Disclosed Chromium Security Bugs

Crash in unsigned short v8::base::ReadUnalignedValue

#396666426•Reporter: 24...@project.gserviceaccount.com
$0
5/31/2025

Debug check failed: index < length_ (2200 vs. 2200).

#397731718•Reporter: ki...@gmail.com
$7,000
5/31/2025

V8 correctness failure in sources: 50

#396485545•Reporter: 24...@project.gserviceaccount.com
$0
5/31/2025

V8 Sandbox Bypass: AAR/W due to length-tracking TypedArray length double fetch

#390201806•Reporter: se...@gmail.com
$20,000
5/31/2025

Tapjacking on Custom Tabs using animations

#376491759•Reporter: ph...@gmail.com
$10,000
5/30/2025

Some Float16Array Built-ins Fail to Account for Side Effects Causing Array OOB Access

#397720949•Reporter: hu...@gmail.com
$11,000
5/30/2025

llvm:llvm-dwarfdump-fuzzer: Use-of-uninitialized-value in llvm::object::COFFObjectFile::initialize

#420740525•Reporter: 87...@developer.gserviceaccount.com
$0
5/28/2025

CHECK failure: Ref construction failed in heap-refs.cc

#396460423•Reporter: 24...@project.gserviceaccount.com
$0
5/28/2025

DCHECK failure in (isolate) != nullptr in isolate-inl.h

#396813147•Reporter: 24...@project.gserviceaccount.com
$0
5/28/2025

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in utf8_in2

#399228595•Reporter: 87...@developer.gserviceaccount.com
$0
5/27/2025
Showing 4751-4760 of 13102 bugs