CVE-2026-6307-Longinus

CVE-2026-6307-Longinus V8 TurboFan における型混乱（JS-to-Wasm 呼び出しインライン化 + FrameState マージ） 通称 'Longinus': 1つのバグで2つの境界 リポジトリ: https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus 詳細レポート: OS-IS-CVE-2026-6307-07-2026.md 技術解説: Nebula Security - Longinus: 2 Boundaries in One Bug !WARNING...

CVE-2026-78938

CVE-2026-78938 — V8 TurboFan CheckMaps 인스턴스 마이그레이션 타입 혼동 CVE-2026-78938에 대한 근본 원인 분석 및 익스플로잇입니다. 이는 Chrome 152.0.7977.64V8 15.2.124.18에서 수정된 V8 TurboFan 로드 제거load elimination의 타입 혼동 취약점입니다. 이 버그는 실제 환경에서 악용된 것으로 보고되었습니다. 이 익스플로잇은 버그를 out-of-bounds Float64Array로 변환한 다음, 이를 통해 addrof/fakeobj 및 V8 압...

CVE-2020-6418

CVE-2020-6418: RCE de Chrome encadenado con una escalada de privilegios de Windows Este repositorio contiene una cadena de explotación funcional de una sola etapa para CVE-2020-6418 un bug de confusión de tipos en el compilador Turbofan de V8, que afecta a Google Chrome 80.0.3987.87 x64. Visitar...

Astra Linux – Vulnerability in Chromium

Type confusion in the V8 Turbofan engine in Google Chrome, prior to the release of 100.0.4896.127, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

SUSE CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Type confusion

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

CVE-2022-1364 is a type confusion in Google Chrome's V8 Turbofan engine, affecting Chrome/Chromium prior to version 100.0.4896.127. The root cause is a V8 Turbofan type confusion that could allow a remote attacker to trigger heap corruption via a crafted HTML page, leading to potential high-sever...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Debian DSA-5121-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5121 advisory. - Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Type Confusion

Google Chrome is vulnerable to type confusion. A remote attacker is able to exploit a heap memory corruption issue via a crafted HTML page, which leads to a use-after-free state in V8 Turbofan engine...

FreeBSD : chromium -- multiple vulnerabilities (a25ea27b-bced-11ec-87b5-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a25ea27b-bced-11ec-87b5-3065ec8fd3ec advisory. - Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to...