Welcome back to the final day of Pwn2Own Toronto for 2022! Yesterday, we awarded another $253,500 USD, which brings our three-day total to $934,750. While that alone would make it an amazing event, we’ve got another full day of exploitation ahead of us. Stay tuned as we update this blog with results as we get them and total the points to crown the Master of Pwn.

Results current as of 11:30. All times Eastern (GMT-5). All denominations are in USD.

FAILURE - Quarkslab was unable to get their exploit of the NETGEAR WAN interface working within the time allotted.

FAILURE - Peter Geissler was unable to get his exploit of the Lexmark MC3224i printer working within the time allotted.

BUG COLLISION - The NCC Group was able to execute their code execution attack against the WAN interface of the Canon printer. However, the exploit they used was previously in the contest. They still earn $5,000 and 1 Master of Pwn points.

FAILURE - The Nettitude team was unable to get their exploit of the WAN interface of the NETGEAR router working within the time allotted.

BUG COLLISION - The Synacktiv team was able to execute their attack against the Canon printer with with a heap overflow. However, the exploit they used was previously used prior in the contest. They still earn $5,000 and 1 Master of Pwn points.

SUCCESS - Chris Anastasio used a heap-based buffer overflow to exploit the Lexmark printer, which earns him $10,000 and 1 Master of Pwn point.

BUG COLLISION - The NCC Group was able to execute their RCE attack against the WAN interface of the Synology router. However, the exploit they used was previously used in the contest. They still earn $5,000 and 1 Master of Pwn points.