VictorNS69/CVE-2024-12381

PoC

CVE-2024-12381 is a WebAssembly type canonicalization vulnerability in Chrome's V8 engine where `CanonicalEquality::EqualValueType()` fails to account for nullability in indexed reference types. Combined with a JSPI-based V8 sandbox bypass (CVE-2024-12692), this allows remote code execution.

view exploit source poc_in_githubauthor VictorNS69published 2026-05-22catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-12381UShigh8.8Exploit
Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan