3 ms·
I wonder if this exploit would be possible if Chrome was packaged using the UWP Desktop Bridge on Windows 10. I doubt the sandbox prevents UAF, but surely it wo
by dstaley 7y ago
I wonder if this exploit would be possible if Chrome was packaged using the UWP Desktop Bridge on Windows 10. I doubt the sandbox prevents UAF, but surely it would have prevented executing an EXE file.
- panpanna 7y agoI wonder the same thing with Linux contained executables, such as snap. (not sure if chrome is available as an official snap)
- dstaley 7y agoIt's my understanding that this particular exploit only targeted Windows, but the underlying UAF vulnerability affected all Chrome variants.
- ChrisSD 7y agoDesktop Bridge applications aren't sandboxed.
- dstaley 7y agoAh so it seems. The webpage for Desktop Bridge says that it features "no malware injection", so I took that to mean it was sandboxed.