FOOLING THE SANDBOX: A CHROME-ATIC ESCAPE

Summary from the TLDR InfoSec newsletter

The security researcher in this blog analyzes CVE-2024-30088, a Windows kernel vulnerability that allows privilege escalation. They successfully chained it to escape Chrome's renderer sandbox by bypassing integrity level checks and job object restrictions. The exploit overwrites security descriptors to gain system privileges, then spawns a privileged shell with full control.