CVE-2024-4947

CVE-2024-4947 A in-the-wild V8 type confusion bug. This repository contains Analysis and PoCs to escalate this vulnerability to have the same exploit pattern as CVE-2024-12695, Object Hash Reassign. AddressOf / FakeObject Primitives constructed by using the type confusion to assign object hash to...

exploitgym

ExploitGym ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities across userspace programs, Google's V8 engine, and the Linux kernel, designed to evaluate AI agents' ability to develop exploits. Quick start 1. Python deps uv sync --extra proxy 2. Build runtime...

CVE-2024-7965

CVE-2024-7965 This repository contains PoC for CVE-2024-7965. This is the vulnerability in the V8 that occurs only within ARM64. Acknowledgments Yuri Pazdnikov — Junior Vulnerability Researcher @ BI.ZONE...

CVE-2020-6468-Chrome-Exploit

Chrome CVE-2020-6468 exploit Exploit for Issue 1076708. Wrote this exploit 2 years ago and then forgot about it :| exploitv8.js is an exploit written for d8 while exploitchrome.html targets chrome...

CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engine

CVE-2026-85046：Chrome V8 类型混淆补丁 本仓库包含针对 Google Chrome V8 JavaScript 和 WebAssembly 引擎中严重零日漏洞（CVE-2026-85046）的概念性 C++ 补丁。 概述 该漏洞是 V8 的 Maglev 和 Turbofan 编译器中一个高严重性的类型混淆缺陷。当包含通用 PACKEDELEMENTS 的数组错误地接收到 PACKEDSMIELEMENTS 映射时，该漏洞即被触发，从而允许攻击者在 JavaScript 堆上读取/写入任意指针。 仓库内容...

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965是Google Chrome浏览器中V8 JavaScript引擎的一个高危漏洞。该漏洞源于V8引擎在处理特定JavaScript代码时实现不当，导致堆内存损坏。攻击者可通过诱导用户访问包含特制JavaScript的恶意网页，利用此漏洞在Chrome渲染器中执行任意代码。成功利用该漏洞可能导致浏览器崩溃、信息泄露，甚至完全控制受害者的浏览器环境。该漏洞的CVSS评分为8.8，表明其危害性较高。...

CVE-2026-4447

CVE-2026-4447 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-03-20 Technical Summary...

CVE-2026-95280

A flaw was found in chromium-browser. Arbitrary code execution within the browser's restricted security environment sandbox is possible due to a race condition in the V8 JavaScript engine. A remote attacker can exploit this vulnerability by enticing a user to visit a specially crafted web page...

CVE-2025-6554

CVE-2025-6554 Proof of Concept ⚠️ Security Research Project - This project is intended solely for security research and educational purposes. Do not use in production environments. 📋 Project Overview CVE-2025-6554 is a critical vulnerability in the Chrome V8 engine, involving the "Temporal Dead...

BadKernel

BadKernel CVE-2016-6754BadKernel用のフルエクスプロイト syscan2016上海向けのスライド "BadKernel --- タイポでV8をエクスプロイトする"...

google-chrome-emergency-update

Chrome Emergency Security Update This repository contains information and tools related to Google's emergency Chrome update addressing critical security vulnerabilities. 🚨 Emergency Update Notice Google has issued an emergency Chrome update to patch critical zero-day vulnerabilities being activel...

CVE-2026-102326

A flaw was found in chromium-browser. A type confusion vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox. An attacker could exploit this flaw by convincing a user to open a specially crafted HTML page...

Google-chrome-zero-day

Google Chrome Zero-Day — Web Security Track Learn, practice, and defend — ethically. This repository contains course materials and labs for the Web Security module . Use only in controlled, legal environments VMs, lab networks and follow the Responsible Disclosure & Code of Conduct below. Table o...

PT-2026-102835

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description A buffer overflow exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary code...

Browser-Pwning-

Browser-Pwning A proper well structured documentation for getting started with chrome pwning & v8 pwning Structure of document How this doc is organised 1. Motivation 2. Actual Study Material Motivation Browsers are one of today’s most used pieces of technology. On every off the shelf computer, i...

TFC-Chrome-v8-bug-CVE-2021-38001-poc

TFC-Chrome-v8-bug-CVE-2021-38001-poc run d8 with commandline: ./d8 2.mjs...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 Zero-Day Memory Corruption Vulnerability 🔥 Actively Exploited Zero-Day ⚡ V8 Engine Memory Corruption 🛡️ Patch Immediately 📖 Overview ⚠️ CVE-2026-11645 is a high-severity zero-day vulnerability affecting the Google Chrome V8 JavaScript engine. The flaw allows...

CVE-2024-12381

CVE-2024-12381 CVE-2024-12381 是 Chrome V8 引擎中的一个 WebAssembly 类型规范化漏洞，其中 CanonicalEquality::EqualValueType 未能考虑索引引用类型中的可空性。结合基于 JSPI 的 V8 沙箱绕过（CVE-2024-12692），该漏洞可实现远程代码执行。 服务器从 User-Agent 中提取 Chrome 版本并对浏览器进行指纹识别。易受攻击的浏览器会被自动重定向到漏洞利用载荷，而已修补的浏览器则会看到一个外观正常的仪表板。 使用方法 1. 安装依赖：pip install flask 2...