CVE-2020-6418

This Metasploit module exploits a type confusion vulnerability in Google Chrome 80.0.3987.87 (64-bit) via JSCreate side-effects, enabling out-of-bounds memory access and arbitrary read/write primitives. It leverages WebAssembly for RWX memory allocation and executes shellcode within the sandboxed renderer process.

This repository contains a functional exploit PoC for CVE-2020-6418, a type confusion vulnerability in V8 (Chrome's JavaScript engine). The exploit leverages a race condition to achieve out-of-bounds (OOB) memory access, leading to arbitrary read/write primitives and ultimately remote code execution (RCE).

This repository contains a functional exploit for CVE-2020-6418, a type confusion vulnerability in Chrome's V8 JavaScript engine. The provided JavaScript code implements an ELF loader to resolve symbols and relocations, which is a critical component for exploiting the vulnerability to achieve remote code execution.

The repository provides a detailed technical analysis of CVE-2020-6418, a type confusion vulnerability in Google Chrome's V8 engine, including patch analysis and exploitation steps using Metasploit. It lacks actual exploit code but offers in-depth guidance on setup and execution.

This exploit leverages a type confusion vulnerability in Google Chrome 80.0.3987.87 to achieve arbitrary read/write primitives, ultimately executing shellcode in the sandboxed renderer process. It requires the browser to be run with the --no-sandbox option for full exploitation.