A researcher has dropped working exploit code for a zero-day remote code execution (RCE) vulnerability on Twitter. Rajvardhan Agarwal tweeted a GitHub link to the exploit code, which he said affects current versions of Google Chrome and potentially other browsers, like Microsoft Edge, that use the Chromium framework. An update to Google s browser that fixes the flaw is expected to be released on Tuesday, though it’s unclear if patches for the bug will be included. The code is the result of the Pwn2Own ethical hacking contest held online last week.
Source: https://threatpost.com/chrome-zero-day-exploit-twitter/165363/