Yishi|4月 15, 2026 13:26
hey @googlechrome
we reproduced the full post exploitation chain for CVE-2026-3909.
the public PoC only crashed. we were able to turn it into:
• OOB read to arbitrary write
• vtable hijack
• full RCE
affected versions: Chrome < 146.0.7680.80
users on vulnerable versions should update immediately.
from @OneKey_Anzen(Yishi)
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink