---
id: 8649
title: "[CVE-2020-0981] You Won't Believe what this One Line Change Did to the Chrome Sandbox"
cve: CVE-2020-0981
source_domain: projectzero.google
source_url: "https://projectzero.google/2020/04/you-wont-believe-what-this-one-line.html"
published_at: "2020-04-21T00:00:00Z"
tags: ["windows", "cve", "chrome", "project-zero"]
phying_url: "https://phying.com/item/8649"
lang: en
---

# [CVE-2020-0981] You Won't Believe what this One Line Change Did to the Chrome Sandbox

## Summary

This blog is about a vulnerability introduced in Windows 10 1903 which broke some of the security assumptions that Chromium relied on to make the sandbox secure. I’ll present how I used the bug to develop a chain of execution to escape the sandbox as used for the GPU Process on Chrome/Edge or the default content sandbox in Firefox. The exploitation process is also an interesting insight into the little weaknesses in Windows which in themselves do not cross a security boundary but led to a successful sandbox escape. This vulnerability was fixed in April 2020 as CVE-2020-0981.

## Intelligence Metadata

- **Sources:** projectzero.google
- **CVE:** CVE-2020-0981
- **Published:** 2020-04-21T00:00:00Z
- **Original:** https://projectzero.google/2020/04/you-wont-believe-what-this-one-line.html
- **Phying News:** https://phying.com/item/8649