CVE-2026-78910

A buffer overflow in the V8 JavaScript engine of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to visit a crafted HTML page. The NVD-assigned CVSS 3.1 score is 8.8 (HIGH) with user interaction requ...

CVE-2026-78910

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78910

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65887

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79236

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79236

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78938

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78938

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79236

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The CVSS v3.1 score is 8.8 (High) , with low attack complexity and no privileges required, but user int...

CVE-2026-78938

CVE-2026-78938 is a type confusion vulnerability in the V8 JavaScript engine shipped with Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it by delivering a crafted HTML page , requiring only user interaction (visiting the page) to execute arbitrary code inside the br...

CVE-2026-78899

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78899

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78899

CVE-2026-78899 is a use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to 152.0.7977.65 . The flaw arises from incorrect dynamic memory management: after a memory location is freed, the pointer is not cleared, allowing an attacker to manipulate the program. A remote a...

google-chrome-emergency-update

Aggiornamento di Sicurezza Urgente di Chrome Questo repository contiene informazioni e strumenti relativi all'aggiornamento urgente di Chrome di Google per correggere vulnerabilità di sicurezza critiche. 🚨 Avviso di Aggiornamento Urgente Google ha rilasciato un aggiornamento urgente di Chrome per...

CVE-2020-6418

CVE-2020-6418: RCE su Chrome abbinata a un'elevazione di privilegi di Windows Questo repository contiene una catena di exploit funzionante a singolo stadio per CVE-2020-6418 un bug di type confusion nel compilatore Turbofan di V8, che interessa Google Chrome 80.0.3987.87 x64. Visitare una pagina...

chrome_v8_cve_checker

Come usarlo Apri https://itsshotgun.github.io/chromecve-2025-5419checker/ in Chrome La pagina rileverà la tua versione di Chrome e ti dirà se sei vulnerabile. Se vulnerabile, mostrerà un link per aggiornare Chrome immediatamente. Perché Questa zero-day consente ai siti web dannosi di eseguire...

CVE-2018-6065-exploit

Chrome V8 CVE-2018-6065 Exploit Análise no blog: https://b1tg.github.io/post/cve-2018-6065-analysis root@kitploit: git reset 0407506af3d9d7e2718be1d8759296165b218fcf --hard gclient sync -f tools/dev/v8gen.py x64.debug ninja -C out.gn/x64.debug tools/dev/v8gen.py x64.release ninja -C...

CVE-2024-4947-PoC

CVE-2024-4947 — V8-Maglev-Type-Confusion → Vollständige RCE d8-PoC Eine vollständige, eigenständige Exploitation-Kette für CVE-2024-4947 V8-Maglev-Type-Confusion, vom anfänglichen Type-Confusion-Trigger bis zur beliebigen Codeausführung. Die PoC läuft gegen einen nicht-sandboxed d8-Build und gibt...

PT-2026-81532

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. A race condition occurs when the timing o...

PT-2026-81540

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...