Chrome Browser Exploitation: from zero to heap sandbox escape - Matteo Malvica - NDC Security 2025

This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper Attend the next NDC conference near you: https://ndcconferences.com https://ndc-security.com/ Subscribe to our YouTube channel and learn every day: @NDC Follow our Social Media! https://www.facebook.com/ndcconferences https://twitter.com/NDC_Conferences https://www.instagram.com/ndc_conferences This talk is about exploiting the Chrome browser’s focusing on the V8 JavaScript JIT engine. We’ll start with an introduction to V8, explaining its architecture and common vulnerabilities. We’ll then cover the new V8 Heap Sandbox and its different implementations during the past years and how it can be bypassed.