You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: SecurityExploits/Chrome/SandboxEscape/CVE-2021-30528/README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
## Chrome Sandbox Escape CVE-2021-30528
2
2
3
-
The write up can be found [here](https://securitylab.github.com/research/chrome_sbx_java). This is a bug Chrome I reported in May 2021. The GitHub Advisory can be found [here](https://securitylab.github.com/advisories/GHSL-2021-124-chrome) and the Chrome issue Chrome Issue [here](https://bugs.chromium.org/p/chromium/issues/detail?1206329). The bug can be used to escape the Chrome sandbox from a compromised renderer.
3
+
The write up can be found [here](https://securitylab.github.com/research/chrome_sbx_java). This is a bug Chrome I reported in May 2021. The GitHub Advisory can be found [here](https://securitylab.github.com/advisories/GHSL-2021-124-chrome) and the Chrome issue Chrome Issue [here](https://bugs.chromium.org/p/chromium/issues/detail?id=1206329). The bug can be used to escape the Chrome sandbox from a compromised renderer.
4
4
5
5
Two exploits are included, one for the 64 bit version 90.0.4430.91 and the other is for the 32 bit version 88.0.4324.181. The build configs are in the corresponding sub directories.
Copy file name to clipboardExpand all lines: SecurityExploits/Chrome/SandboxEscape/CVE-2021-30528/aarch64/README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,7 +25,7 @@ The patch `browser.patch` patches the browser to make local testing more conveni
25
25
26
26
```
27
27
28
-
2. It removes the requirement for secure content, which would require a properly set up https context. (Self signing certificate for localhost does not pass this)
28
+
2. It removes the requirement for secure content, which would require a properly set up https context. (Self signed certificate for localhost does not pass this)
Copy file name to clipboardExpand all lines: SecurityExploits/Chrome/SandboxEscape/CVE-2021-30528/arm/README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ The patch `browser.patch` patches the browser to make local testing more conveni
19
19
20
20
```
21
21
22
-
2. It removes the requirement for secure content, which would require a properly set up https context. (Self signing certificate for localhost does not pass this)
22
+
2. It removes the requirement for secure content, which would require a properly set up https context. (Self signed certificate for localhost does not pass this)
0 commit comments