Root Cause Analyses for 0-day In-the-Wild Exploits

Summary: Google Project Zero began publishing root cause analyses for 0-days exploited in the wild, releasing 8 RCAs covering 20 tracked 2019 0-days, including iOS CVE-2019-7286 and CVE-2019-7287, Firefox CVE-2019-1107, Internet Explorer CVE-2019-1367 and CVE-2019-1429, Android CVE-2019-2215, Chrome CVE-2019-13720, and Windows CVE-2019-1458. Each analysis follows a template covering bug class, exploit method, a hypothesis of how the vulnerability was found, variant analysis, structural improvements, and potential detection methods for similar 0-days.
Key Takeaway: Project Zero's stated goal is to make 0-days more costly and time consuming for attackers, and it is asking vendors and researchers to adopt its RCA template on the 0-days they detect and analyze.

Read the original at Google Project Zero ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2019-7286 CVE-2019-7287
Related: A very deep dive into iOS Exploit chains found in the wild Cyber Risks ·
CVE-2019-7287: Apple iOS Memory Corruption Vulnerability Known Exploited Vulnerabilities · May 23, 2022
CVE-2019-7286: Apple Multiple Products Memory Corruption Vulnerability Known Exploited Vulnerabilities · May 23, 2022