Longinus (CVE‑2026‑6307) cracks Chrome’s sandbox in one bug
A type‑confusion bug in V8’s TurboFan JIT compiler gives attackers arbitrary read/write inside the V8 heap sandbox and an automatic escape to the renderer process. The flaw spans Chrome 106 and survives four years of patches, turning a single exploit into full‑system code execution.