
TFC-Chrome-v8-bug-CVE-2021-38001-poc
Proof-of-concept exploit for CVE-2021-38001, a Chrome V8 JavaScript engine vulnerability, demonstrating remote code execution via crafted .mjs files.

Proof-of-concept exploit for CVE-2021-38001, a Chrome V8 JavaScript engine vulnerability, demonstrating remote code execution via crafted .mjs files.

Proof-of-concept exploit for CVE-2026-85046 in Chrome 152.0.7977.75, demonstrating type confusion in sort() to achieve arbitrary code execution via a…

Proof-of-concept exploit for CVE-2021-21220, a Chrome V8 vulnerability, with references to technical analysis and exploitation details.

Exploit for CVE-2026-11645, a V8 out-of-bounds read/write in Google Chrome allowing remote code execution via crafted HTML pages.

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome SKSL bypass + integer overflow -> OOB write vulnerability I reported to Google in Skia.

FileReader Exploit

High CVE-2024-4761 Exploit

for 供養

Proof-of-concept exploit for CVE-2017-3078, a memory corruption vulnerability in Adobe Flash Player ATF module enabling arbitrary code execution on…

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)

Exploit for CVE-2023-4427 targeting Chrome 117 V8, using many cross-origin iframes to brute-force ASLR and achieve code execution. Provides…

Google Chrome CVE-2026-6307 PoC

This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google…

Reproducer and technical analysis for CVE-2026-85048, a Chrome viz surface use-after-free in the GPU process, with ASAN unit tests and browser…

Proof-of-concept exploit for CVE-2023-3079, a Chrome V8 type confusion vulnerability, with curated writeups and root cause analysis resources.