---
id: 4682
title: "Chakra JIT CFG Bypass"
source_domain: theori.io
source_url: "https://theori.io/blog/chakra-jit-cfg-bypass"
published_at: "2016-12-13T15:00:00Z"
tags: ["jit", "exploit", "internet-explorer", "chakra", "cfg-bypass", "edge", "ms16-119"]
phying_url: "https://phying.com/item/4682"
lang: en
---

# Chakra JIT CFG Bypass

## Summary

Bypassing Windows' Control Flow Guard in IE and Edge by abusing Chakra JIT: trigger compilation, locate the native code buffer, modify and run — a technique later fixed in MS16-119.

## Intelligence Metadata

- **Sources:** theori.io
- **Published:** 2016-12-13T15:00:00Z
- **Original:** https://theori.io/blog/chakra-jit-cfg-bypass
- **Phying News:** https://phying.com/item/4682