pentester.land· May 2, 2024· by Manfred Paul (@_manfp)🔍 CVE-2024-2887

CVE-2024-2887: A Pwn2Own Winning Bug In Google Chrome

Open Original Article ↗
Target Program: Google (Chrome), Microsoft (Edge)
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#V8 JavaScript engine#WebAssembly#JS sandbox breakout#Browser hacking#Memory corruption#RCE#CVE-2024-2887

More Writeups Like This

pentester.land

Dota 2 Under Attack: How a V8 Bug Was Exploited in the Game

by Jan Vojtěšek
pentester.land

Exploitation Of CVE-2021-21220 – From Incorrect JIT Behavior To RCE

by Bruno Keith (@bkth_), Niklas Baumstark(@_niklasb)
pentester.land

4 exploits, 1 bug: exploiting cve-2024-20017 4 different ways

by hyper (@hyprdude)
pentester.land

CVE-2024-29510 – Exploiting Ghostscript using format strings

by Thomas Rinsma (@thomasrinsma)