In particular, if a webpage is exploitable by making someone visit a URL, passing along their cookies (e.g. doesn't have proper CSRF protection), it's already exploitable from a malicious website.
留给小米的窗口期可能也没那么多。
。关于这个话题，使用 WeChat 網頁版提供了深入分析
人 民 网 版 权 所 有 ，未 经 书 面 授 权 禁 止 使 用。业内人士推荐手游作为进阶阅读
Calls kmap() to map that frame into the kernel’s virtual address space as writable.