Exploitation Summary
EIP tracks 3 public exploits for CVE-2026-5865. PoCs published by adminlove520, Crihexe, XZ1r0.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-5865, targeting a V8 JavaScript engine vulnerability. The exploit leverages type confusion and memory corruption to achieve arbitrary read/write primitives, ultimately leading to remote code execution via WebAssembly manipulation.
Description
Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Exploits (3)
This repository contains a functional exploit for CVE-2026-5865, targeting a V8 JavaScript engine vulnerability. The exploit leverages type confusion and memory corruption to achieve arbitrary read/write primitives, ultimately leading to remote code execution via WebAssembly manipulation.
This is a functional exploit PoC for CVE-2026-5865 targeting a V8 JavaScript engine vulnerability. It demonstrates a type confusion attack to achieve arbitrary read/write primitives, leading to potential remote code execution (RCE).
This repository contains a functional exploit for CVE-2026-5865, targeting a V8 JavaScript engine vulnerability. The exploit leverages type confusion and memory corruption to achieve arbitrary read/write primitives, ultimately leading to remote code execution via WebAssembly manipulation.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H