Disclosed Chromium Security Bugs
←Back to DashboardV8 correctness failure in sources: 31
$0
8/22/2024
DCHECK failure in values_[index] != builder()->jsgraph()->OptimizedOutConstant() in bytecode-graph
$0
8/22/2024
use-after-free at browser_user_education_service.cc:120
$2,000
8/21/2024
Security: heap-use-after-free in blink::internal::IdleRequestCallbackWrapper::TimeoutFired
$8,000
8/21/2024
Check failed: !v8::internal::v8_flags.enable_slow_asserts.value() || (IsJSObject_NonInline(*this)).
$0
8/21/2024
DCHECK failure in AllowGarbageCollection::IsAllowed() in parked-scope-inl.h
$0
8/21/2024
DCHECK failure in owner == interpreter::Register::current_context() || (is_exception_handler() &&
$0
8/21/2024
UAF in ParseDarkColorOverride
$7,000
8/20/2024
RCE in V8 maglev
$7,000
8/20/2024
GPU process crash via WebGPU shader - OOB in WriteInstruction at BitcodeWriter.cpp:1720
$10,000
8/20/2024