Pwn2Own Berlin 2025: Day Three Results
Pwn2Own Berlin 2025进入第三天,总奖金为69.5万美元。DEVCORE和FPT NightWolf团队利用已知或未修复漏洞分别获得部分奖金。Manfred Paul通过整数溢出攻击Firefox获5万美元。Wiz Research团队以独特漏洞赢得3万美元。 2025-5-17 09:40:13 Author: www.thezdi.com(查看原文) 阅读量:9 收藏

Welcome to the third and final day of Pwn2Own Berlin 2025. We' start the day at $695,000 awarded for the contest. It will be interesting to see if we can breach the million dollar mark. Stay tuned for all of the results.

COLLISION - Although Angelboy (@scwuaptx) from DEVCORE Research Team successfully demonstrated their privilege escalation on Windows 11, one of the two bugs he used was known to the vendor. He still earns $11,250 and 2.25 Master of Pwn points.

COLLISION - Although @namhb1, @havancuong000, and @HieuTra34558978 of FPT NightWolf successfully exploited NVIDIA Triton, the bug they used was known by the vendor (but not patched yet). They still earn $15,000 and 1.5 Master of Pwn points.

SUCCESS - Former Master of Pwn winner Manfred Paul used an integer overflow to exploit Mozilla Firefox (renderer only). His excellent work earns him $50,000 and 5 Master of Pwn points.

SUCCESS - Nir Ohfeld (@nirohfeld) Shir Tamari (@shirtamari) of Wiz Research used a External Initialization of Trusted Variables bug to exploit the #NVIDIA Container Toolkit. This unique bug earns them $30,000 and 3 Master of Pwn points.


文章来源: https://www.thezdi.com/blog/2025/5/17/pwn2own-berlin-2025-day-three-results
如有侵权请联系:admin#unsafe.sh