The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING
CVE-2023-38600: Story of an innocent Apple Safari copyWithin gone (way) outside
Blog post

CVE-2023-38600: Story of an innocent Apple Safari copyWithin gone (way) outside

But You Told Me You Were Safe: Attacking the Mozilla Firefox Sandbox (Part 2)
Blog post

But You Told Me You Were Safe: Attacking the Mozilla Firefox Sandbox (Part 2)

But You Told Me You Were Safe: Attacking the Mozilla Firefox Renderer (Part 1)
Blog post

But You Told Me You Were Safe: Attacking the Mozilla Firefox Renderer (Part 1)

CVE-2022-26381: Gone by others! Triggering a UAF in Firefox
Blog post

CVE-2022-26381: Gone by others! Triggering a UAF in Firefox

Exploitation of CVE-2021-21220 – From Incorrect JIT Behavior to RCE
Blog post

Exploitation of CVE-2021-21220 – From Incorrect JIT Behavior to RCE

Understanding the Root Cause of CVE-2021-21220 – A Chrome Bug from Pwn2Own 2021
Blog post

Understanding the Root Cause of CVE-2021-21220 – A Chrome Bug from Pwn2Own 2021

Two Birds with One Stone: An Introduction to V8 and JIT Exploitation
Blog post

Two Birds with One Stone: An Introduction to V8 and JIT Exploitation

CVE-2021-31969: Underflowing in the Clouds
Blog post

CVE-2021-31969: Underflowing in the Clouds

Syncing out of the Firefox sandbox
Blog post

Syncing out of the Firefox sandbox

The Left Branch Less Travelled: A Story of a Mozilla Firefox Use-After-Free Vulnerability
Blog post

The Left Branch Less Travelled: A Story of a Mozilla Firefox Use-After-Free Vulnerability