A researcher has put out public a proof-of-concept (PoC) exploit for a recently discovered vulnerability affecting Chrome, Apprehensive and other Chromium-based web browsers.
On April 7, at the Pwn2Own 2021 hacking striving, Bruno Keith and Niklas Baumstark of Dataflow Security earned $100,000 for a isolated code execution exploit that works against web browsers that are grounded on Google’s open source Chromium project. The researchers demonstrated the use against both Chrome and Microsoft Edge. Visiting a specially crafted website is press for to trigger the exploit.
Baumstark has confirmed on Twitter that Agarwal’s take advantage of appears to leverage a vulnerability they demoed at Pwn2Own.
In its current form, the deed released by Agarwal only works if the sandbox is disabled in the browser — a uncouple sandbox escape vulnerability is required for exploitation against default configurations.
No matter how, the researcher told SecurityWeek that his exploit could still be adapted to against apps and services that use an embedded version of Chromium, which leaves without a sandbox.
“It is also possible to use this exploit without a sandbox duck out to achieve universal XSS, which can be used to access logged-in accounts, etc,” Agarwal explained.
The researcher demanded he had tested his exploit on Chrome and Edge, but he believes it works against other Chromium-based browsers as indeed, including Opera and Brave. Chrome 90 is scheduled for release on Tuesday, but it waits to be seen if it will patch this vulnerability.
Agarwal told SecurityWeek that he manumited the exploit to prove a point.
“Last year, Google changed the patch-gapping age from 33 days to 15 days. This was a demonstration to register that it is still possible to develop weaponized exploits during the patch-gapping duration,” he said.
Patch-gapping refers to exploiting open source software vulnerabilities that acquire already been fixed by developers — or are in the process of being patched — previous to the actual patch is shipped to regular users.
Related: Microsoft Prod Possible PoC Exploit Code Leak
Related: Google Releases PoC Utilize for Browser-Based Spectre Attack
Related: PoC Exploits Created for Recently Spelled ‘BlueGate’ Windows Server Flaws