Disclosed vulnerabilities

ProductCVEDescriptionLeadBounty
ChromeCVE-2023-6702(1-day) Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Haein Lee$10,000 (v8CTF)
LinuxCVE-2023-3390(1-day) A use-after-free vulnerability was found in the Linux kernel’s netfilter subsystem in net/netfilter/nf_tables_api.cDongok Kim & SeungHyun Lee$67,837 (kernelCTF)
vm2CVE-2023-30547There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException() which can be used to escape the sandbox and run arbitrary code in host context.SeungHyun Lee
vm2CVE-2023-29199There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass handleException() and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context.SeungHyun Lee
FirefoxCVE-2023-29548A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.JunYoung Park
ChromeCVE-2023-0696Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Haein Lee$7,000
WebKitCVE-2022-32923A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.Wonyoung Jung
Samsung ExynosCVE-2022-23425Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.Eunsoo Kim, CheolJun Park$14,760
NETGEAR R6700v3PSV-2021-0304Pre-Authentication Buffer Overflow in Some RoutersInsu Yun$300