TLDR Tech / InfoSec
Longinus: 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307
CVE-2026-6307, known as Longinus, is a critical V8 JIT compiler vulnerability in Chrome 106 that enables attackers to bypass the renderer sandbox and V8 heap isolation through a single flaw in TurboFan/Turboshaft inlining, JS-to-Wasm call wrapper canonicalization, and deoptimization FrameState handling. The vulnerability provides arbitrary read/write primitives within the sandboxed heap and allows full remote code execution without memory spraying or chained exploits. Defenders should apply Chrome updates to version 106.0.5249.119 or later and monitor for exploitation attempts targeting V8 JIT components, particularly in rendering contexts.
Read the full story