Skip to content
How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865
nebusec.ai | vulnerability | High | CVE-2026-5865 | #rce | #browser-security | #v8 | #chrome | #nebusec | #maglev | #cve-2026-5865 | #write-barrier
Summary
NebuSec explains CVE-2026-5865: an omitted write barrier in V8's Maglev compiler lets the garbage collector miss an object, yielding fakeobj and RCE against Chrome.
- CVSS
- 8.8
- Published
- Collected