Security News > 2021 > April > Windows 10 hacked again at Pwn2Own, Chrome and Zoom also fall

Contestants hacked Microsoft's Windows 10 OS twice during the second day of the Pwn2Own 2021 competition, together with the Google Chrome web browser and the Zoom video communication platform.

The first to demo a successful Windows 10 exploit on Wednesday and earn $40,000 was Palo Alto Networks' Tao Yan who used a Race Condition bug to escalate to SYSTEM privileges from a normal user on a fully patched Windows 10 machine.

Windows 10 was hacked a second time using an undocumented integer overflow weakness to escalate permissions up to NT AuthoritySYSTEM by a researcher known as z3r09.

Microsoft's OS was hacked a third time during day one of Pwn2Own by Team Viettel, who escalated a regular user's privileges to SYSTEM using another previously unknown integer overflow bug.

On the third and last day of Pwn2Own 2021, contestants will again target Microsoft's Windows 10 and Exchange products, as well as Ubuntu Desktop and Parallels Desktop.

During the first two days of this year's competition, security researchers passed the $1 million mark in earnings for the first time at Pwn2Own after successfully demoing exploits that brought them $1,060,000 in total.

News URL

https://www.bleepingcomputer.com/news/security/windows-10-hacked-again-at-pwn2own-chrome-and-zoom-also-fall/