CVE-2020-9870

A logic issue involving insufficient validation in Clang allows an attacker with memory write capability to bypass pointer authentication codes and execute arbitrary code . This vulnerability affects iOS (prior to 13.6), iPadOS (prior to 13.6), macOS Catalina (prior to 10.15.6), and tvOS (prior t...

CVE-2020-9870

creationtimestamp| type| source ---|---|--- 2020-09-04 14:07:52+00:00| published-proof-of-concept| https://t.me/R0Crew/1782...

JITSploitation I: A JIT Bug

By Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS...

JITSploitation III: Subverting Control Flow

Posted by Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed i...

JITSploitation II: Getting Read/Write

Posted by Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed i...