Disclosed Chromium Security Bugs

chrome_tint_wgsl_fuzzer_ChromiumTintWgslTest_CanConvertWgslToIRWithoutCrashing_fuzzer: Crash in re2::Balinese_range16

#403308736•Reporter: 24...@project.gserviceaccount.com
$0
6/26/2025

DCHECK failure in IsJSFunction(*callable) implies !Cast(*callable)->shared()->is_scrip

#403364367•Reporter: 24...@project.gserviceaccount.com
$0
6/25/2025

intent:// can bypass fido:/ URI bock (see: 370482421)

#401823929•Reporter: Si...@rawet.se
$2,000
6/25/2025

The maglev-pretenure-store-values feature leads to bypass of write barrier check

#400584607•Reporter: hu...@gmail.com
$10,000
6/25/2025

DCHECK failure in ((static_cast(tagged_value) & ::i::kSmiTagMask) == ::i::kSmiTag) in

#403641209•Reporter: 24...@project.gserviceaccount.com
$0
6/24/2025

harfbuzz:hb-draw-fuzzer: Use-of-uninitialized-value in CFF::cff2_cs_opset_t

#405454658•Reporter: 87...@developer.gserviceaccount.com
$0
6/23/2025

unicorn:fuzz_emu_x86_32: Crash in pcmpxstrx

#406054619•Reporter: 87...@developer.gserviceaccount.com
$0
6/23/2025

assimp:assimp_fuzzer: Heap-use-after-free in aiScene::~aiScene

#405487714•Reporter: 87...@developer.gserviceaccount.com
$0
6/23/2025

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit

#405487711•Reporter: 87...@developer.gserviceaccount.com
$0
6/23/2025

UAF in net::HttpStreamPool::Group::ProcessPendingRequest

#399995424•Reporter: 0x...@gmail.com
$10,000
6/22/2025
Showing 4681-4690 of 13102 bugs
1...468469470...1311