---
id: 4680
title: "Cleanly Escaping the Chrome Sandbox"
source_domain: theori.io
source_url: "https://theori.io/blog/cleanly-escaping-the-chrome-sandbox"
published_at: "2020-04-19T15:00:00Z"
tags: ["use-after-free", "sandbox-escape", "exploit", "chrome", "chromium", "mojo-ipc"]
phying_url: "https://phying.com/item/4680"
lang: en
---

# Cleanly Escaping the Chrome Sandbox

## Summary

Theori's walkthrough of Issue 1062091, a use-after-free in Chrome's browser process reached via Mojo IPC, turned into a sandbox escape for Chrome and Chromium-based Edge, with full exploit details.

## Intelligence Metadata

- **Sources:** theori.io
- **Published:** 2020-04-19T15:00:00Z
- **Original:** https://theori.io/blog/cleanly-escaping-the-chrome-sandbox
- **Phying News:** https://phying.com/item/4680