your motivation of putting it on github? Have you considered selling it to google?
[ Parent | on HN ]
Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by albntomat0 on Tuesday April 13, 2021 @07:53AM (#26790976)
The bug was originally submitted to Google as part of Pwn2Own by two other people.

The GitHub POC was built using the patch and regression test by a third person (who you just replied to). While it's been patched in the v8 Javascript engine, that patch has not made it to Chrome (unless you're compiling Chromium from scratch) as part of Chrome's 2 week release process.

[ Parent | on HN ]