Sale of a 0-day exploit for Google Chrome on macOS

For informational purposes only.

Vulnerability type: bypass of Google Safe Browsing protection Affected OS: macOS 12 (Monterey) — macOS 27 (Golden Gate)

The seller claims to possess a macOS 0-day vulnerability that allows users to bypass the Google Chrome warning displayed by Google Safe Browsing when downloading a potentially malicious file. According to the seller, the victim downloads the malicious file without triggering a browser alert, increasing the likelihood of successful delivery through drive-by downloads and social engineering.

Google Safe Browsing — a Google service that protects users from malicious websites and files. In Chrome, it checks downloads and displays warnings when a user attempts to download a file deemed unsafe. In addition, the service's Enhanced Protection mode sends metadata from suspicious downloads to Google's servers for real-time analysis.

Price: $13.000