Comment by krackers

5 hours ago

It mentions a type confusion in V8. Is it possible to trigger that without JS enabled?

The "all chromium versions" part of the title is also misleading, most browser CVEs do not distinguish between "untested lower bound" vs "affects all" (even though it seems like it'd be trivial to bisect).