Pwn2Own 2020 - Guest-to-Host Escape on Oracle VirtualBox
Channel: Zero Day Initiative
Date: 2020-03-19

As a special bonus for Pwn2Own 2020, ZDI researcher Lucas Leong demonstrates an unpatched exploit in Oracle VirtualBox. He uses an OOB read for an info leak followed by a UAF to execute code from a guest OS on to the underlying host OS.