When Flaws Cascade: Understanding Vulnerabilities and Exploitation Chains in JavaScript Engines
The study empirically investigated vulnerabilities across four major JavaScript engines from 2017 to 2024. Researchers created taxonomies for symptoms and root causes, finding that memory safety violations are common. By analyzing trigger chains, the work shows how minor logic errors can escalate into severe security flaws through engine optimizations.