Disclosed Chromium Security Bugs

UAP due to largearray and removechild()

#390633126•Reporter: da...@gmail.com
$2,000
5/13/2025

Heap-buffer-overflow in SkDraw::drawFixedVertices

#379776579•Reporter: 24...@project.gserviceaccount.com
$0
5/13/2025

bloaty:fuzz_target: Stack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffix

#395959258•Reporter: 87...@developer.gserviceaccount.com
$0
5/12/2025

Heap-use-after-free in ShortcutsBackend::AddOrUpdateShortcut

#393404266•Reporter: 24...@project.gserviceaccount.com
$0
5/12/2025

WasmCode "resurrection" using the WasmImportWrapperCache can lead to JIT allocation UaF, causing memory corruption

#391907159•Reporter: ma...@popax21.dev
$55,000
5/10/2025

V8 Sandbox Bypass: UAF in ValueSerializer::WriteRawBytes

#392541992•Reporter: v8...@gmail.com
$5,000
5/10/2025

URL Spoof via intent

#329890199•Reporter: nd...@protonmail.com
$0
5/10/2025

UAF in chrome::CloseAllBrowsers() with popin

#388400226•Reporter: ha...@gmail.com
$1,000
5/10/2025

Segv on unknown address in v8::internal::GlobalizeTracedReference

#393170056•Reporter: 24...@project.gserviceaccount.com
$0
5/10/2025

V8 correctness failure in sources: 18

#392660676•Reporter: 24...@project.gserviceaccount.com
$0
5/10/2025
Showing 4811-4820 of 13102 bugs
1...481482483...1311