Disclosed Chromium Security Bugs

Extensions can run JS on any priveledged origin by using chrome.devtools.inspectedWindow.reload and crashing the page

#341136300•Reporter: ad...@gmail.com
$0
9/25/2024

GPU process crash via WebGPU shader - UAF in combineInstructionsOverFunction at InstructionCombining.cpp:3008

#342545100•Reporter: wg...@gmail.com
$10,000
9/25/2024

DCHECK failure in ArrayBufferExtension::Age::kYoung == extension->age() in js-array-buffer.cc

#347804251•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

GPU process crash via WebGPU shader - UAF in RecursivelyDeleteTriviallyDeadInstructions at Transforms\Utils\Local.cpp:368

#345993680•Reporter: wg...@gmail.com
$10,000
9/25/2024

DCHECK failure in old_details.representation().IsCompatibleForLoad( root_details.representation())

#346411875•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

CHECK failure: representation_.Equals(owner->instance_descriptors(isolate) ->GetDetails(descrip

#347055166•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

CHECK failure: function->closure_feedback_cell_array()->length() == function->shared()->feedbac

#347141372•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

MemorySanitizer: use-of-uninitialized-value in v8::internal::maglev::Phi::RecordUseReprHint()

#346686148•Reporter: dc...@chromium.org
$0
9/24/2024

DCHECK failure in HasFeedbackMetadata() in shared-function-info-inl.h

#346389916•Reporter: 24...@project.gserviceaccount.com
$0
9/22/2024

browser_accessibility_fuzzer: Heap-use-after-free in content::BrowserAccessibilityStateImpl::UpdateAccessibilityActivityTask

#345562940•Reporter: 24...@project.gserviceaccount.com
$0
9/21/2024
Showing 2991-3000 of 10559 bugs
1...299300301...1056