From Chrome Renderer, to Mouse, to System
Ernest Ang explores from chrome renderer, to mouse, to system at DEF CON SG1, examining browser-exploitation and practical defenses.
Summary
Architecture and Background
Ernest Ang present From Chrome Renderer, to Mouse, to System at DEF CON SG1, establishing operational baselines and research context. You click on a link.
Vulnerability Analysis
The vulnerability analysis explores security weaknesses and protocol oversights. A download prompt appears.
Exploitation and Demonstrations
Your mouse suddenly seems to take on a life of its own and clicks the pop-up.
Remediation and Defensive Strategies
Before you know it, your Windows machine belongs to me. This session breaks down an amusing and far-fetched (yet entirely technical) exploit chain, starting from the highly restrictive Chromium renderer process and escalating to kernel-level privileges by chaining and abusing three vulnerabilities: CVE-2024-5274, CVE-2024-11114, and CVE-2025-29824. I will be sharing my learnings, laughs and grief while venturing into V8, Mojo, CLFS and everything in between (i.e. Ubercage, kCFG) while attempting to make this work.
Related talks
CSIT Village·22 min
Koh Kian Woon
Koh Kian Woon examines as AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders.
Briefings·35 min
Yuhao Jiang · Xinlei Ying · Ziming Zhang
VMware ESXi appears to be increasingly secure, as indicated by fewer CVEs and 0 success at Pwn2Own.
Briefings·40 min
Philip Young · Chad Rikansrud
Those stories often focused on the MVS/ISPF side of the IBM z/OS.