Security Researcher Earns $100,000 for Safari Exploit in Pwn2Own Hacking Contest

Each year, the Zero Day Initiative hosts a "Pwn2Own" hacking contest where security researchers can earn money for finding serious vulnerabilities in major platforms like Windows and macOS.


This 2021 Pwn2Own virtual event kicked off earlier this week and featured 23 separate hacking attempts across 10 different products including web browsers, virtualization, servers, and more. A three-day affair that spans multiple hours a day, this year's Pwn2Own event was livestreamed on YouTube.

Apple products were not heavily targeted in Pwn2Own 2021, but on day one, Jack Dates from RET2 Systems executed a Safari to kernel zero-day exploit and earned himself $100,000. He used an integer overflow in Safari and an OOB write to get kernel-level code execution, as demoed in the tweet below.


Other hacking attempts during the Pwn2Own event targeted Microsoft Exchange, Parallels, Windows 10, Microsoft Teams, Ubuntu, Oracle VirtualBox, Zoom, Google Chrome, and Microsoft Edge.

A serious Zoom flaw was demonstrated by Dutch researchers Daan Keuper and Thijs Alkemade, for example. The duo exploited a trio of flaws to get total control of a target PC using the Zoom app with no user interaction.


Pwn2Own participants received more than $1.2 million in rewards for the bugs they discovered. Pwn2Own gives vendors like Apple 90 days to produce a fix for the vulnerabilities that are uncovered, so we can expect the bug to be addressed in an update in the not too distant future.

Tag: Safari

Popular Stories

iPhone 17 Pro Blue Feature Tighter Crop

iPhone 17: What's New With the Cameras

Friday May 2, 2025 3:52 pm PDT by
We've still got months to go before the new iPhone 17 models come out, but a combination of dummy models and leaks have given us some insight into what we can expect in terms of camera changes. Apple is adding new camera features, and changing the design of the camera bump for some models. You might be skeptical of dummy models, but over the years, they've proven to be a highly accurate...
Beyond iPhone 13 Better Blue Face ID

20th-Anniversary iPhone Will Reportedly Feature an All-Screen Design

Saturday May 3, 2025 9:20 am PDT by
Apple's former design chief Jony Ive long dreamed of an iPhone with a truly all-screen design, and his wish might finally become reality in a few more years. The Information today cited multiple sources who said that at least one new iPhone model launching in 2027 will have a truly edge-to-edge display. The device's front camera and Face ID system would both be placed under the screen....
iPhone 17 Air Size Feature

iPhone 17 Air Expected to Have Battery Case Due to 'Worse' Battery Life

Saturday May 3, 2025 8:24 am PDT by
Apple's rumored iPhone 17 Air model will have "worse" battery life compared to previous iPhone models, according to a paywalled The Information report. In internal testing, Apple determined that the percentage of users who will be able to use the iPhone 17 Air for a full day without needing to recharge the device throughout the day will be between 60% and 70%, according to the report. For...
AirPods Pro 3 Mock Feature

AirPods Pro 3 Just Months Away – Here's What We Know

Tuesday April 29, 2025 1:30 am PDT by
Despite being more than two years old, Apple's AirPods Pro 2 still dominate the premium wireless‑earbud space, thanks to a potent mix of top‑tier audio, class‑leading noise cancellation, and Apple's habit of delivering major new features through software updates. With AirPods Pro 3 widely expected to arrive in 2025, prospective buyers now face a familiar dilemma: snap up the proven...
iPhone Top Left Hole Punch Face ID Feature

iPhone 18 Pro Models Rumored to Feature Under-Screen Face ID With Top-Left Camera Hole

Saturday May 3, 2025 9:19 am PDT by
Apple's two-generations-away iPhone 18 Pro models will likely feature under-screen Face ID, according to The Information. The paywalled report today cited a source who said the iPhone 18 Pro and iPhone 18 Pro Max will have only a small hole in top-left corner of the screen, to accommodate the front-facing camera, with all Face ID hardware moved under the screen. With under-screen Face ID, ...
iphone 16 pro ghost hand

iPhone 18 Rumors: What to Expect From Apple Next Year

Friday May 2, 2025 3:01 am PDT by
Apple's is continually working with suppliers on successive iPhone models simultaneously, which is why we often get rumored features so far ahead of launch. The iPhone 18 series is no different, and we already have a picture forming of what to expect from Apple's 2026 smartphone lineup. If you're skipping this year's upcoming iPhone 17 series, or just plain curious about Apple's plans...
Foldable iPhone 2023 Feature Iridescent Search

Apple Plans Split iPhone Launch Strategy: Pro and Foldable in Fall 2026, Standard in Spring 2027

Saturday May 3, 2025 8:32 am PDT by
Starting in 2026, Apple plans to change the release cycle for its flagship iPhone lineup, according to The Information. Apple will release the more expensive iPhone 18 Pro models in the fall, delaying the release of the standard iPhone 18 until the spring. The shift may be because Apple plans to debut a foldable iPhone in 2026, which will join the existing iPhone lineup. The fall release...
maxresdefault

The MacRumors Show: Apple Watch Series 11, Ultra 3, and SE 3 Rumors

Friday May 2, 2025 9:27 am PDT by
On this week's episode of The MacRumors Show, we look at what to expect from the 2025 Apple Watch lineup when new models launch in the fall. Subscribe to The MacRumors Show YouTube channel for more videos The Apple Watch Series 11 is anticipated to offer hypertension detection as the device's next major health monitoring advancement, potentially with AI-powered health-coaching features. It is ...

Top Rated Comments

antiprotest Avatar
53 months ago
Please set up a reward for fixing iCloud Tabs sync. Apparently the people at Apple cannot do it after like a decade.
Score: 16 Votes (Like | Disagree)
mistasopz Avatar
53 months ago

The Chinese government is run by Chinese. And yes, if you signaling out Chinese government, you are basically saying Chinese are cheaters and Chinese are theft.

But every government in the world do spy on each other, stealing information etc.
That's some pretty loopy logic there. If I criticise the Canadian government am I racist towards Canadians (after all it's run by Canadians)? Of course not, what ridiculousness. There are 1.4 billion Chinese people and being critical of their leadership is not the same thing as hating 1.4 billion people because of their ethnicity. And if you think you think they are your friend, you better read up on your own history (Nortel IP theft for example).
Score: 9 Votes (Like | Disagree)
mistasopz Avatar
53 months ago

Aren’t you are being racist when you single out Chinese government?
The Chinese government is not a race.
Score: 9 Votes (Like | Disagree)
steve217 Avatar
53 months ago
Given the cost of a breach, $100k is a bargain.
Score: 7 Votes (Like | Disagree)
BWhaler Avatar
53 months ago
I always worry given Zoom’s ties to China and the slip-shot way they went for growth above all, if some of these “flaws” are actually backdoors.

As convienent and pervasive as Zoom is, no way I would trust it if I was a CTO or enterprise security officer.
Score: 5 Votes (Like | Disagree)
T Coma Avatar
53 months ago
Ah yes, the old integer overflow and OOB write trick. Classic.
Score: 3 Votes (Like | Disagree)