CVE-2026-9973

HIGH

Google Chrome - Out-of-bounds Write

Title source: rule
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-9973. PoCs published by jaf0rk.

AI-analyzed exploit summary This PoC exploits a V8 type confusion vulnerability (CVE-2026-9973) in the Turbofan optimizer's Wasm Load Elimination phase, allowing arbitrary read/write primitives via crafted WebAssembly code. The exploit achieves sandbox escape by corrupting JavaScript object properties and elements pointers.

Description

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Exploits (1)

github WORKING POC
by jaf0rk · javascriptpoc
https://github.com/jaf0rk/CVE-2026-9973-exploit

This PoC exploits a V8 type confusion vulnerability (CVE-2026-9973) in the Turbofan optimizer's Wasm Load Elimination phase, allowing arbitrary read/write primitives via crafted WebAssembly code. The exploit achieves sandbox escape by corrupting JavaScript object properties and elements pointers.

Classification
Working Poc 98%
Attack Type
Other
Complexity
Complex
Reliability
Reliable
Target: V8 JavaScript engine version 14.8.178.21
No auth needed
Prerequisites: V8 engine compiled with specific flags (--allow-natives-syntax, --enable-object-print) · Target must execute attacker-controlled JavaScript (e.g., via malicious webpage or Node.js script)
mistral-large-3 · analyzed Jul 21, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0028
EPSS Percentile 20.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (2)
google/chrome < 148.0.7778.216
Google/Chrome 148.0.7778.216
Published May 28, 2026
Tracked Since May 29, 2026