Disclosed Chromium Security Bugs

Vulnerability: multiple vulnerabilities affecting GitOnBorg::chromium::chromium::src

#406253208•Reporter: au...@google.com
$0
7/4/2025

CHECK failure: isolate == Isolate::TryGetCurrent() in isolate-inl.h

#406043349•Reporter: 24...@project.gserviceaccount.com
$0
7/4/2025

Heap-buffer-overflow in SkPngCodecBase::createColorTable

#406054655•Reporter: at...@gmail.com
$9,000
7/3/2025

DevTools Recorder Can Flip Internal Flags Without User Awareness

#401927528•Reporter: bi...@gmail.com
$1,000
7/3/2025

UAF when accessing member variable after destruction of throttle (SubframeHistoryNavigationThrottle)

#405140652•Reporter: xp...@gmail.com
$4,000
7/2/2025

Extension popup can render over downloaded file prompts

#367771116•Reporter: sa...@gmail.com
$1,000
7/2/2025

V8 Sandbox Bypass: Uninitialized read to switch-case OOB jump in Maglev JSGeneratorObject allocation inlining

#403600260•Reporter: se...@gmail.com
$25,000
7/2/2025

Vulnerability GHSA-67mh-4wv8-2f99 affecting esbuild in devtools

#404582010•Reporter: fa...@microsoft.com
$0
7/1/2025

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

#407404841•Reporter: 87...@developer.gserviceaccount.com
$0
6/30/2025

tarantool:luaL_loadbuffer_fuzzer: Heap-use-after-free in lj_strfmt_pushvf

#407592872•Reporter: 87...@developer.gserviceaccount.com
$0
6/30/2025
Showing 4661-4670 of 13102 bugs