Disclosed Chromium Security Bugs

V8 sandbox violation in v8::internal::TranslatedState::CreateNextTranslatedValue

#335763881•Reporter: sa...@google.com
$0
7/27/2024

Security: SidePanelContentSwappingContainer Heap-Use-After-Free Vulnerability

#334110479•Reporter: pw...@gmail.com
$1,000
7/27/2024

DCHECK failure in Object::FitsRepresentation(*object, representation) in objects.cc

#335580637•Reporter: 24...@project.gserviceaccount.com
$0
7/27/2024

DCHECK failure in (Asm(). current_block()) == nullptr in graph-builder.cc

#335548148•Reporter: 24...@project.gserviceaccount.com
$0
7/27/2024

CHECK failure: !FieldType::NowStable(field_type) || FieldType::NowContains(field_type, value)

#335704358•Reporter: 24...@project.gserviceaccount.com
$0
7/27/2024

DCHECK failure in !new_map->is_dictionary_map() implies size == object->Size() in js-objects.cc

#335592004•Reporter: 24...@project.gserviceaccount.com
$0
7/27/2024

DCHECK failure in IsNumber(obj) in objects-inl.h

#335592010•Reporter: 24...@project.gserviceaccount.com
$0
7/27/2024

DCHECK failure in IsNull(value) || IsJSProxy(value) || IsWasmObject(value) || (IsJSObject(value) &

#335774293•Reporter: 24...@project.gserviceaccount.com
$0
7/27/2024

DCHECK failure in details.representation().Equals(new_representation) || details.representation().

#335544080•Reporter: 24...@project.gserviceaccount.com
$0
7/27/2024

GPU process crash via WebGPU shader - dynamic_cast exception in DXC

#333420620•Reporter: wg...@gmail.com
$10,000
7/26/2024
Showing 3191-3200 of 10559 bugs
1...319320321...1056