Alex Gaynor 3/7/2019

Chrome + Windows Exploit: Security Beyond Bugfixes

Read Original

The article analyzes a recently disclosed exploit chain targeting Chrome and Windows. It details how the attack uses a Chrome renderer bug and a Windows kernel bug to escape the sandbox. The core focus is explaining why Windows 10's security mitigations (like win32k syscall disable, NULL page mapping prevention, SMEP/SMAP) likely prevent exploitation, unlike the still-vulnerable Windows 7, highlighting that security involves more than just bug fixes.

Chrome + Windows Exploit: Security Beyond Bugfixes

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week