4 ms·

I was under the impression that JVM, CLR and probably e.g. V8 are reasonably secure. I'd like to learn more about recent sandbox-escaping vulnerabilities in the

I was under the impression that JVM, CLR and probably e.g. V8 are reasonably secure. I'd like to learn more about recent sandbox-escaping vulnerabilities in these runtimes. Got any resources?

__s 10y ago
"reasonably secure" isn't good enough. Chrome puts additional sandboxing around V8
sanxiyn 10y ago
For JVM, consider this update which happened in 2016: "Multiple flaws were discovered in the Hotspot and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. (CVE-2016-3606, CVE-2016-3587, CVE-2016-3598, CVE-2016-3610)" https://access.redhat.com/errata/RHSA-2016:1458 https://access.redhat.com/errata/RHSA-2016:1458