
Curated collection of V8 sandbox escape, bypass, and violation reports with issue tracker links, articles, papers, slides, and design documents for advanced browser exploitation research.
A collection of links related to V8 sandbox VR and exploitation
2023: "issue id: 40940623, V8 Sandbox escape due to coarse type-checking for Foreigns"
2024: "issue id: 42204606, Mitigate sandbox escapes in RegExp"
2024: "issue id: 336507783, V8 Sandbox: Prevent Wasm-based sandbox escapes "
2024: "issue id: 327732554, V8 sandbox violation in v8::internal::Builtins::code"
2024: "issue id: 328692018, V8 sandbox violation in v8::bigint::Digits::read_4byte_aligned"
2024: "issue id: 328858270, V8 sandbox violation in v8::internal::GetBailoutReason"
2024: "issue id: 332475841, V8 sandbox violation in v8::internal::ElementsKindToString"
2024: "issue id: 41487854, V8 sandbox violation in Builtins_StarWideHandler"
2024: "issue id: 323736727, V8 sandbox violation in Builtins_DeoptimizationEntry_Eager"
2024: "issue id: 323694399, V8 sandbox violation in Builtins_DeoptimizationEntry_Eager"
2024: "issue id: 323696394, V8 sandbox violation in Builtins_DeoptimizationEntry_Eager"
2024: "issue id: 323690010, V8 sandbox violation in Builtins_DeoptimizationEntry_Eager"
2024: "issue id: 327550517, V8 sandbox violation in v8::internal::ArrayBufferSweeper::Detach"
2024: "issue id: 324343442, V8 sandbox violation in v8::internal::SemiSpace::FixPagesFlags"
2024: "issue id: 326109866, Use-after-poison in v8::internal::compiler::MapData::instance_type"
2024: "issue id: 327827222, V8 sandbox violation in v8::internal::ConcurrentMarking::RunMajor"
2024: "issue id: 330385840, V8 sandbox violation in v8::internal::Code::kind"
2024: "issue id: 330404819, V8 Sandbox escape via regexp"
2024: "issue id: 330563095, WebCodecs VideoFrame Race Condition UAF Write to RCE" by Seunghyun Lee(@0x10n) [Pwn2Own 2024]
2024: "issue id: 331036491, V8 sandbox violation in icu_73::Locale::getBaseName"
2024: "issue id: 331042216, V8 sandbox violation in v8::internal::LazyCreateDateIntervalFormat"
2024: "issue id: 333065495, V8 sandbox violation in v8::internal::MemoryChunkMetadata::heap"
2024: "issue id: 335544065, V8 sandbox violation in Builtins_DeoptimizationEntry_Eager"
2024: "issue id: 335322609, V8 sandbox violation in v8::internal::maglev::CapturedObject::set"
2024: "issue id: 335810507, V8 sandbox violation in v8::internal::ToLatin1Lower"
2024: "issue id: 336648007, V8 sandbox violation in v8::internal::maglev::CapturedObject::set"