CVE-2019-0539 to Remote Code Execution (RCE)

This post reviews how to achieve a full R/W (Read/Write) primitive which can ultimately lead to a RCE (Remote Code Execution).

CVE-2019-0539 Root Cause Analysis

Learn how CVE-2019-0539 was fixed in the Microsoft Edge Chakra Engine update for January 2019 via a Root Cause Analysis (RCA) report.

Changing Memory Protection in an Arbitrary Process

In Linux, the API to change memory protection is called Mprotect or pkey_mprotect, and both operate on the current process’ address space.