Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in V8 in Google Chrome prior to version 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

In V8 in Google Chrome, prior to version 142.0.7444.59, it was possible for a remote attacker to exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Uninitialized use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before 151.0.7922.109, writing V8 code in Google Chrome allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

In V8, the "out of bounds" reading in Google Chrome before 151.0.7922.72 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14431

CVE-2026-14431 Bug修复 https://chromium-review.googlesource.com/c/v8/v8/+/7950517 maglev Check map of inlined array in ArrayIteratorPrototypeNext Fixed: 523884658 Change-Id: I2a2bba817952d7023eb4b97ad41d8bb460fb9359 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7950517 Commit-Queu...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 零日内存损坏漏洞 🔥 已被积极利用的零日漏洞 ⚡ V8 引擎内存损坏 🛡️ 立即修补 📖 概述 ⚠️ CVE-2026-11645 是一个高严重性的零日漏洞，影响 Google Chrome V8 JavaScript 引擎。该漏洞允许攻击者触发越界读/写 条件，可能导致远程代码执行 RCE 。 🎯 漏洞信息 🏷️ 字段| 📋 值 ---|--- CVE| CVE-2026-11645 🔥 严重性| 高 📊 CVSS| 8.8 🏢 厂商| Google 🌐 产品| Chrome 🧩 组件| V8 引擎 💥 类型|...

jscd

jscd 把 bytenode 编译的 .jsc 还原成 JavaScript。纯静态解析： 纯 Rust 单二进制，不需要打过补丁的 V8，也不需要 Node 运行时、不联网。 支持 Node 8.0.0 → 26.10.0 （510 个发布 / 36 个 V8 minor），≈ 25k 份.jsc 通过测试、0 失败 （31 条版本线 × 41 份用例，按 bytenode 1.7.0 的编译参数）；两层优化（寄存器折叠 → swc 复制传播） 提升反编译源码的可读性。 English · 中文 目录：特性 · 快速上手 · 安装 · 用法 · CLI 参考 · 支持的版本 · 实现...

CyberMeowfia-ace3

网站: nebusec.ai · Twitter @nebusecurity · 漏洞列表 885+ IonStack 后续，关注 https://github.com/NebuSec/CyberMeowfia/issues/44 最新研究 IonStack 第二部分 ：GhostLock，一个已在所有Linux发行版中存在15年的栈上UAF漏洞 Linux Kernel 📖 Writeup · 🐦 Twitter Longinus ：一个漏洞中的两个边界，穿透Chrome的渲染器和V8沙箱，CVE-2026-6307 Chrome V8 📖 Writeup · 🐦 Twitter...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0344-1 Rating: critical References: 1283262 Cross-References: CVE-2026-102299 CVE-2026-102300 CVE-2026-102301 CVE-2026-102302 CVE-2026-102303 CVE-2026-102304 CVE-2026-102305 CVE-2026-102306 CVE-2026-102307...

Fedora 45 : chromium (2026-0daef29dc3)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0daef29dc3 advisory. Update to 154.0.8037.92 CVE-2026-102299: Type confusion in V8 CVE-2026-102300: Uninitialized resource in WebGPU CVE-2026-102301: Out of bounds write...

CVE-2026-61500

CVE-2026-61500：Rejetto HFS 会话伪造导致 RCE CVE-2026-61500 是 Rejetto HFS 3.0.0 至 3.2.0 中的一个未认证会话伪造漏洞。HFS 使用 JavaScript Math.random 生成其 Koa 会话 cookie 签名密钥，并在未认证的 SRP 登录握手中暴露了来自同一 V8 PRNG 的输出。攻击者可以重建 PRNG 状态、恢复签名密钥、伪造管理员会话，并利用文档中记载的 servercode 配置功能执行服务端 JavaScript。 本仓库包含一个 Python 概念验证，以及使用官方 HFS 3.2.0 和...

CVE-2026-78938

CVE-2026-78938 — V8 TurboFan CheckMaps 实例迁移类型混淆 针对 CVE-2026-78938 的根因分析与漏洞利用，这是 V8 TurboFan 加载消除中的一个类型混淆漏洞，已在 Chrome 152.0.7977.64（V8 15.2.124.18）中修复。该漏洞被报告已在野外被利用。 该漏洞利用将缺陷转化为越界 Float64Array，进而实现 addrof / fakeobj 以及针对 V8 压缩堆的任意读写。初始写入之后的所有操作均在运行时定位——读写阶段没有硬编码的堆偏移。 受影响版本：Chrome 152.0.7977.54（V8...

CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter

CVE-2026-85046 + CVE-2026-87491 Was doing a ton of reading over at https://github.com/Serotav/Writeups. Decided to combine 85046 with 87491 and bake in some WASM at the same time. Went and re-did a stage1.js for an eventual ubuntu LPE I'm cooking. The basics: Confuse packed object and integer...

CVE-2025-6554

CVE-2025-6554 复现漏洞 macOS 环境： brew intsall ninja git clone https://chromium.googlesource.com/chromium/tools/depottools.git export PATH=/path/to/depottools:$PATH fetch v8 cd v8 git checkout 13.8.500258 gclient sync -D sh v8asan.sh autoninja -C out/arm64.asan d8 ASANOPTIONS=detectleaks=1:haltonerror...

CVE-2023-3079

Exploit para CVE-2023-3079 Reconocimiento a @clem1 por encontrar el exploit ITW. Reconocimiento a @alisaesage por su RCA previo sobre el bug. Reconocimiento a @buptsb por sus notas sobre el bug. Recursos Writeups y otros recursos. https://issues.chromium.org/issues/40065138...

CVE-2017-11499

Node.js 特定安全缺陷 常量哈希表种子 CVE-2017-11499 Node.js 曾容易受到哈希洪水远程拒绝服务攻击，因为哈希表种子在 Node.js 的特定发布版本中是常量。这是由于默认启用 V8 快照构建，导致初始随机种子在启动时被覆盖。感谢 Google Project Zero 的 Jann Horn 报告此漏洞。 你可以在此处阅读关于哈希洪水漏洞的一般类别：链接。 在此次更新中，快照已默认禁用。严重依赖 vm.runInNewContext 的代码很可能会遇到性能回归，直到实现更好的解决方案。 这是一个高严重性漏洞，影响所有活跃发布线（4.x、6.x、8.x）以及 7...