CVE-2024-2887 PoC — Google Chrome 安全漏洞

Source

https://github.com/PumpkinBridge/Chrome-CVE-2024-2887-RCE-POC

Associated Vulnerability

Title:Google Chrome 安全漏洞 (CVE-2024-2887)
Description:Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Description

Chrome(CVE-2024-2887)RCE-POC

Readme

## Chrome-CVE-2024-2887-RCE-Poc概述

- 漏洞名称：Google Chrome Type Confusion
- 威胁类型：代码执行
- 利用可能性：高
- POC状态：已公开
- 在野利用状态：未公开
- EXP状态：已公开
- 技术细节状态：已公开

This can be considered a variant bug of CVE-2024-2887 discovered by Manfred Paul and presented in Vancouver 2024.

## 注明

Poc和Exp均来自互联网，仅供交流学习使用，请在虚拟机内测试

Pwned by Seunghyun Lee (Xion, @0x10n), for TyphoonPWN 2024

From：[https://ssd-disclosure.com/ssd-advisory-google-chrome-rce/](https://ssd-disclosure.com/ssd-advisory-google-chrome-rce/)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!