Pwn2Own Vancouver 2023 Day 2 - Microsoft Teams, Oracle VirtualBox, and Tesla hacked
24-Mar-23
The organisation rewarded $475,000 for 10 distinct zero-day vulnerabilities on the second day of Pwn2Own Vancouver 2023, bringing the total amount awarded to $850,000! The bug hunters showed zero-day attacks against the Tesla Model 3 and Ubuntu Desktop OS, as well as the Microsoft Teams collaboration tool and virtualization platform Oracle VirtualBox.
Thomas Imbert and Thomas Bouzerar from Synacktiv successfully demonstrated a 3-bug chain against Oracle VirtualBox with a Host EoP to start the day. Due to a previously known issue that was exploited in the assault, the success was labelled as a “collision”.
