RCE inside sandbox, so requires chaining with another 0day.
zahlman•9m ago
What exactly does "RCE inside sandbox" describe that goes beyond "the webpage can supply arbitrary JavaScript and the JavaScript engine executes it", but is still isolated from the system?
jnwatson•6m ago
It means it can execute arbitrary machine code in the sandbox.
petra303•27m ago
teravor•23m ago
zahlman•9m ago
jnwatson•6m ago