Unpatched zero-day vulnerability Affecting Current Versions of Google Chrome & Microsoft Edge Published Online


The Zero-day that is released by Agarwal requires to be chained with some other vulnerability so that it can allow all type of exploits to evade the Chromium sandbox.

Unpatched zero-day vulnerability.

According to the security researcher, Rajvardhan Agarwal, the Chrome sandbox is the internet browser security that plays the role of border, and help the sandbox to secure them from all kind of remote code execution vulnerability.

In addition to the handicapped sandbox, Agarwals make use of can be used together to launch the calculator on Windows 10; not just this but the specialists also declared that all the treatments are to be maintained effectively so that it can execute its job correctly.

Researchers think that Agarwals PoC release had helped them extremely much, and now they are trying their best to spot the flaw.

When the vulnerability gets released, it starts launching the Windows calculator program. The most crucial part of the PoC release is that the zero-day vulnerability of Agarwals is not getting away the browsers sandbox.

Not just this, however the professionals also verified that the internet browser security launch different programs on the host computer system so that it will ensure its security from the vulnerabilities.

Rajvardhan kept in mind that this new zero-day flaw has been affecting lots of tech giants for a very long time, and this PoC exploit was actually developed for a vulnerability made use of in the Pwn2Own hacking competitors.

After introducing the new PoC for remote code execution, the security expert Rajvardhan explained the PoC HTML file. The analyst said that when the files are loaded in Chromium-based browsers, it will ultimately make use of the vulnerability.

According to the report, this new zero-day vulnerability is impacting the very new version of Google Chrome, Microsoft Edge, and other Chromium-powered internet browsers like Opera and Brave..

After knowing concerning the vulnerability, Rajvardhan Agarwal right away published a working proof-of-concept for all the remote code execution. The brand-new PoC was initially released for the V8 JavaScript engine that is present in the Chromium-based internet browser.

In a day-to-day investigating routine, a security scientist, Rajvardhan Agarwal from India has actually noted a new zero-day vulnerability code execution affecting significant web browsers.

After performing the test, the experts easily exploited the latest versions that are Google Chrome 89.0.4389.114 and Microsoft Edge 89.0.774.76.

Just here to drop a chrome 0day. Yes you check out that right.https:// t.co/ sKDKmRYWBP pic.twitter.com/PpVJrVitLR— Rajvardhan Agarwal (@r4j0x00) April 12, 2021.

Now Google will launch its Chrome 90, a new variation to stable the conflicts that are being faced by the users and the company. Once the brand-new version is released, everyone can see that if the brand-new version contains any repair for this zero-day RCE vulnerability.