6 ms·
No. There is a reason the author keeps repeating "arbitrary code execution in the Chrome renderer process." Because it's there, not in the browser process.
by soiax 2y ago
No. There is a reason the author keeps repeating "arbitrary code execution in the Chrome renderer process." Because it's there, not in the browser process.
- armchairhacker 2y agohttps://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE_2024_5830 https://github.com/github/securitylab/tree/main/SecurityExpl... > If successful, on Ubuntu 22.04, it should call launch xcalc when calc.html is opened in Chrome. Then how does this work? It doesn't look like the provided build flags disable any sandbox that the distributed build doesn't.
- soiax 2y agoYou can disable it runtime, with --no-sandbox command line option.