CVE-2019-5786

This exploit leverages a use-after-free vulnerability in Chrome 72.0.3626.119 on Windows 7 x86 via the FileReader.readAsArrayBuffer function to achieve arbitrary memory access and execute shellcode within a WebAssembly object. It requires the Chrome sandbox to be disabled for successful payload execution.

This is a functional exploit for CVE-2019-5786, a Chrome FileReader UaF vulnerability. It leverages site isolation and heap spraying to achieve arbitrary read/write primitives, leading to RCE via shellcode execution.

This Metasploit module exploits a use-after-free (UaF) vulnerability in Chrome 72.0.3626.119 on Windows 7 x86 via the FileReader.readAsArrayBuffer function. It leverages heap spraying and arbitrary memory access to execute shellcode within a WebAssembly object, bypassing Chrome's sandbox (if disabled).