Research

Research

  • Fuzzing Complex JavaScript Structures

    Building complex programs without losing the research goal

    Finding the Unexpected The basic idea behind a JavaScript engine fuzzer is very simple: generate programs that the engine does not expect to execute. The difficult part[...]

  • CVE-2026-11645
    V8 Vulnerability Exploited in the Wild

    SeekZero Mutation Plans to Explore a Type Confusion

    The vulnerability and its fix The CVE-2026-11645 vulnerability in Google Chrome's V8 JavaScript engine was caused by an inconsistent transition of an object's Map. In V8, the Map[...]

  • AI Browser Vulnerability Research

    Part 2
    Teaching an LLM to Find Browser Bugs

    A large language model can understand and analyze a browser's source code. If the model is trained on patterns from known vulnerabilities, it can even detect bugs given the[...]

  • AI Browser Vulnerability Research

    Part 1
    The Rise of AI-Driven Browser Vulnerability Research

    Vulnerability research in JavaScript engines needs to keep evolving to remain effective in a context increasingly influenced by AI. LLMs can work alongside the researcher when they are[...]

  • CVE-2026-6307 (Part 3): Escaping the V8 Sandbox Through WasmFX

    At this point, we are still inside the V8 heap sandbox. CVE-2026-6307 gives us addrof, fakeobj, and in-cage read/write. For native code execution, we need a way out. We'll use Chromium bug 502229895 for[...]

  • CVE-2026-6307 (Part 2): Turbofan JS-to-Wasm Deopt Type Confusion

    In Part 1, we went over the background details that are needed to follow along, as well as the trigger specifics of the bug. In Part 2, we'll go[...]

Card reading Contact Us on a folder next to a phone and laptop.

Get in Touch with Us

Find all our contact information here. Reach out via email or connect with us on LinkedIn for inquiries, consultations, or to learn more about our services.

Our Email
info@tashita.net
Our PGP
Download PGP
Our Social Links

Get in Touch with Us

Find all our contact information here. Reach out via email or connect with us on LinkedIn for inquiries, consultations, or to learn more about our services

Our Email
info@tashita.net
Our PGP
Download PGP
Our Social Links