EIP-2026-103433

PRE-CVE

Chrome V8 - 'TranslatedState::MaterializeCapturedObjectAt' Type Confusion

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103433. PoCs published by Google Security Research.

AI-analyzed exploit summary This PoC exploits a type confusion vulnerability in V8's handling of JS iterators, where objects share properties incorrectly due to uncached object creation. It demonstrates arbitrary memory corruption via property manipulation.

Description

Chrome V8 - 'TranslatedState::MaterializeCapturedObjectAt' Type Confusion

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · javascriptdosmultiple
https://www.exploit-db.com/exploits/44180

This PoC exploits a type confusion vulnerability in V8's handling of JS iterators, where objects share properties incorrectly due to uncached object creation. It demonstrates arbitrary memory corruption via property manipulation.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: V8 JavaScript Engine (Chromium-based browsers, Node.js)
No auth needed
Prerequisites: V8 engine with the specific vulnerability present
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026