Disclosed Chromium Security Bugs

lightweight-heap-use-after-free : content::WebContentsImpl::ExitFullscreenMode

#40947201•Reporter: cr...@system.gserviceaccount.com
$0
4/13/2024

Security: heap-use-after-free on extensions::WarningService::Observer

#41488087•Reporter: my...@gmail.com
$0
4/13/2024

Security: Debug check failed: inlinee.sig->return_count() == sig->return_count() . in v8

#41484431•Reporter: je...@gmail.com
$11,000
4/12/2024

open_type_math_support_fuzzer: Crash in tt_face_get_colr_glyph_paint

#40945818•Reporter: cl...@chromium.org
$0
4/11/2024

DCHECK failure in is_loadable() in maglev-ir.h

#41486195•Reporter: cl...@chromium.org
$0
4/11/2024

pcapplusplus:FuzzTarget: Segv on unknown address in pcpp::IPv6Layer::~IPv6Layer

#42534373•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
4/11/2024

Security: container-overflow in FileSystemAccessManagerImpl::DidCleanupAccessHandleCapacityAllocation

#41486859•Reporter: vu...@darknavy.com
$21,000
4/10/2024

Security: Stack-buffer-underflow in DataPack::GetStringPieceFromOffset when loading a malicious theme

#40945515•Reporter: re...@gmail.com
$6,000
4/10/2024

Security: UI spoofing for external protocol dialogues via iframe srcdoc on the malicious site

#40060490•Reporter: ha...@gmail.com
$1,000
4/10/2024

Improper handling of duplicate `` and `` tags enables CSP nonce leakage

#41485789•Reporter: fe...@gmail.com
$3,000
4/5/2024
Showing 3501-3510 of 10574 bugs
1...350351352...1058