BACK
[09]
Jul 28, 2026

Flash drives are no longer needed – PlayStation 4 jailbreak on firmware 11.02 now runs directly from the browser

Michael Torres
By Michael Torres Video Game News and Features Editor
Last updated: Jul 28, 2026

Flash drives are no longer needed - PlayStation 4 jailbreak on firmware 11.02 now runs directly from the browser

Something unexpected popped up in the hobbyist scene: developers ufm42 and ntfargo have published an exploit for the CSSFontFace bug in the WebKit engine on GitHub. The flaw lives in font parsing and can be pushed to run third‑party code in user mode on both PlayStation 4 and PlayStation 5 (a working demo on real hardware was shown by researcher DrYenyen).

The bug affects a broad swath of firmware (i.e., many OS versions handle fonts the same way). On PlayStation 4 it dates back to 6.00 and extends up to 13.52, while on PlayStation 5 the same class of issue spans from 1.00 to 13.40. More practically, the full chain that reaches kernel execution currently operates on PlayStation 4 firmwares from 7.00 through 11.02, unlocking extra capabilities without opening the machine or soldering anything.

Why this matters: unlike the older PPPwn approach, this technique removes the need for USB sticks or extra network kit. The exploit is triggered right in the stock PlayStation 4 browser by loading a crafted local page, so the setup is done in-browser rather than by juggling drives or routing gear — which, in many setups, cuts down on the usual failure points during reboots (e.g., lost mounts, timing issues).

In a public run the authors managed to launch the custom loader GoldHEN v2.4b18.10 (by SiSTRo) on a PlayStation 4 at firmware 11.02. Once the chain executes, the system exposes the debug menu; from there one can install 3rd‑party apps and tweak the console in ways the stock UI doesn’t permit.

The PlayStation 5 is a different beast. Built‑in defenses like ASLR and virtual function table checks (vtable validation) block the present chain, so additional holes will be necessary before anything similar lands on current PS5 builds — in short, a separate bypass is required to neutralize those protections.

Note that Sony has already moved to close this vector: starting with firmware 11.50 for PlayStation 4 and 9.00 for PlayStation 5, the vendor rewrote the CSSFontFace processing logic. In other words, devices updated to those releases (or newer) are patched and the exploit won’t work on them.