#v8 — HitReader

cybersecurity Sep 05, 2026 5 min read

CVE-2026-85046: What the Chromium Sandbox RCE Means

CVE-2026-85046 is a high-severity type-confusion bug in Chrome’s V8 engine that attackers are already exploiting through crafted web pages. Chrome users should update to 152.0.7977.82/.83 or later, while Chromium-based browser users should verify their vendor’s equivalent patch.

by ahsan

#browser security #chrome #chromium #v8 #vulnerability management

web security & privacy Jul 13, 2026 5 min read

Math.tanh OS Fingerprinting After Chromium 148: The Floating-Point Trap

A small V8 change switched `Math.tanh` from a bundled implementation to `std::tanh`, which routes through the host math library. Because transcendental functions can differ by tiny floating-point rounding details, `Math.tanh` can reveal the underlying OS environment after Chromium 148-era updates.

by ahsan

#browser security #chromium #fingerprinting #floating point #v8