Actively exploited sandbox RCE in all Chromium versions

4 comments

• Cider9986 28 minutes ago
  Brave is beating GrapheneOS on update timeliness:

  https://github.com/GrapheneOS/Vanadium/releases

  https://github.com/brave/brave-browser/releases

  Only if you use Nightly wait maybe not.

  [-]
  • anon109 4 minutes ago
    Is graphene even affected? JIT is disabled in default configurations.
  • chuckadams 16 minutes ago
    The release version just now updated to 152.0.7977.83 which has the fix.
• Terr_ 4 minutes ago
  [delayed]
• petra303 32 minutes ago
  Only a score of 8.8?
  [-]
  • teravor 29 minutes ago
    RCE inside sandbox, so requires chaining with another 0day.
    [-]
    • zahlman 14 minutes ago
      What exactly does "RCE inside sandbox" describe that goes beyond "the webpage can supply arbitrary JavaScript and the JavaScript engine executes it", but is still isolated from the system?
      [-]
      • jnwatson 11 minutes ago
        It means it can execute arbitrary machine code in the sandbox.
• colincowardly 2 minutes ago
  [dead]