Actively exploited sandbox RCE in all Chromium versions(nvd.nist.gov)
801 points by negura 5 days ago | 504 comments
tl;dr: Summary not available
HN Discussion:
  • Vulnerability's black-market value vastly exceeds Google's bounty payout
  • Running arbitrary JS/WASM from the web is a fundamentally flawed design choice
  • Industry should adopt memory-safe languages to prevent these recurring vulnerabilities
  • The HN title is misleading/inaccurate since a patched version already exists
  • ~This vulnerability isn't especially notable given many similar V8 exploits recently