Exploitation Summary
EIP tracks 3 public exploits for CVE-2026-6307. PoCs published by amnsecurity, 0xsha, J4ck3LSyN-Gen2.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2026-6307, a type confusion vulnerability in Chrome V8's Turbofan JIT compiler. The exploit demonstrates how incorrect type assumptions in optimized JavaScript code can lead to sandbox escape, with conceptual JavaScript payloads for triggering the vulnerability.
Description
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Exploits (3)
This repository contains a proof-of-concept exploit for CVE-2026-6307, a type confusion vulnerability in Chrome V8's Turbofan JIT compiler. The exploit demonstrates how incorrect type assumptions in optimized JavaScript code can lead to sandbox escape, with conceptual JavaScript payloads for triggering the vulnerability.
This repository contains a functional exploit for CVE-2026-6307, a V8 JS-to-Wasm type confusion vulnerability in Chrome 146. It includes both flag-free primitives and a full RCE demonstration (e.g., popping xcalc) with detailed technical explanations and verification steps.
This repository contains a functional Proof-of-Concept (PoC) for CVE-2026-6307, a type confusion vulnerability in V8's TurboFan compiler. The exploit demonstrates arbitrary read/write primitives (addrof/fakeobj) via JS-to-Wasm call inlining and FrameState merging, enabling remote code execution in Chrome's renderer process.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H