Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2020-0981

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2020-0981.

Coverage Span
2020-04-21
Reports
1 related reports

Associated Reports & Timeline

1.
[CVE-2020-0981] You Won't Believe what this One Line Change Did to the Chrome Sandbox
projectzero.google | vulnerability | | original ↗ | #windows | #cve | #chrome | #project-zero
This blog is about a vulnerability introduced in Windows 10 1903 which broke some of the security assumptions that Chromium relied on to make the sandbox secure. I’ll present how I used the bug to develop a chain of execution to escape the sandbox as used for the GPU Process on Chrome/Edge or the default content sandbox in Firefox. The exploitation process is also an interesting insight into the little weaknesses in Windows which in themselves do not cross a security boundary but led to a successful sandbox escape. This vulnerability was fixed in April 2020 as CVE-2020-0981.