After the first and second day, on day 3 , Three extra zero-day exploits had been efficiently utilized by safety researchers to hack the Home windows 11 OS of Microsoft on the third and final day of the 2022 Pwn2Own Vancouver hacking contest.
Crew DoubleDragon’s first try of the day to use Microsoft Groups failed as a result of they had been unable to display their exploit throughout the time allowed by Microsoft.
Though all will not be misplaced, as a result of ZDI was capable of incorporate Crew Double Dragon’s analysis into commonplace procedures.
The opposite contestants had efficiently taken down Home windows 11 for 3 times and Ubuntu Desktop for one time as effectively, incomes them $160,000.
It was proven efficiently that nghiadt12 from Viettel Cyber Safety was capable of exploit an integer overflow vulnerability in Home windows 11 with a view to acquire elevated privileges.
In flip, they acquired a reward of $40,000 together with 4 Grasp of Pwn factors as a reward for his or her execution.
On Ubuntu Desktop, a Use-After-Free exploit was efficiently demonstrated by the STAR Labs’ Billy Jheng Bing-Jhong (@st424204). His mastery of Pwn capabilities earned him one other $40,000 together with 4 extra Grasp factors.
By an improperly applied entry management mechanism on Microsoft Home windows 11, vinhthp1712 has achieved Elevation of Privilege. It has been confirmed that vinhthp1712 has been awarded $40,000 and 4 Grasp of Pwn factors.
Bruno PUJOS from REverse Techniques has achieved Elevation of Privilege by using the Use-After-Free exploit on Microsoft Home windows 11 in the course of the last try of the competitors.
Whereas it is usually value mentioning that this earned him $40,000 along with 4 Grasp of Pwn factors.
In conclusion, the commonly scheduled programming occasion, Pwn2Own has concluded with this last session.
The whole variety of makes an attempt this yr was 21 from 17 totally different contestants with Development Micro and ZDI awarding $1,155,000 to the winner.
You possibly can observe us on Linkedin, Twitter, Fb for every day Cybersecurity and hacking information updates.
