Disclosed Chromium Security Bugs

JIT type confusion via corrupted inlining metadata

#430572435•Reporter: fa...@gmail.com
$7,000
10/24/2025

UAF in content::protocol::InputHandler::InputInjector::InjectMouseEvent through DevTools

#430635213•Reporter: xu...@gmail.com
$1,000
10/24/2025

Use-after-poison in content::RenderFrameImpl::BeginNavigation

#432058938•Reporter: 24...@project.gserviceaccount.com
$0
10/24/2025

Range::extractContents() causes use-after-tree with list-item

#40091415•Reporter: cl...@chromium.org
$0
10/24/2025

Security: Debug check failed: (value) != nullptr

#40062905•Reporter: wh...@gmail.com
$0
10/24/2025

libjxl:djxl_fuzzer: Global-buffer-overflow in void jxl::N_SSE4::WriteToOutputStage::StoreUnsignedRow

#450328034•Reporter: 87...@developer.gserviceaccount.com
$0
10/23/2025

php:php-fuzz-parser: Heap-use-after-free in destroy_op_array

#454273637•Reporter: 87...@developer.gserviceaccount.com
$0
10/22/2025

openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time

#454142200•Reporter: 87...@developer.gserviceaccount.com
$0
10/22/2025

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in std::__1::pair arrow::util::R

#454097865•Reporter: 87...@developer.gserviceaccount.com
$0
10/22/2025

openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time

#454161152•Reporter: 87...@developer.gserviceaccount.com
$0
10/22/2025
Showing 4071-4080 of 13102 bugs
1...407408409...1311