Disclosed Chromium Security Bugs

Security: Autofill Exploit Using Custom CSS Cursor

#40065872Reporter: fa...@gmail.com
$2,000
2/6/2024

Security: Heap-use-after-free in lens::OpenLensRegionSearchInstructions

#40075359Reporter: ch...@gmail.com
$1,000
2/6/2024

v8_wasm_fuzzer: DCHECK failure in 1 < group.types.size() in canonical-types.cc

#40075616Reporter: cl...@chromium.org
$0
2/6/2024

Security: arbitrary address access in vrend_renderer_blit_gl

#40072662Reporter: da...@gmail.com
$2,000
2/2/2024

Use-after-poison in cppgc::internal::HeapVisitor::Traverse

#40075636Reporter: cl...@chromium.org
$0
2/2/2024

Use-after-poison in cppgc::internal::MarkingStateBase::MarkAndPush

#40075776Reporter: cl...@chromium.org
$0
2/2/2024

Security: Contextual search selection offsets should be sanitized

#40060256Reporter: jd...@google.com
$0
2/1/2024

chrome.inspectedWindow.eval execution on Web Store with trailing URL dot

#40069571Reporter: ma...@gmail.com
$5,000
2/1/2024

Security: Chrome OS: Multiple controllable OOB write bugs in Qcom camx drivers may cause sandbox escape to kernel

#40069585Reporter: pi...@gmail.com
$0
2/1/2024

Security: Race Condition UAF in virtio_transport_space_update

#40073262Reporter: da...@gmail.com
$2,000
2/1/2024
Showing 3811-3820 of 10706 bugs