browser-exploitation

March 8, 20226 min read

CVE-2021-30632: Chrome V8 Type Confusion -> RCE

Analysis of a type confusion vulnerability caused by a missing global-property Map stability check in V8's TurboFan JIT, plus a Windows RCE exploit

March 9, 20216 min read

Analysis of CVE-2021-26411, a UAF vulnerability in the Internet Explorer JavaScript engine that the Lazarus Group exploited in real-world attacks

June 1, 201912 min read

A step-by-step breakdown of a V8 OOB exploit: type confusion, addrOf/fakeObj primitives, and WASM RWX shellcode execution