Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/jamezx32/cve-2026-85046
Memory ForensicsVulnerability AnalysisExploitationReverse EngineeringWeb SecurityPapers & Research
GitHubjamezx32/cve-2026-85046

CVE-2026-85046

V8 inlined Array.prototype.sort elements-kind confusion - PoC + addrof (N-day research)

View Repository
122 days agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-85046 PoC

  • Commit: v8 b74028b5（漏洞树 = 修复 e0562d87 的父提交）

  • Fix Patch: https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67

  • Engine: V8(漏洞树 = 修复 e0562d87 的父提交 b74028b5)

  • Root Cause: Maglev/TurboFan 内联 Array.prototype.sort 时按"联合元素种类"拷回快照;comparator 里 fill(0) 把种类收窄回 SMI,对象指针写进 Smi 数组(2026-09 在野,BlueMoon kit)

  • Run: ./d8 poc/min.js(免 flags,打印堆偏移即混淆);addrof_check.js 需 --allow-natives-syntax

Files

  • poc/addrof.js
  • poc/addrof_check.js
  • poc/exp2_stage.js
  • poc/min.js
  • poc/regress.js
Download Tool