Longinus: Two Security Boundaries in One Bug — Piercing Chrome’s Renderer and the V8 Sandbox with CVE-2026-6307
Original text: “Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307” — Nebula Security, NebuSec (June 29, 2026). Code, tables and figures below are reproduced verbatim with attribution captions.
Executive Summary
CVE-2026-6307 is a single V8 vulnerability that crosses two security boundaries at once. The root cause…
https://core-jmp.org/2026/07/cve-2026-6307-v8-framestate-type-confusion/

5July 30, 2026 7.9K 33