Pwn2own Day One: Successful Hacks On Windows 11, Tesla, Macos & Ubuntu

By Editor Last updated Mrz 4, 2025

The first day of the Pwn2Own Vancouver 2023 hacking challenge witnessed successful exploits on various platforms, including Windows 11, Tesla, macOS, and Ubuntu Desktop. Hackers showcased their abilities by leveraging vulnerabilities to gain unauthorized access and subsequently earning financial rewards and Master of Pwn points. Notably, AbdulAziz Hariri of Haboob SA employed a 6-bug logic chain to breach the Windows 11 system, resulting in a monetary prize of $50,000 and 5 Master of Pwn points. Similarly, Marcin Wizowski achieved privilege escalation on Windows 11 through an improper input validation bug, securing $30,000 and 3 Master of Pwn points. Tesla also fell victim to exploitation, as Synacktiv executed a TOCTOU attack on Tesla Gateway, leading to the compromise of a Tesla Model 3, a financial reward of $100,000, and 10 Master of Pwn points. Moreover, Synacktiv successfully escalated privileges on Apple macOS, earning $40,000 and 4 Master of Pwn points. STAR Labs targeted Ubuntu Desktop, attaining $15,000 and 1.5 Master of Pwn points. Additionally, STAR Labs executed a 2-bug chain attack on Microsoft SharePoint, acquiring 10 Master of Pwn points and $100,000. Bien Pham of Qrious Security exploited the Oracle VirtualBox, gaining 4 Master of Pwn points and $40,000. Overall, the initial day of the competition revealed the existence of 12 zero-day exploits, with hackers collectively receiving a sum of $375,000 and a Tesla Model 3. This event underscores the significance of robust cybersecurity defenses, as it exposes vulnerabilities in widely-used software and devices.

Quickjump

Key Takeaways

Hackers successfully exploited multiple platforms including Windows 11, Tesla, macOS, and Ubuntu Desktop during the Pwn2Own Vancouver 2023 hacking challenge.
The exploits included a 6-bug logic chain on Windows 11, a TOCTOU attack on Tesla Gateway, privilege escalation on Apple macOS, and an attack on Ubuntu Desktop.
The hackers earned a total of $375,000, a Tesla Model 3, and accumulated Master of Pwn points for their successful exploits.
The competition showcased the importance of strong cybersecurity defenses and highlighted vulnerabilities in popular software and devices.

Exploits and Results

In the Pwn2Own competition, various successful exploits were carried out on Windows 11, Tesla, macOS, and Ubuntu Desktop, resulting in hackers earning money and Master of Pwn points. The exploits demonstrated vulnerabilities in these platforms, highlighting the need for strong cybersecurity defenses. AbdulAziz Hariri of Haboob SA hacked Windows 11 using a 6-bug logic chain, earning 5 Master of Pwn points and $50,000. Marcin Wizowski elevated privileges on Windows 11 using an improper input validation bug, earning $30,000 and 3 Master of Pwn points. Synacktiv performed a TOCTOU attack on Tesla Gateway, earning a Tesla Model 3, $100,000, and 10 Master of Pwn points. Synacktiv also escalated privileges on Apple macOS using a TOCTOU bug, earning $40,000 and 4 Master of Pwn points. STAR Labs successfully attacked Ubuntu Desktop, earning $15,000 and 1.5 Master of Pwn points. STAR Labs also ran a 2-bug chain attack on Microsoft SharePoint, earning 10 Master of Pwn points and $100,000. Bien Pham of Qrious Security exploited Oracle VirtualBox, earning 4 Master of Pwn points and $40,000. Overall, the hackers received $375,000 and a Tesla Model 3 on the first day of the competition. A total of 12 zero-day exploits were discovered.

Targeted Platforms

Targeting multiple operating systems and devices, the Pwn2Own Vancouver 2023 hacking challenge successfully exploited vulnerabilities in a range of platforms, including Windows 11, Tesla, macOS, and Ubuntu Desktop. Synacktiv performed a TOCTOU attack on Tesla Gateway, earning a Tesla Model 3, $100,000, and 10 Master of Pwn points. STAR Labs ran a 2-bug chain attack on Microsoft SharePoint, earning 10 Master of Pwn points and $100,000. These successful exploits highlight the importance of strong cybersecurity defenses. The Pwn2Own competition serves as a platform for hackers to demonstrate vulnerabilities in popular software and devices, contributing to the ongoing efforts in improving security measures. With the discovery of 12 zero-day exploits and a total payout of $375,000, the first day of the competition showcased the need for continuous advancements in cybersecurity.

Importance of Cybersecurity

The Pwn2Own Vancouver 2023 hacking challenge serves as a vital platform for uncovering vulnerabilities in various operating systems and devices, underscoring the critical importance of robust cybersecurity measures. This event highlights the ongoing cybersecurity challenges faced by organizations and individuals in safeguarding their sensitive data. With successful hacks on platforms like Windows 11, Tesla, macOS, and Ubuntu, it becomes increasingly evident that no software or device is immune to exploitation. The discoveries made by the participating hackers emphasize the need for strong cybersecurity defenses to protect sensitive data from malicious actors. By identifying and addressing vulnerabilities through events like Pwn2Own, the industry can strive towards creating more secure and resilient systems, ensuring the privacy and security of individuals and organizations alike.

Frequently Asked Questions

How many participants took part in the Pwn2Own Vancouver 2023 hacking challenge?

The Pwn2Own Vancouver 2023 hacking challenge involved a diverse group of participants with varying hacking skills. However, the specific number of participants in the challenge is not mentioned in the given information.

What were the specific vulnerabilities exploited in the Windows 11 hacks?

The specific vulnerabilities exploited in the Windows 11 hacks were a 6-bug logic chain and an improper input validation bug. These security flaws allowed hackers to gain elevated privileges and compromise the Windows 11 operating system.

Which company organized the Pwn2Own competition?

The Pwn2Own competition, organized by a company, showcases the future implications of successful hacks on Windows 11, Tesla, macOS, and Ubuntu. It contributes to the cybersecurity landscape by exposing vulnerabilities and driving the development of secure software systems.

Did any participant successfully hack into Apple iOS devices?

No participant successfully hacked into Apple iOS devices during the Pwn2Own competition. The focus of the competition was on exploiting vulnerabilities in Windows 11, Tesla, macOS, and Ubuntu Desktop systems and not specifically on Apple iOS devices.

How are the Master of Pwn points awarded in the competition?

Participants in the Pwn2Own competition can gain more Master of Pwn points by employing effective strategies such as uncovering multiple vulnerabilities or chaining multiple bugs. These points are significant in determining the overall winner as they demonstrate the hacker’s proficiency in exploiting various software and devices.