Disclosed Chromium Security Bugs

DCHECK failure in node_mapping_[node].valid() in maglev-graph-building-phase.cc

#383854202•Reporter: sa...@google.com
$0
3/25/2025

media_metadata_parser_fuzzer: Heap-buffer-overflow in mov_read_moof

#384115677•Reporter: 24...@project.gserviceaccount.com
$0
3/24/2025

video_capture_host_mojolpm_fuzzer: Heap-use-after-free in base::RepeatingCallback

#382135228•Reporter: 24...@project.gserviceaccount.com
$0
3/23/2025

Incorrect implementation of the fast path in Object.assign() lead to memory corruption.

#383647255•Reporter: hu...@gmail.com
$20,000
3/23/2025

webnn_graph_mojolpm_fuzzer: Crash in tflite::impl::InterpreterBuilder::ParseTensors

#383373317•Reporter: 24...@project.gserviceaccount.com
$0
3/23/2025

DCHECK failure in TranslatedValue::kAllocated == child_slot->materialization_state() in translated

#383397477•Reporter: 24...@project.gserviceaccount.com
$0
3/22/2025

DedicatedOrSharedWorkerFetchContextImpl::accept_languages_watcher_ is a raw_ptr... to a GarbageCollected class

#379869752•Reporter: cd...@chromium.org
$0
3/21/2025

DCHECK failure in mutable_heap_number->IsHeapNumber() in maglev-graph-builder.cc

#382547590•Reporter: 24...@project.gserviceaccount.com
$0
3/21/2025

audio_decoder_fuzzer: Heap-buffer-overflow in mov_read_trun

#383454674•Reporter: 24...@project.gserviceaccount.com
$0
3/21/2025

Security: Browser history sniffing

#40086812•Reporter: ch...@gmail.com
$1,000
3/21/2025
Showing 4931-4940 of 13102 bugs
1...493494495...1311