Using ChromePatchGap to Pwn Billions of Users - by Wang Ding Qian

Speaker
Wang Ding Qian
Senior Vulnerability Researcher, Numen Cyber Technology
Abstract
Patch-gapping is the practice of exploiting vulnerabilities in open-source software that are already fixed (or are in the process of being fixed) by the developers before the actual patch is shipped to users. This talk will include introducing the vulnerabilities, cases, the logic of each CVE, and how to PWN the latest WPS office, etc.
Find out more about SINCON 2024 at www.infosec-ci...