The Pwn2Own Vancouver 2022: Trend Micro and ZDI awarded $1,155,000

The Pwn2Own Vancouver 2022 hacking contest ended, Trend Micro and ZDI awarded a total of $1,155,000 for successful attempts!

During the third day of the Pwn2Own Vancouver 2022 hacking competition, white hat hackers demonstrated a working exploit against Microsoft Windows 11 OS.

nghiadt12 from Viettel Cyber Security demonstrated an exploit for an escalation of privilege via Integer Overflow on Microsoft Windows 11. The exploit was awarded $40,000 and 4 Master of Pwn points.

Other contestants demonstrated working exploits for Microsoft Windows 11.

vinhthp1712 demonstrated an elevation of privilege via improper access control on Microsoft Windows 11. The expert earned $40,000 and 4 Master of Pwn points.

On the final attempt of the competition, Bruno PUJOS (@brunopujos) from REverse Tactics successfully achieved elevation of privilege via use-after-free on Microsoft Windows 11. The researchers earned $40,000 and 4 Master of Pwn points.

Another success was achieved by Billy Jheng Bing-Jhong (@st424204) from STAR Labs, the expert demonstrated a Use-After-Free exploit on Ubuntu Desktop earning another $40,000 and 4 Master of Pwn points.

Pwn2Own Vancouver 2022 hacking contest ended, it was the 15th edition of the important event organized by Trend Micro’s Zero Day Initiative (ZDI). This year, 17 contestants are attempted to exploit 21 targets across multiple categories and Trend Micro and ZDI awarded $1,155,000!

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS
Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.
To nominate, please visit: https://docs.google.com/forms/d/e/1FAIpQLSfxxrxICiMZ9QM9iiPuMQIC-IoM-NpQMOsFZnJXrBQRYJGCOw/viewform  

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, Pwn2Own Vancouver 2022)