Blog
Welcome to Tashita’s vulnerability research blog. Here our team publishes in-depth technical analysis of real-world vulnerabilities: browser exploitation, JavaScript engine internals (V8, WebKit, JavaScriptCore), fuzzing techniques, and full exploit walkthroughs from our CVE discoveries. Every post comes from the same research workflow that powers SeekZero, our browser vulnerability research framework.
CVE-2026-6307 (Part 3): Escaping the V8 Sandbox Through WasmFX
Authored by stratan At this point, we are still inside the V8 heap sandbox. CVE-2026-6307 gives us addrof, fakeobj, and in-cage read/write. For native code execution, we need a way out. We'll use Chromium bug 502229895 for that step. WasmFX is still an[...]
CVE-2026-6307 (Part 2): Turbofan JS-to-Wasm Deopt Type Confusion
Authored by stratan In Part 1, we went over the background details that are needed to follow along, as well as the trigger specifics of the bug. In Part 2, we'll go through the relevant code paths, analyze[...]
CVE-2026-6307 (Part 1): Turbofan JS-to-Wasm Deopt Type Confusion
Authored by stratan Summary CVE-2026-6307 is a V8 compiler bug in the metadata used to recover from optimized JS-to-Wasm calls. The upstream regression describes the bug as a missing signature comparison in FrameStateFunctionInfo::operator==. A type confusion in[...]
CVE-2024-44192
CVE Details Apple Safari The issue was addressed with improved checks. This issue is fixed in watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content[...]
Remote: C++ Fuzzer Cybersecurity Developer
About the Job At Tashita Software Security, we specialize in developing advanced applications that are able to find bugs and vulnerabilities in the most widely used global software. We are looking to add a C++ Linux Development specialist[...]
Remote: Full-Stack Web Cybersecurity Developer
About the Job At Tashita Software Security, we specialize in developing advanced applications that are able to find bugs and vulnerabilities in the most widely used global software. We are looking to add a Full-Stack Web Development specialist to[...]