Skip to content
Chakra JIT CFG Bypass
theori.io | research | #jit | #exploit | #internet-explorer | #chakra | #cfg-bypass | #edge | #ms16-119
Summary
Bypassing Windows' Control Flow Guard in IE and Edge by abusing Chakra JIT: trigger compilation, locate the native code buffer, modify and run — a technique later fixed in MS16-119.
- Published
- Collected