Disclosed Chromium Security Bugs

DCHECK failure in Handle v8::internal::Cast(Handle, const v8::SourceLocation &) [To = v8

#373703277•Reporter: se...@gmail.com
$55,000
1/26/2025

Type confusion due to DefaultReferenceValue() `undefined` default value for kNoExtern

#372269618•Reporter: se...@gmail.com
$55,000
1/18/2025

Type confusion due to improper WASM module size check in `AsyncStreamingDecoder`

#368241697•Reporter: se...@gmail.com
$55,000
1/2/2025

WASM type confusion due to imported tag signature subtyping

#365802567•Reporter: se...@gmail.com
$55,000
12/25/2024

JSPI stack switching breaks lazy deoptimization guarantees, leading to type confusion

#365376497•Reporter: ma...@gmail.com
$55,000
12/18/2024

Arbitrary WASM type confusion due to incomplete fix of CVE-2024-6100

#360533914•Reporter: se...@gmail.com
$55,000
11/27/2024

MiraclePtr bypass due to PtrCount overflow

#340122160•Reporter: ha...@gmail.com
$100,115
8/23/2024

Security: ChromeOS Persistent root Command Execution

#40093479•Reporter: ro...@rorym.cnamara.com
$75,000
5/1/2019
Showing 51-58 of 58 bugs
1...3456