CVE-2024-4947

CVE-2024-4947 A in-the-wild V8 type confusion bug. This repository contains Analysis and PoCs to escalate this vulnerability to have the same exploit pattern as CVE-2024-12695, Object Hash Reassign. AddressOf / FakeObject Primitives constructed by using the type confusion to assign object hash to...

exploitgym

ExploitGym ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities across userspace programs, Google's V8 engine, and the Linux kernel, designed to evaluate AI agents' ability to develop exploits. Quick start 1. Python deps uv sync --extra proxy 2. Build runtime...

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...

BadKernel

BadKernel full exploit for CVE-2016-6754BadKernel slide for syscan2016 shanghai "BadKernel --- exploit V8 with a typo"...

CVE-2024-7965

CVE-2024-7965 This repository contains PoC for CVE-2024-7965. This is the vulnerability in the V8 that occurs only within ARM64. Acknowledgments Yuri Pazdnikov — Junior Vulnerability Researcher @ BI.ZONE...

CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engine

CVE-2026-85046: Chrome V8 Type Confusion Patch This repository contains the conceptual C++ patch for the critical zero-day vulnerability in Google Chrome's V8 JavaScript and WebAssembly engine CVE-2026-85046. Overview The vulnerability is a high-severity type confusion bug in V8's Maglev and...

Browser-Pwning-

Browser-Pwning A proper well structured documentation for getting started with chrome pwning & v8 pwning Structure of document How this doc is organised 1. Motivation 2. Actual Study Material Motivation Browsers are one of today’s most used pieces of technology. On every off the shelf computer, i...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965 is a high-severity vulnerability in the V8 JavaScript engine of the Google Chrome browser. The vulnerability stems from improper implementation in the V8 engine when handling specific JavaScript code, leading to heap memory corruption. An attacker could exploit thi...

google-chrome-emergency-update

Chrome Emergency Security Update This repository contains information and tools related to Google's emergency Chrome update addressing critical security vulnerabilities. 🚨 Emergency Update Notice Google has issued an emergency Chrome update to patch critical zero-day vulnerabilities being activel...

CVE-2020-6468-Chrome-Exploit

Chrome CVE-2020-6468 exploit Exploit for Issue 1076708. Wrote this exploit 2 years ago and then forgot about it :| exploitv8.js is an exploit written for d8 while exploitchrome.html targets chrome...

Google-chrome-zero-day

Google Chrome Zero-Day — Web Security Track Learn, practice, and defend — ethically. This repository contains course materials and labs for the Web Security module . Use only in controlled, legal environments VMs, lab networks and follow the Responsible Disclosure & Code of Conduct below. Table o...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 Zero-Day Memory Corruption Vulnerability 🔥 Actively Exploited Zero-Day ⚡ V8 Engine Memory Corruption 🛡️ Patch Immediately 📖 Overview ⚠️ CVE-2026-11645 is a high-severity zero-day vulnerability affecting the Google Chrome V8 JavaScript engine. The flaw allows...

CVE-2024-12381

CVE-2024-12381 CVE-2024-12381 is a WebAssembly type canonicalization vulnerability in Chrome's V8 engine where CanonicalEquality::EqualValueType fails to account for nullability in indexed reference types. Combined with a JSPI-based V8 sandbox bypass CVE-2024-12692, this allows remote code...

CVE-2026-113222

A flaw was found in Chromium's V8 engine. A remote attacker could exploit this use-after-free vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code outside the browser sandbox...

CVE-2025-6554

CVE-2025-6554 Proof of Concept ⚠️ Security Research Project - This project is intended solely for security research and educational purposes. Do not use in production environments. 📋 Project Overview CVE-2025-6554 is a critical vulnerability in the Chrome V8 engine, involving the "Temporal Dead...

TFC-Chrome-v8-bug-CVE-2021-38001-poc

TFC-Chrome-v8-bug-CVE-2021-38001-poc run d8 with commandline: ./d8 2.mjs...

CVE-2026-113044

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution within the browser's sandbox due to a use-after-free memory vulnerability in the V8 JavaScript engine. An attacker can exploit this issue by convincing a user to open a specially crafted...

CVE-2026-4447

CVE-2026-4447 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-03-20 Technical Summary...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...