Cleanly Escaping the Chrome Sandbox
theori.io | research | #use-after-free | #sandbox-escape | #exploit | #chrome | #chromium | #mojo-ipc
Summary
Theori's walkthrough of Issue 1062091, a use-after-free in Chrome's browser process reached via Mojo IPC, turned into a sandbox escape for Chrome and Chromium-based Edge, with full exploit details.
- Published
- Collected
Skip to content