Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-0899] CHECK Removed, Context Confused, Checkmate Achieved

starlabs.sg | research | CVE-2026-0899 | #vulnerability-research | #v8 | #chrome | #out-of-bounds | #exploit-development | #patch-analysis | #cve-2026-0899

Summary

The authors reverse-engineered Chrome's January 2026 fix for CVE-2026-0899, an out-of-bounds access in V8, built a trigger PoC, and defeated a stubborn CHECK to reach arbitrary read/write.
CVE
CVE-2026-0899
Published
Collected

original ↗

Related coverage

research · starlabs.sg
[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.
research · starlabs.sg
When AI Makes 0-Days Feel Like N-Days
The author used AI to find a UAF bug in Linux net/sched and built an LPE exploit for CentOS 9 at TyphoonPwn 2026. AI sped things up, but deep subsystem knowledge still mattered.
research · starlabs.sg
Old Bug, Harder Rules : Exploiting CVE-2023-36802 Without the Usual Shortcuts
Exploiting CVE-2023-36802, a type confusion in Microsoft's mskssrv.sys driver, without the usual shortcuts: no NtQuery* leaks or PreviousMode read/write, only what works under current mitigations.
research · starlabs.sg
[CVE-2026-34621] Three Bugs Walk Into a PDF: Prototype Pollution, Served Cold
In April 2026, Adobe fixed three chained prototype pollution bugs in Acrobat (CVE-2026-34621/34622/34626) letting malicious PDFs execute code and leak data, with in-the-wild exploitation reported.
research · nebusec.ai
Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon
This research reveals deep compiler-level optimization pitfalls in modern JIT/WASM engines that lead to renderer sandbox escapes.
research · projectzero.google
[CVE-2014-3196] Did the “Man With No Name” Feel Insecure?
A Google Project Zero post on CVE-2014-3196, a Windows Chrome bug fixed in M38 that served as an early link in a potential exploit chain.
back