Curated security research, vulnerabilities, advisories and tools for practitioners.

#chrome

Security coverage tagged chrome.

1.

Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

research | 2026-08-27 00:00 | CVE-2026-7899 | nebusec.ai | original ↗ | #ai-security | #bug-bounty | #rce

2.

CVE-2026-14077: Select Your Own Origin - Spoofing Chrome's Address Bar

vulnerability | Medium | 2026-07-20 11:22 | CVE-2026-14077 | pwn.ai | original ↗ | #ai-security | #vulnerability-research | #browser-security

3.

Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307

vulnerability | High | 2026-06-29 00:00 | CVE-2026-6307 | nebusec.ai | original ↗ | #rce | #vulnerability-research | #browser-security

4.

CVE-2026-11645: Out-of-Bounds Read/Write in V8.

vulnerability | High | Actively exploited | 2026-06-08 00:00 | CVE-2026-11645 | bugpwn.com | original ↗ | #active-exploitation | #rce | #zero-day

5.

How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865

vulnerability | High | 2026-05-07 00:00 | CVE-2026-5865 | nebusec.ai | original ↗ | #rce | #browser-security | #v8

6.

Evolving the Android & Chrome VRPs for the AI Era

blog | 2026-04-30 00:00 | bughunters.google.com | original ↗ | #ai-security | #bug-bounty | #android

7.

Hannibal Stealer vs. Browser Security

blog | 2025-07-18 00:00 | netlas.io | original ↗ | #malware | #browser-security | #chrome

8.

Netlas Chrome and Firefox Extensions

blog | 2025-02-05 00:00 | netlas.io | original ↗ | #firefox | #chrome | #vulnerability-detection

9.

Finding Bugs in Chrome with CodeQL

blog | 2024-11-21 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #chrome | #static-analysis

10.

Chrome VRP Reward Updates to Incentivize Deeper Research

blog | 2024-08-28 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #rce | #memory-corruption

11.

Chaining N-days to Compromise All: Part 1 — Chrome Renderer RCE

vulnerability | 2024-03-17 15:00 | CVE-2023-3079 | theori.io | original ↗ | #rce | #exploit | #v8

12.

A Deep Dive into V8 Sandbox Escape Technique Used in In-The-Wild Exploit

research | 2024-01-25 15:00 | theori.io | original ↗ | #sandbox-escape | #exploit | #v8

13.

Implementing Tic Tac Toe with 170mb of HTML - no JS or CSS

blog | 2023-07-21 14:00 | portswigger.net | original ↗ | #xss | #html | #chrome

14.

Exploiting XSS in hidden inputs and meta tags

research | 2023-07-11 13:00 | portswigger.net | original ↗ | #web-security | #xss | #chrome

15.

Using Hackability to uncover a Chrome infoleak

research | 2022-09-01 13:32 | portswigger.net | original ↗ | #browser-security | #chrome | #same-origin-policy

16.

Bypassing CSP with dangling iframes

research | 2022-06-14 14:00 | portswigger.net | original ↗ | #web-security | #chrome | #iframes

17.

alert() is dead, long live print()

research | 2021-07-05 10:03 | portswigger.net | original ↗ | #xss | #poc | #chrome

18.

Bypassing DOMPurify again with mutation XSS

research | 2020-10-07 15:02 | portswigger.net | original ↗ | #firefox | #web-security | #chrome

19.

Bypassing CSP with policy injection

research | 2020-09-04 14:31 | portswigger.net | original ↗ | #bug-bounty | #portswigger | #chrome

20.

Cleanly Escaping the Chrome Sandbox

research | 2020-04-19 15:00 | theori.io | original ↗ | #use-after-free | #sandbox-escape | #exploit

21.

Abusing Chrome's XSS auditor to steal tokens

research | 2019-06-14 12:02 | portswigger.net | original ↗ | #browser-security | #chrome | #side-channel

22.

Exposing Intranets with reliable Browser-based Port scanning

research | 2018-11-09 14:47 | portswigger.net | original ↗ | #browser-security | #portswigger | #javascript