Binary Gecko Blog

Sky’s the Limit - Quick Analysis and Exploitation of a Chrome ipcz TOCTOU Vulnerability

In this blog post we’ll dive into the details of an interesting vulnerability in the new IPC mechanism of Chrome, ipcz, and see how it was possible to exploit it from a compromised renderer to escape the Chrome sandbox. The following analysis and described exploitation technique is based on Chromium 113.0.5672.77.

Read more