Preliminary research
Zero to Calc in Six Days: Inside XBOW’s Chrome Full Chain
AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.
A Chrome exploit chain crosses the V8 cage and renderer sandbox by violating three immutability assumptions. Maglev shares a mutable number, transferred WebP bytes outlive cached geometry, and a freeze-exempt thread turns Crashpad's short-read retry into a heap overflow. The article explains the interfaces and mitigation-aware native call path joining the stages.
Record
- Researcher
- Brendan Dolan-Gavitt
- Published by
- XBOW Labs
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Brendan Dolan-Gavitt, first published at the original source. Preserved copies are kept so the citation survives its host.