Escaping the Chrome Sandbox Through DevTools(ading.dev)

371 points by vk6 2 years ago | 72 comments

Blog post describing how the author found CVE-2024-6778 and CVE-2024-5836, Chromium bugs letting a malicious extension escape the sandbox via DevTools, earning a $20,000 bounty.

Multiple new macOS sandbox escape vulnerabilities(jhftss.github.io)

546 points by transpute 1 year ago | 176 comments

Blog post accompanying a POC2024 talk describing an overlooked macOS attack surface and more than ten new sandbox escape vulnerabilities.

The V8 Sandbox(v8.dev)

249 points by todsacerdoti 2 years ago | 87 comments

Microsoft didn't sandbox Windows Defender, so I did (2017)(blog.trailofbits.com)

50 points by LorenDB 2 years ago | 25 comments

How easy is it for a developer to "sandbox" a program?(kristaps.bsd.lv)

44 points by zdw 1 year ago | 39 comments

There's no escaping it: an exploration of ANSI codes(blog.safia.rocks)

26 points by ankitg12 4 months ago | 9 comments