Microsoft Patched Bing Vulnerability That Allowed Snooping on Email, Other Data

Marco Marcelline, *PC Magazine*, 25 Mar 2023, via ACM TechNews

Participants of the Pwn2Own software exploitation conference hacked
technology from automaker Tesla twice at the Zero Day Initiative's Pwn2Own
software exploitation conference, earning $350,000 and a Model 3
infotainment system. The team from French security company Synacktiv
executed a time-of-check-to-time-of-use (TOCTOU) exploit against a Tesla
Gateway, then employed a heap overflow and an out-of-band write
vulnerability to gain access to and compromise the Model 3. Pwn2Own
describes a TOCTOU exploit …

access bing check compromise conference data earning email exploit exploitation french gateway hacked initiative magazine marco microsoft overflow pwn2own race condition security snooping software synacktiv system team technews technology tesla toctou vulnerability zero day initiative