Did the “Man With No Name” Feel Insecure?
Project Zero's James Forshaw documented CVE-2014-3196, a Chrome for Windows bug fixed in M38 where unnamed shared memory sections carry no security descriptor, letting a compromised renderer call DuplicateHandle to regain write access to a section shared...