Disclosed Chromium Security Bugs

Heap-use-after-free in ShortcutsBackend::AddOrUpdateShortcut

#393404266•Reporter: 24...@project.gserviceaccount.com
$0
5/12/2025

WasmCode "resurrection" using the WasmImportWrapperCache can lead to JIT allocation UaF, causing memory corruption

#391907159•Reporter: ma...@popax21.dev
$55,000
5/10/2025

V8 Sandbox Bypass: UAF in ValueSerializer::WriteRawBytes

#392541992•Reporter: v8...@gmail.com
$5,000
5/10/2025

URL Spoof via intent

#329890199•Reporter: nd...@protonmail.com
$0
5/10/2025

UAF in chrome::CloseAllBrowsers() with popin

#388400226•Reporter: ha...@gmail.com
$1,000
5/10/2025

Segv on unknown address in v8::internal::GlobalizeTracedReference

#393170056•Reporter: 24...@project.gserviceaccount.com
$0
5/10/2025

V8 correctness failure in sources: 18

#392660676•Reporter: 24...@project.gserviceaccount.com
$0
5/10/2025

ffmpeg:ffmpeg_dem_MOV_fuzzer: Use-of-uninitialized-value in ff_data_to_hex

#394990189•Reporter: 87...@developer.gserviceaccount.com
$0
5/9/2025

Information Leak via Out-of-Bounds Read in media::AudioBuffer

#392375312•Reporter: bl...@gmail.com
$2,000
5/9/2025

V8 Sandbox Bypass: Potential memory corruption due to BytecodeGenerator asyncness inconsistency

#390993097•Reporter: se...@gmail.com
$5,000
5/9/2025
Showing 1971-1980 of 10189 bugs
1...197198199...1019