Disclosed Chromium Security Bugs

when a page go to blob:url.com which have title google.com it will show in pip mode

#353858776Reporter: bh...@gmail.com
$500
10/30/2024

Webtransport session close crashes browser tab

#352872238Reporter: ma...@googlemail.com
$7,000
10/30/2024

UAF in dawn::wire::client::Device::HandleError

#352610611Reporter: em...@gmail.com
$8,000
10/30/2024

heap-use-after-free : ash::ChildPolicyObserver::~ChildPolicyObserver

#40941810Reporter: cr...@system.gserviceaccount.com
$0
10/30/2024

TINT_ASSERT(to != nullptr) in src/tint/lang/wgsl/resolver/uniformity.cc:157

#353034820Reporter: de...@gmail.com
$10,000
10/29/2024

AddressSanitizer: heap-use-after-free on [SharingCoordinator start]

#353552540Reporter: li...@gmail.com
$11,000
10/29/2024

DCHECK failure in type_ == kDefault in maglev-ir.h

#353877558Reporter: 24...@project.gserviceaccount.com
$0
10/29/2024

Segv on unknown address in vk::DeviceMemory::freeBuffer

#327667165Reporter: 24...@project.gserviceaccount.com
$0
10/28/2024

Crash in marl::Scheduler::Worker::runUntilShutdown

#41486575Reporter: cl...@chromium.org
$0
10/27/2024

Segv on unknown address in gpu::raster::GrCacheController::ScheduleGrContextCleanup

#41485972Reporter: cl...@chromium.org
$0
10/27/2024
Showing 2811-2820 of 10546 bugs