---
id: 4669
title: "[CVE-2023-21674] Chaining N-days to Compromise All: Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape)"
cve: CVE-2023-21674
source_domain: theori.io
source_url: "https://theori.io/blog/chaining-n-days-to-compromise-all-part-2-windows-kernel-lpe-a-k-a-chrome-sandbox-escape"
published_at: "2024-03-31T15:00:00Z"
tags: ["use-after-free", "sandbox-escape", "windows-kernel", "cve-2023-21674", "alpc", "chrome-sandbox"]
phying_url: "https://phying.com/item/4669"
lang: en
---

# [CVE-2023-21674] Chaining N-days to Compromise All: Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape)

## Summary

Part two of the chain: how CVE-2023-21674, a use-after-free in the Windows NT kernel involving ALPC, was exploited to escape the Chrome sandbox — the year’s first in-the-wild kernel bug.

## Intelligence Metadata

- **Sources:** theori.io
- **CVE:** CVE-2023-21674
- **Published:** 2024-03-31T15:00:00Z
- **Original:** https://theori.io/blog/chaining-n-days-to-compromise-all-part-2-windows-kernel-lpe-a-k-a-chrome-sandbox-escape
- **Phying News:** https://phying.com/item/4669