Security News > 2021 > March > Google shares Spectre PoC targeting browser JavaScript engines
Google has published JavaScript proof-of-concept code to demonstrate the practicality of using Spectre exploits targeting web browsers to access information from a browser's memory.
According to the Google Security Team, the PoC shared today works across a wide range of processor architectures, operating systems, and hardware generations.
Security mechanisms vendors have added to web browsers to protect users from Spectre attacks don't actually block exploitation attempts.
The Google Security Team also created a prototype Chrome extension named Spectroscope to help security engineers and web developers protect their websites from Spectre.
"Today, we're sharing proof-of-concept code that confirms the practicality of Spectre exploits against JavaScript engines," said Stephen Röttger and Artur Janc, Information Security Engineers at Google.
The Spectre security vulnerability was unveiled as a hardware bug by Google Project Zero security researchers in January 2018.