143 matches found
external_v8_AOSP10_r33_CVE-2021-0393
Motor JavaScript V8 V8 es el motor de JavaScript de código abierto de Google. V8 implementa ECMAScript tal como se especifica en ECMA-262. V8 está escrito en C++ y se utiliza en Google Chrome, el navegador de código abierto de Google. V8 puede ejecutarse de forma independiente o integrarse en...
external_v8_AOSP10_r33_CVE-2021-0396
V8 JavaScript Engine V8 is Google's open source JavaScript engine. V8 implements ECMAScript as specified in ECMA-262. V8 is written in C++ and is used in Google Chrome, the open source browser from Google. V8 can run standalone, or can be embedded into any C++ application. V8 Project page:...
CVE-2024-4761
CVE-2024-4761 Exploit de alta gravedad CVE-2024-4761 Google ha publicado actualizaciones de seguridad de emergencia para abordar una vulnerabilidad de día cero de alta gravedad, registrada como CVE-2024-4761, en el navegador Chrome. La vulnerabilidad es un problema de escritura fuera de los límit...
POC-CVE-2025-6554
CVE-2025-6554 CVE-2025-6554 是 Chrome 的 V8（JavaScript 引擎）解释器中的一个漏洞（Hole Check：对可选链表达式中的意外变量控制不足）。POC（CVE-2025-6554-POC.JS）探索了变量使用前“Hole”验证机制中的一个缺陷，该缺陷允许读取未初始化值，而这种读取行为通常会被引用错误阻止。 root@kitploit: function leakhole let x; delete x?.y?.a; return y; let y; function pwn let hole = leakhole;...
CVE-2021-21220
Explotación de CVE-2021-21220 Desde un Comportamiento Incorrecto de JIT hasta la Ejecución Remota de Código Resumen Esta presentación explica la explotación de CVE-2021-21220 , una vulnerabilidad en el motor JavaScript V8 de Google Chrome causada por suposiciones incorrectas del compilador JIT...
CVE-2026-85046
A flaw was found in V8, the JavaScript engine in Google Chrome. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a compromise of the user's system...
CVE-2026-82072
An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-78938
A flaw was found in the V8 JavaScript engine used in Chromium-based browsers. This type confusion vulnerability allows a remote attacker to execute unauthorized code within the browser's security sandbox by tricking a user into visiting a specially crafted web page. This could lead to a compromis...
CVE-2026-78901
A flaw was found in the V8 JavaScript engine. A race condition vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...
CVE-2026-76020
A race condition flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=541837151...
CVE-2026-19149 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19168 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-62776
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:35+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:32+00:00| seen|...
PT-2026-47471
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103 Description An out-of-bounds read and write issue exists in V8, the JavaScript and WebAssembly engine used by Google Chrome. This flaw allows a remote attacker to execute arbitrary code within the...
ROS-20260310-73-0007
A vulnerability in the V8 JavaScript script handler of Google Chrome browser is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code and cause a denial of service via a specially crafted HTML page...
ROS-20260310-73-0010
A vulnerability in the V8 JavaScript script handler of Google Chrome browser is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to read and delete data using a specially...
CVE-2022-23731
V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...
EUVD-2009-0281
Malware in sbrugna...