Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2023-3079] Chaining N-days to Compromise All: Part 1 — Chrome Renderer RCE

theori.io | vulnerability | CVE-2023-3079 | #rce | #exploit | #v8 | #chrome | #type-confusion | #cve-2023-3079

Summary

The opener in the chain series: a detailed analysis of CVE-2023-3079, a V8 type-confusion bug exploited for Chrome renderer RCE, from inline caches to a The Hole leak and OOB access.
Published
Collected

original ↗

Related coverage

  1. Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon (nebusec.ai)
  2. Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307 (nebusec.ai)
  3. CVE-2026-11645: Out-of-Bounds Read/Write in V8. (bugpwn.com)
  4. How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865 (nebusec.ai)
  5. A Deep Dive into V8 Sandbox Escape Technique Used in In-The-Wild Exploit (theori.io)
  6. Patch Gapping a Safari Type Confusion (theori.io)

back