Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-2441-PoC — Proof-of-concept exploit for CVE-2026-2441, a Chrome CSS Use-After-Free in Blink CSSFontFeatureValuesMap, achieving renderer RCE via V8 addrof/fakeobj and Wasm RWX shellcode execution. | Kitploit
Tools/GitHubGitHub/theemperorspath/cve-2026-2441-poc
Exploit FrameworksVulnerability AnalysisExploitationWeb Application Exploitation
GitHubtheemperorspath/cve-2026-2441-poc

CVE-2026-2441-PoC

Proof-of-concept exploit for CVE-2026-2441, a Chrome CSS Use-After-Free in Blink CSSFontFeatureValuesMap, achieving renderer RCE via V8 addrof/fakeobj and Wasm RWX shellcode execution.

View Repository
6 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-2441-PoC

CVE-2026-2441 PoC Chrome CSS Use-After-Free PoC (Blink CSSFontFeatureValuesMap)

PoC triggering UAF in CSS processing → renderer RCE inside sandbox on Chrome <=144.0.x (all platforms).

Trigger: @font-feature-values + container-query + forced layout recalc via offsetWidth in rAF loop → iterator invalidation frees CSSValue* while still referenced.

Chain summary: CSSOM grooming → UAF reclaim with fake object → vptr overwrite → V8 addrof/fakeobj → arbitrary RW → Wasm RWX page → shellcode execution.

Usage: Host index.html and visit, if you get an Awe Snap error then your browser is vulnerable and you should update immediately as this is being actively exploited in the wild

All credit for original PoC goes to b1gchoi

Download Tool