xss

How one Twitch chat message became code execution on a streamer’s PCscrt.ch

A vulnerable Twitch chat overlay, combined with an unsandboxed Chromium renderer in OBS and a known V8 exploit (CVE-2024-7971), allowed a viewer to achieve remote code execution on a streamer's PC. This chain turned a single malicious chat message into full control of the host machine.