It requires being able to execute arbitrary code on the machine in userspace. If you have that, most of the time you don't even care about kernel level exploits.
https://nebusec.ai/research/v8-maglev-incorrect-phis-untaggi...
This is the browser part.
Please tell me you are trolling me and not this stupid.