Disclosed Chromium Security Bugs

Permission element inner div with style -webkit-text-stroke-width: thick;font-weight: bolder; can be abused if no element in the parent chain has any -webkit-text-stroke-width: thick;font-weight: bolder; are set.

#429440615Reporter: sa...@gmail.com
$0
10/15/2025

DCHECK failure in (thread_graph_labeller) == nullptr in maglev-graph-labeller.cc

#429645383Reporter: 24...@project.gserviceaccount.com
$0
10/15/2025

CHECK failure: ValueRepresentationIs(input->properties().value_representation(), NodeT::kInputT

#430125749Reporter: 24...@project.gserviceaccount.com
$0
10/15/2025

DCHECK failure in base::FPU::GetFlushDenormals() == isolate->flush_denormals() in local-isolate.cc

#429761781Reporter: 24...@project.gserviceaccount.com
$0
10/15/2025

quickjs:fuzz_compile: Use-of-uninitialized-value in JS_DefineProperty

#449772271Reporter: 87...@developer.gserviceaccount.com
$0
10/12/2025

blink_gif_decoder_fuzzer: CHECK failure: frame.GetStatus() == ImageFrame::kFrameInitialized || frame.GetStatus() == Image

#428754691Reporter: 24...@project.gserviceaccount.com
$0
10/12/2025

libwebp:advanced_api_fuzzer@AdvancedApi.AdvancedApiTest: Crash in RescalerImportRowExpand_SSE2

#449781448Reporter: 87...@developer.gserviceaccount.com
$0
10/11/2025

libwebp:advanced_api_fuzzer@AdvancedApi.AdvancedApiTest: Heap-buffer-overflow in ProcessRows

#447845730Reporter: 87...@developer.gserviceaccount.com
$0
10/11/2025

libwebp:advanced_api_fuzzer@AdvancedApi.AdvancedApiTest: Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2

#447958064Reporter: 87...@developer.gserviceaccount.com
$0
10/11/2025

Permission element inner div with style text-emphasis:꧁; and text-emphasis-position: over right; can be abused if no element in the parent chain has any text-emphasis:꧁; and text-emphasis-position: over right; are set.

#428455319Reporter: sa...@gmail.com
$1,000
10/11/2025
Showing 1271-1280 of 10181 bugs