{"vulnerability": "CVE-2018-17463", "sightings": [{"uuid": "5cb3ef2b-0b5e-4fe9-85e8-5f80a05a1004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "MISP/5d8b23ae-50d0-4a09-86da-4dc9950d210f", "content": "", "creation_timestamp": "2019-09-25T08:28:15.000000Z"}, {"uuid": "8d85f5e2-19d7-4f40-a1df-0a4d8ec633e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "MISP/bbad3705-75de-41f7-980c-0e90136909de", "content": "", "creation_timestamp": "2020-10-09T14:30:54.000000Z"}, {"uuid": "0d2d867d-32e5-4e80-8772-ec56a919a313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "eabf479a-00bb-475b-b605-f0564572f591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "exploited", "source": "https://www.exploit-db.com/exploits/48184", "content": "", "creation_timestamp": "2020-03-09T00:00:00.000000Z"}, {"uuid": "c26ce812-3956-42d6-99fe-af75174eec4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971650", "content": "", "creation_timestamp": "2024-12-24T20:32:19.388178Z"}, {"uuid": "46ececd8-b16c-46e4-a0cf-a1279946b37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "a95e1759-54c8-4256-b672-b8f6ac80303c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "MISP/144ce285-4901-4040-b079-9d108565f8a4", "content": "", "creation_timestamp": "2025-03-03T11:01:04.000000Z"}, {"uuid": "9018757b-bbcb-4390-b537-7af8acb2a237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:05.000000Z"}, {"uuid": "cb7c58bd-75d1-4514-b13a-4e4c18e348af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:19.000000Z"}, {"uuid": "e8eeff7c-3c51-4e64-9a77-cda8870878c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_object_create.rb", "content": "", "creation_timestamp": "2020-03-05T19:53:27.000000Z"}, {"uuid": "5cd417f3-bda3-40db-8c00-2dd936859696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-17463", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e9a45c8a-0af1-475b-b2bc-9f62c10c8a20", "content": "", "creation_timestamp": "2026-02-02T12:27:21.687532Z"}, {"uuid": "8f099e18-f6c2-41d2-83c6-271de635a1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/ExcreamOnSecurity/115", "content": "Exploiting Logic Bugs in JavaScript JIT Engines\n\nThis article strives to give an introduction into just-in-time (JIT)\ncompiler vulnerabilities at the example of CVE-2018-17463, a bug found\nthrough source code review and used as part of the hack2win [1] competition\nin September 2018. The vulnerability was afterwards patched by Google with\ncommit 52a9e67a477bdb67ca893c25c145ef5191976220 \"[turbofan] Fix\nObjectCreate's side effect annotation\" and the fix was made available to\nthe public on October 16th with the release of Chrome 70.\n\nhttp://phrack.org/papers/jit_exploitation.html\n\n#jit #exploitation #chrome", "creation_timestamp": "2019-05-08T00:04:39.000000Z"}, {"uuid": "49521037-de76-412a-a219-d91b03dbeafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "Telegram/t18e6vxs9K1qH4OOgCFoTBIs_sq0L9CJ7N8ySBoFGd8DYETc", "content": "", "creation_timestamp": "2025-02-20T23:26:56.000000Z"}, {"uuid": "09a49970-fe41-4caf-bb9a-4671012b1937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "Telegram/-7g4bZvceBfEpKrAil7ClMS9Sb9rZNUFy0XJ8TZ7yngPghA", "content": "", "creation_timestamp": "2024-06-12T15:09:41.000000Z"}, {"uuid": "e18c7c34-4b51-4ac3-bfac-7973a9b70fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/jokerplstaeen/21222", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463  https://jhalon.github.io/chrome-browser-exploitation-3/ #Pentesting #Exploit #WebSecurity #Infosec", "creation_timestamp": "2023-09-29T21:54:14.000000Z"}, {"uuid": "33bf4ef8-f393-49b6-b40e-bc73105539e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2993", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-08-03T01:36:13.189314Z"}, {"uuid": "fcd34271-8866-48cb-b8d6-69fb2508b35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3620", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-08-03T02:01:31.246987Z"}, {"uuid": "e98aa242-db4e-4a86-95ea-361ba5e79a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/6895", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463\n\nhttps://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2023-01-04T08:52:18.000000Z"}, {"uuid": "7f35c6aa-f1e8-4bb0-8f2d-c7590042b7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7180", "content": "#Threat_Research\nChrome Browser Exploitation\nPart 1 - Introduction to V8 and JavaScript Internals\nhttps://jhalon.github.io/chrome-browser-exploitation-1\nPart 2 - Introduction to Ignition, Sparkplug and JIT Compilation via TurboFan\nhttps://jhalon.github.io/chrome-browser-exploitation-2\nPart 3 - Analyzing and Exploiting CVE-2018-17463\nhttps://jhalon.github.io/chrome-browser-exploitation-3", "creation_timestamp": "2022-12-30T05:59:25.000000Z"}, {"uuid": "2fcf31a4-53f3-4e9c-beaf-2259cf813987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3620", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-08-02T16:02:14.272757Z"}, {"uuid": "c546b9d5-ac63-4b62-a82c-e34c27c29d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2993", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-08-02T20:10:54.774450Z"}, {"uuid": "6d5c906b-c52c-4885-b29a-f2350a0d5bd4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/863ae445-afc9-43de-985f-4d0842e403e9", "content": "", "creation_timestamp": "2026-06-19T12:47:09.228647Z"}, {"uuid": "31dcd4f8-43a2-4381-b02c-a9f43ee88f9f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2d3b4bd-72e5-488b-b809-fe87469aef26", "content": "", "creation_timestamp": "2026-06-23T14:05:28.671508Z"}, {"uuid": "67bc4714-ea92-42c2-ad78-fdf79f88044e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "https://t.me/reverseame/3620", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-07-29T12:02:27.571004Z"}, {"uuid": "bdb84672-fda7-487c-b8e4-3766b0375425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "https://t.me/reverseame/2993", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-07-29T12:02:34.819190Z"}, {"uuid": "cd967b95-be53-4740-99ad-e93e0d8c25ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "https://t.me/reverseame/3620", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-07-30T00:02:28.527153Z"}, {"uuid": "1d6ab02a-58f5-4aa0-b0de-70e3337add2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "https://t.me/reverseame/2993", "content": "Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463 https://jhalon.github.io/chrome-browser-exploitation-3/", "creation_timestamp": "2026-07-30T00:02:33.074948Z"}, {"uuid": "fe49dbea-9311-4be2-846a-cfb0b257c100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17463", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_object_create.rb", "content": "{\"aliases\": [], \"arch\": \"x64\", \"author\": [\"saelo\", \"timwr\", \"sf \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This modules exploits a type confusion in Google Chromes JIT compiler.\\n          The Object.create operation can be used to cause a type confusion between a\\n          PropertyArray and a NameDictionary.\\n          The payload is executed within the rwx region of the sandboxed renderer\\n          process.\\n          This module can target the renderer process (target 0), but Google\\n          Chrome must be launched with the --no-sandbox flag for the payload to\\n          execute successfully.\\n          Alternatively, this module can use CVE-2019-1458 to escape the renderer\\n          sandbox (target 1). This will only work on vulnerable versions of\\n          Windows (e.g Windows 7) and the exploit can only be triggered once.\\n          Additionally the exploit can cause the target machine to restart\\n          when the session is terminated. A BSOD is also likely to occur when\\n          the system is shut down or rebooted.\", \"disclosure_date\": \"2018-09-25\", \"fullname\": \"exploit/multi/browser/chrome_object_create\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Google Chrome 67, 68 and 69 Object.create exploit\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/browser/chrome_object_create.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/browser/chrome_object_create\", \"references\": [\"CVE-2018-17463\", \"URL-http://www.phrack.org/papers/jit_exploitation.html\", \"URL-https://ssd-disclosure.com/archives/3783/ssd-advisory-chrome-type-confusion-in-jscreateobject-operation-to-rce\", \"URL-https://saelo.github.io/presentations/blackhat_us_18_attacking_client_side_jit_compilers.pdf\", \"URL-https://bugs.chromium.org/p/chromium/issues/detail?id=888923\", \"URL-https://github.com/stephenfewer/ReflectiveDLLInjection\", \"URL-https://github.com/rapid7/ReflectiveDLLInjection\"], \"rport\": null, \"session_types\": false, \"targets\": [\"No sandbox escape (--no-sandbox)\", \"Windows 7 (x64) sandbox escape via CVE-2019-1458\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:35.192294Z"}]}