PoC Exploit Released for Unpatched Flaw Affecting Chromium-Based Browsers


A researcher has put out public a proof-of-concept (PoC) exploit for a recently discovered vulnerability affecting Chrome, Apprehensive and other Chromium-based web browsers.

On April 7, at the Pwn2Own 2021 hacking striving, Bruno Keith and Niklas Baumstark of Dataflow Security earned $100,000 for a isolated code execution exploit that works against web browsers that are grounded on Google’s open source Chromium project. The researchers demonstrated the use against both Chrome and Microsoft Edge. Visiting a specially crafted website is press for to trigger the exploit.

Google has started working on a patch, but it has yet to be rolled out to good users. In the meantime, 18-year-old researcher Rajvardhan Agarwal, who characterizes himself as an exploit developer, noticed a change made by Google to the v8 JavaScript apparatus used by Chrome in response to the vulnerability disclosed by Keith and Baumstark, which entitled him to develop an exploit for it.

Baumstark has confirmed on Twitter that Agarwal’s take advantage of appears to leverage a vulnerability they demoed at Pwn2Own.

In its current form, the deed released by Agarwal only works if the sandbox is disabled in the browser — a uncouple sandbox escape vulnerability is required for exploitation against default configurations.

No matter how, the researcher told SecurityWeek that his exploit could still be adapted to against apps and services that use an embedded version of Chromium, which leaves without a sandbox.

“It is also possible to use this exploit without a sandbox duck out to achieve universal XSS, which can be used to access logged-in accounts, etc,” Agarwal explained.

The researcher demanded he had tested his exploit on Chrome and Edge, but he believes it works against other Chromium-based browsers as indeed, including Opera and Brave. Chrome 90 is scheduled for release on Tuesday, but it waits to be seen if it will patch this vulnerability.

Agarwal told SecurityWeek that he manumited the exploit to prove a point.

“Last year, Google changed the patch-gapping age from 33 days to 15 days. This was a demonstration to register that it is still possible to develop weaponized exploits during the patch-gapping duration,” he said.

Patch-gapping refers to exploiting open source software vulnerabilities that acquire already been fixed by developers — or are in the process of being patched — previous to the actual patch is shipped to regular users.

Related: Microsoft Prod Possible PoC Exploit Code Leak

Related: Google Releases PoC Utilize for Browser-Based Spectre Attack

Related: PoC Exploits Created for Recently Spelled ‘BlueGate’ Windows Server Flaws

[embedded content]

PoC Exploit Released for Unpatched Flaw Affecting Chromium-Based Browsers

Eduard Kovacs (@EduardKovacs) is a role ining editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a zoom in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s inch by inch in industrial informatics and a master’s degree in computer techniques applied in electrical organizing.

Previous Columns by Eduard Kovacs:
PoC Exploit Released for Unpatched Flaw Affecting Chromium-Based BrowsersTags:

Leave a Reply

Your email address will not be published. Required fields are marked *