EIP-2026-103124

PRE-CVE

Google Chrome 60.0.3080.5 V8 JavaScript Engine - Out-of-Bounds Write

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103124. PoCs published by halbecaf.

AI-analyzed exploit summary This exploit leverages a V8 out-of-bounds write vulnerability (CVE-2017-5053) to achieve arbitrary memory read/write and execute shellcode. It manipulates JavaScript arrays and ArrayBuffers to corrupt memory and overwrite a JSFunction's code entry, leading to RCE.

Description

Google Chrome 60.0.3080.5 V8 JavaScript Engine - Out-of-Bounds Write

Exploits (1)

exploitdb WORKING POC VERIFIED
by halbecaf · javascriptremotelinux
https://www.exploit-db.com/exploits/42078

This exploit leverages a V8 out-of-bounds write vulnerability (CVE-2017-5053) to achieve arbitrary memory read/write and execute shellcode. It manipulates JavaScript arrays and ArrayBuffers to corrupt memory and overwrite a JSFunction's code entry, leading to RCE.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: Google V8 JavaScript Engine (Chromium-based browsers)
No auth needed
Prerequisites: Vulnerable V8 engine version (pre-patch for CVE-2017-5053) · Ability to execute arbitrary JavaScript in the target environment
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026