The Sandbox Held. The Headline Didn't.
A Hacker News headline turned a contained V8 type-confusion bug into 'sandbox RCE in all Chromium versions.' The real story is more interesting: how Chromium's defense-in-depth actually held, why V8 keeps producing this exact bug class, and what the coverage got backwards in both directions.
Sep 7, 202612 min read1 reactions0 comments