Disclosed Chromium Security Bugs

googlelogoligature ligature can disguise security-sensitive surfaces

#391788835•Reporter: yu...@gmail.com
$15,000
5/16/2025

Bypass :// Characters in Download Security UI lead to Origin Spoofing

#392818696•Reporter: fr...@gmail.com
$500
5/16/2025

Eliminate raw pointers to traceable disallow_new types in fonts code

#391114794•Reporter: se...@chromium.org
$0
5/16/2025

DCHECK failure in index < length_ in vector.h

#394644268•Reporter: 24...@project.gserviceaccount.com
$0
5/16/2025

Heap memory corruption due to overly large parameter count in WasmToJSWrapper tier-up

#394350433•Reporter: se...@gmail.com
$11,000
5/16/2025

V8 Sandbox Bypass: AAW & Control flow hijack via RegExp pattern parse TOCTOU to RegExpCapture OOB

#394635429•Reporter: se...@gmail.com
$20,000
5/16/2025

v8_wasm_compile_wasmgc_fuzzer: Crash in v8::internal::ScavengerCollector::CollectGarbage

#393420199•Reporter: 24...@project.gserviceaccount.com
$0
5/16/2025

heap-use-after-free in content::RenderFrameHostImpl::ProcessBeforeUnloadCompleted in browser process

#391666328•Reporter: 0x...@gmail.com
$5,000
5/15/2025

Stack-buffer-overflow in blink::CssValueKeywordID

#394371771•Reporter: 24...@project.gserviceaccount.com
$0
5/15/2025

V8 Sandbox Bypass: OOB write in AstValueFactory::GetOneByteStringInternal

#392938085•Reporter: v8...@gmail.com
$0
5/15/2025
Showing 4791-4800 of 13102 bugs