JSC Exploits
Summary: Project Zero's Samuel Groß analyzed seven WebKit exploits used to gain an initial foothold on iPhones, each achieving shellcode execution inside the sandboxed WebContent renderer process and each tied to a specific iOS version range from 10.0 through 12.1.3. The exploits followed a common pattern of building addrof and fakeobj primitives, faking JS objects for memory read/write, and overwriting an existing function's JIT code to bypass the 'bulletproof JIT' mitigation, though none bypassed the PAC-based JIT hardenings on A12 devices.
What you should know: CVE-2019-8518 was fixed publicly in WebKit HEAD on Feb 9 2019 but did not reach users until iOS 12.2 on March 25 2019, leaving roughly a month and a half in which the vulnerability's details, including a triggering testcase, were public while devices remained exposed.
Read the original at Google Project Zero ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2018-17463CVE-2019-8518
- Related
- CVE-2018-17463: Google Chromium V8 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Jun 08, 2022New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026