3 ms·
Here is an article with a lot more detail (high level, not technical) about this... on a random website none of us have ever heard of and so which might be a ph
by saurik 6y ago
Here is an article with a lot more detail (high level, not technical) about this... on a random website none of us have ever heard of and so which might be a phishing attack for people like me who immediately went to Google to find more information (and with a few "shockers" in--such as Chrome and Edge not having patched it yet, despite the patch dropping a week ago--to maybe get some viral sharing, such as what I am doing now ;P).
https://therecord.media/security-researcher-drops-chrome-and-edge-zero-day-on-twitter/ https://therecord.media/security-researcher-drops-chrome-and...
- gruez 6y agoThe screenshot suggests that all you need to do for the exploit to work is to open the html/js file, but doing this on windows just results in "Aw, Snap!" page. Others in this thread have confirmed this.
- saurik 6y agoThe article says the exploit code released to GitHub doesn't include a sandbox escape, so that seems about like what I would expect: the renderer crashed. (The screenshot is from the researcher, who either has a more complete implementation with another maybe-undisclosed bug or has simply disabled some sandbox restrictions to help test the exploit in isolation or something.)