CVE-2020-16040

This exploit leverages an integer overflow in Google Chrome's SimplifiedLowering phase to achieve arbitrary read/write in the isolate region, followed by RWX memory allocation via WebAssembly to execute shellcode. It requires the browser to be run with --no-sandbox for full payload execution.

This exploit leverages a heap corruption vulnerability in Google Chrome's V8 engine (CVE-2020-16040) to achieve remote code execution. It uses WebAssembly and crafted JavaScript to manipulate memory, achieve arbitrary read/write, and execute shellcode on a RWX page.