---
id: 8703
title: "Bypassing Mitigations by Attacking JIT Server in Microsoft Edge"
source_domain: projectzero.google
source_url: "https://projectzero.google/2018/05/bypassing-mitigations-by-attacking-jit.html"
published_at: "2018-05-10T00:00:00Z"
tags: ["project-zero", "mitigation-bypass", "edge", "jit-server"]
phying_url: "https://phying.com/item/8703"
lang: en
---

# Bypassing Mitigations by Attacking JIT Server in Microsoft Edge

## Summary

With Windows 10 Creators Update, Microsoft introduced a new security mitigation in Microsoft Edge: Arbitrary Code Guard (ACG). When ACG is applied to a Microsoft Edge Content Process, it makes it impossible to allocate new executable memory within a process or modify existing executable memory. The goal of this is to make it more difficult for an attacker who already gained some capabilities in the browser’s Content Process to execute arbitrary code.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2018-05-10T00:00:00Z
- **Original:** https://projectzero.google/2018/05/bypassing-mitigations-by-attacking-jit.html
- **Phying News:** https://phying.com/item/8703