You Won't Believe what this One Line Change Did to the Chrome Sandbox

Posted by James Forshaw, Project Zero The Chromium sandbox on Windows has stood the test of time. It’s considered one of the better sandboxing mechanisms deployed at scale without requiring elevated privileges to function. For all the good, it does have its weaknesses. The main one being the...

CVE-2020-0981

CVE-2020-0981 is a Windows security feature bypass vulnerability stemming from how token relationships are handled. The Windows patch fixes the token relationship handling to prevent sandbox escapes. A detailed exploit chain is described in a Project Zero–style writeup: an attacker could obtain a...