Analysis of a nation-state Chrome exploit

Presented at REcon 2022, June 4, 2022, 11 a.m. (30 minutes)

In 2021, Project Zero publicly disclosed multiple Chrome exploits they found in the wild. This talk will go in depth into what makes a V8 exploit reliable, including correcting a few incorrect assumptions.


Presenters:

  • David Manouchehri
    David Manouchehri started his professional career half a decade ago after being recruited by the Department of National Defence. He has since worked for the startup Linchpin Labs (acquired by L3Harris Technologies), and started up his own company. After becoming an independent security analyst consultant in 2020, he has found and disclosed half a dozen Chrome 0days.

Links:

Similar Presentations: