CVE-2022-1364 PoC — Google Chrome 安全漏洞

Source

https://github.com/interruptlabs/uc_browser_poc_CVE-2022-1364

Associated Vulnerability

Title:Google Chrome 安全漏洞 (CVE-2022-1364)
Description:Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Description

Proof of concept for CVE-2022-1364 against Alibaba's UC Browser

Readme

# UC_Browser_Exploit.js

# Introduction 
All content below refers to the UC Browser exploit explored in this article posted by Interrupt Labs. 

# Getting Started
This exploit relates to previous versions of the UC Browser that include the RCE bug of CVE-2022-1364. This bug was patched in the UC browser in late 2024. There are no additional dependencies to run this exploit. 

Please view the article link provided to view the installation process of the browser and exploit.

File Snapshot


 [4.0K]  /data/pocs/1323adfe2aa17e4e5f574ee85aa09ca83fb188ce
├── [ 21K]  cleanup_exp.js
├── [ 21K]  exploit.js
└── [ 488]  README.md

1 directory, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!