Disclosed Chromium Security Bugs

Heap-use-after-free in FcConfigGetPrgname

#422223481Reporter: 24...@project.gserviceaccount.com
$0
9/11/2025

tinyusb:msc: Null-dereference READ in ubsan_GetStackTrace

#440811025Reporter: 87...@developer.gserviceaccount.com
$0
9/10/2025

quickjs:fuzz_compile: Heap-buffer-overflow in JS_CallInternal

#429330008Reporter: 87...@developer.gserviceaccount.com
$0
9/10/2025

DCHECK failure in (isolate)->has_exception() in js-duration-format.cc

#412149700Reporter: 24...@project.gserviceaccount.com
$0
9/10/2025

V8 Sandbox Bypass: AAW via clobbered i32 high word on return value in Liftoff

#421403261Reporter: se...@gmail.com
$20,000
9/10/2025

CHECK failure: !v8::internal::v8_flags.enable_slow_asserts.value() || (checksum_ == kChecksumVe

#421227542Reporter: 24...@project.gserviceaccount.com
$0
9/10/2025

page_load_in_process_fuzzer: Heap-use-after-free in skif::MakeRasterBackend

#421629753Reporter: 24...@project.gserviceaccount.com
$0
9/9/2025

V8 correctness failure in sources: 35

#420464880Reporter: 24...@project.gserviceaccount.com
$0
9/9/2025

DCHECK failure in use_count_ > 0 in maglev-ir-inl.h

#421467453Reporter: 24...@project.gserviceaccount.com
$0
9/9/2025

DCHECK failure in length * sizeof(double) == byte_length in runtime-typedarray.cc

#421228429Reporter: 24...@project.gserviceaccount.com
$0
9/9/2025
Showing 2101-2110 of 10875 bugs