Disclosed Chromium Security Bugs

Use-After-Free in blink::ClipboardItem::ClipboardItem

#380487912•Reporter: em...@gmail.com
$11,000
3/6/2025

V8 sandbox violation in v8::internal::compiler::JSContextSpecialization::ReduceJSLoadScriptContext

#381127888•Reporter: sa...@google.com
$0
3/6/2025

Type Confusion in AsyncIteratorPrototypeAsyncDispose() Leads to RCE

#380677637•Reporter: hu...@gmail.com
$50,000
3/6/2025

mips64el: Debug check failed: src->rm() != at. in codegen/mips64/assembler-mips64.cc

#380604249•Reporter: li...@gmail.com
$0
3/6/2025

SVG and CSS filters can leak cross-origin data via iframes

#401081629•Reporter: ma...@google.com
$0
3/6/2025

Handle opaque initiator origin correctly in double keyed LCPP

#380105415•Reporter: ch...@chromium.org
$0
3/5/2025

net_quic_session_pool_fuzzer: Heap-use-after-free in quic::QuicFramer::ProcessIetfAckFrame

#379262246•Reporter: 24...@project.gserviceaccount.com
$0
3/5/2025

net_quic_session_pool_fuzzer: Heap-use-after-free in quic::QuicSentPacketManager::MarkPacketHandled

#373025985•Reporter: 24...@project.gserviceaccount.com
$0
3/5/2025

V8 Sandbox violation during OSR tier-up if code on FeedbackVector is modified

#374812612•Reporter: 24...@project.gserviceaccount.com
$0
3/5/2025

pdfium_fuzzer: Crash in fxcodec::JpegDecoder::InitDecode

#379259821•Reporter: 24...@project.gserviceaccount.com
$0
3/2/2025
Showing 4991-5000 of 13102 bugs
1...499500501...1311