Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307

nebusec.ai | vulnerability | High | CVE-2026-6307 | #rce | #vulnerability-research | #browser-security | #jit | #sandbox-escape | #v8 | #chrome | #nebusec | #cve-2026-6307

Summary

NebuSec details CVE-2026-6307 (Longinus): a single V8 TurboFan bug yields arbitrary read/write in the heap sandbox and escapes it to write outside, piercing Chrome's renderer.
CVSS
8.8
Published
Collected

original ↗

Related coverage

  1. How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865 (nebusec.ai)
  2. IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT (nebusec.ai)
  3. Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon (nebusec.ai)
  4. A Deep Dive into V8 Sandbox Escape Technique Used in In-The-Wild Exploit (theori.io)
  5. Chaining N-days to Compromise All: Part 1 — Chrome Renderer RCE (theori.io)
  6. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)

back