PT-2026-94330

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.8 Description The software fails to fully enforce the allowAsync: false option within VM and NodeVM. Although localPromise.prototype.then is replaced to prevent asynchronous operations, the sandbox's Promise static...

Exploit for Type Confusion in Google Chrome

Chrome Renderer 1day RCE via Type Confusion in Async Stack Tra...

Chrome V8 PromiseAllResolveElementClosure Element Confusion Vulnerability

Exploit for multiple platform in category dos / poc Chrome: V8: PromiseAllResolveElementClosure can cause elements kind confusion The Promise.all method internally uses PromiseAllResolveElementClosure...