Disclosed Chromium Security Bugs

CHECK failure: argument_count_with_receiver <= kMaxUInt16 in js-inlining.cc

#388905056•Reporter: 24...@project.gserviceaccount.com
$0
5/8/2025

V8 sandbox violation in v8::bigint::CopyAndZeroExtend

#392180065•Reporter: 24...@project.gserviceaccount.com
$0
5/8/2025

Trap in Builtins_TestTurbofanType

#390465670•Reporter: 24...@project.gserviceaccount.com
$0
5/7/2025

Extension popup can appear over WebUSB permission prompt

#382540635•Reporter: ch...@gmail.com
$1,000
5/7/2025

heap-use-after-free in ui::AcceleratorManager::AcceleratorTargetInfo::TryProcess

#389750874•Reporter: fa...@gmail.com
$0
5/7/2025

V8 Sandbox Bypass: Control flow hijack via Torque function type corruption

#390639820•Reporter: se...@gmail.com
$20,000
5/7/2025

CHECK failure: !translated_values->IsMaterializedObject() in frames.cc

#391500839•Reporter: 24...@project.gserviceaccount.com
$0
5/7/2025

AddressSanitizer: heap-use-after-free sk_careful_memcpy

#390889644•Reporter: se...@gmail.com
$7,000
5/7/2025

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Crash in decode_close

#394371775•Reporter: 87...@developer.gserviceaccount.com
$0
5/6/2025

GPU process crash via WebGPU compute shader (Linux)

#386565127•Reporter: du...@gmail.com
$15,000
5/6/2025
Showing 4831-4840 of 13102 bugs
1...483484485...1311