Escaping the Chrome Sandbox Through DevTools(ading.dev)
371 points by vk6 | 72 comments
Blog post describing how the author found CVE-2024-6778 and CVE-2024-5836, Chromium bugs letting a malicious extension escape the sandbox via DevTools, earning a $20,000 bounty.