Chromium Security Bugs

heap-use-after-free in content::RenderFrameHostImpl::ProcessBeforeUnloadCompleted in browser process

#391666328•Reporter: 0x...@gmail.com
$5,000
5/15/2025

Stack-buffer-overflow in blink::CssValueKeywordID

#394371771•Reporter: 24...@project.gserviceaccount.com
$0
5/15/2025

V8 Sandbox Bypass: OOB write in AstValueFactory::GetOneByteStringInternal

#392938085•Reporter: v8...@gmail.com
$0
5/15/2025

CHECK failure: MachineRepresentation::kTagged == type.representation() || MachineRepresentation

#394120836•Reporter: 24...@project.gserviceaccount.com
$0
5/15/2025

V8 sandbox violation in v8::internal::wasm::StructTypeBase::field

#394120667•Reporter: 24...@project.gserviceaccount.com
$0
5/15/2025

base_persistent_histogram_allocator_fuzzer: Heap-buffer-overflow in base::PersistentHistogramAllocator::GetHistogram

#393742189•Reporter: 24...@project.gserviceaccount.com
$0
5/14/2025

DCHECK failure in kCanBeWeak || (!IsSmi() == HAS_STRONG_HEAP_OBJECT_TAG(ptr_)) in tagged-impl.h

#393612656•Reporter: 24...@project.gserviceaccount.com
$0
5/14/2025

heap-use-after-free in PrintDialogGtk::~PrintDialogGtk()

#390459306•Reporter: 0x...@gmail.com
$1,000
5/14/2025

Crash in Builtins_WasmToJsWrapperCSA

#393414231•Reporter: 24...@project.gserviceaccount.com
$0
5/14/2025

Segv on unknown address in v8::internal::GlobalizeTracedReference

#393408782•Reporter: 24...@project.gserviceaccount.com
$0
5/14/2025
Showing 171-180 of 8156 bugs
1...171819...816