The 2018 Pwnie Winner For Best Privilege Escalation Bug

Meltdown and Spectre

Credit: Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg, Jann Horn, Anders Fogh

I think we all knew that Spectre and Meltdown were going to get nominated for Best Priv Esc bugs this year. These gamechanging processor flaws changed the game for vuln release, and absolutely ruined IT staff’s first week back from the holidays. Based on how the industry responded, Meltdown was more preciently named.