Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Google announced the V8 Sandbox, a lightweight in-process sandbox for the V8 JavaScript and WebAssembly engine that isolates V8 heap memory to prevent memory-corruption bugs from affecting the rest of the browser process. The feature, enabled via "v8_enable_sandbox" and planned to be on by default in Chrome 123 across major OSes, requires 64-bit systems and reserves a large virtual address space (currently ~1 TB); benchmarks indicate about a 1% performance overhead.