Disclosed Chromium Security Bugs

Security: Heap-use-after-free in BrowsingTopicsServiceImpl::GetBrowsingTopicsStateForWebUi

#40067522Reporter: me...@gmail.com
$2,000
10/24/2023

Security: Heap-use-after-free in ui::PropertyHandler::GetPropertyInternal

#40065894Reporter: ch...@gmail.com
$2,000
10/23/2023

Security: v8 Fatal error in ../../src/objects/tagged-impl-inl.h, line 213

#40067341Reporter: be...@gmail.com
$0
10/23/2023

Security: Debug check failed: !s.InSharedHeap().

#40067485Reporter: wh...@gmail.com
$7,000
10/23/2023

Crash in Builtins_ArrayPrototypeJoin

#40067525Reporter: cl...@chromium.org
$0
10/23/2023

DCHECK failure in page->area_size() >= static_cast(page->live_bytes()) in sweeper.cc

#40067533Reporter: cl...@chromium.org
$0
10/23/2023

Crash in v8::internal::ConcurrentMarking::JobTaskMajor::Run

#40067535Reporter: cl...@chromium.org
$0
10/23/2023

Crash in Builtins_ArrayIteratorPrototypeNext

#40067536Reporter: cl...@chromium.org
$0
10/23/2023

Crash in void v8::internal::String::WriteToFlat

#40067537Reporter: cl...@chromium.org
$0
10/23/2023

Crash in Builtins_KeyedLoadIC

#40067538Reporter: cl...@chromium.org
$0
10/23/2023
Showing 4161-4170 of 10746 bugs