writeups.xyz / CVE-2024-21115: An Oracle Virtualbox LPE Used To Win Pwn2Own

Submitter : c2a

Date: 9 May 2024

Bounty : 20,000

Vulnerabilities :

• Local Privilege Escalation
• Out-of-Bounds Write
• Memory Corruption
• Security Code Review

Programs :

• Oracle (VirtualBox)

Authors :

• Cody Gallagher (@Cogallag)

Link :
https://www.zerodayinitiative.com/blog/2024/5/9/cve-2024-21115-an-oracle-virtualbox-lpe-used-to-win-pwn2own