Virtually Unlimited Memory: Escaping the Chrome Sandbox
Google Project Zero's Mark Brand documented a full Chrome exploit chain that combined a renderer bug, CVE-2019-5782 in the v8 typer, with a use-after-free in the FileWriter interface of the FileSystem API to escape the Chrome sandbox on 64-bit Windows...