PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307

nebusec.ai | vulnerability | High | CVE-2026-6307 | #rce | #vulnerability-research | #browser-security | #jit | #sandbox-escape | #v8 | #chrome | #nebusec | #cve-2026-6307
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

NebuSec details CVE-2026-6307 (Longinus): a single V8 TurboFan bug yields arbitrary read/write in the heap sandbox and escapes it to write outside, piercing Chrome's renderer.
CVE
CVE-2026-6307
CVSS
8.8
Published
Collected

Related coverage

High · vulnerability · nebusec.ai
How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865
NebuSec explains CVE-2026-5865: an omitted write barrier in V8's Maglev compiler lets the garbage collector miss an object, yielding fakeobj and RCE against Chrome.
High · vulnerability · nebusec.ai
IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT
A JIT miscompilation reaches arbitrary code execution in the Firefox content process and also affects Tor Browser, underscoring the residual risk in heavily audited JavaScript engines.
research · nebusec.ai
Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon
This research reveals deep compiler-level optimization pitfalls in modern JIT/WASM engines that lead to renderer sandbox escapes.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
Medium · vulnerability · pwn.ai
CVE-2026-14077: Select Your Own Origin - Spoofing Chrome's Address Bar
pwn.ai's CVE-2026-14077: an HTML select positioned partly above the viewport let a page draw native UI over Chrome's toolbar, spoofing the omnibox for a convincing fake download flow.
vulnerability · hacktron.ai
CVE-2022-23597: Remote code execution on Element Desktop
Full RCE on Element Desktop achieved by chaining iframe injection, Electron misconfigurations, and a V8 exploit to escape the sandbox and reach Node.js APIs from a compromised subframe.
Back