CVE-2018-17463

This Metasploit module exploits a type confusion vulnerability in Google Chrome's JIT compiler (CVE-2018-17463) by manipulating Object.create to confuse PropertyArray and NameDictionary types, leading to arbitrary memory read/write and RCE in the sandboxed renderer process.

This is a working proof-of-concept exploit for CVE-2018-17463, leveraging a type confusion vulnerability in V8 to achieve arbitrary memory read/write and execute shellcode via WebAssembly RWX pages. The exploit demonstrates a full chain from primitive development to RCE by popping a calculator.

This is a working exploit for CVE-2018-17463, a type confusion vulnerability in V8 JavaScript engine. It achieves arbitrary read/write and executes a shellcode payload to spawn a shell.

This Metasploit module exploits a type confusion vulnerability in Google Chrome's JIT compiler (CVE-2018-17463) and optionally uses CVE-2019-1458 for sandbox escape on Windows 7. It achieves remote code execution by manipulating Object.create to confuse PropertyArray and NameDictionary types.