Disclosed Chromium Security Bugs

mediasource_MP2T_AVC_pipeline_integration_fuzzer: Crash in ff_put_h264_chroma_mc4_ssse3.next2rows

#379418979•Reporter: 24...@project.gserviceaccount.com
$0
3/2/2025

pdf_ink_reader_fuzzer_PdfInkReaderFuzzer_CreateMeshFromPolylineDoesntCrash_fuzzer: Crash in pqHeapDelete

#379574871•Reporter: 24...@project.gserviceaccount.com
$0
3/2/2025

GPU process crash via WebGPU shader - UAF in mesa gcm_schedule_early_instr at src/compiler/nir/nir_opt_gcm.c:477

#361027508•Reporter: a7...@gmail.com
$10,000
2/28/2025

Object-size in blink::mojom::blink::MediaDevicesDispatcherHost_GetAudioInputCapabilities_Forwar

#380107547•Reporter: 24...@project.gserviceaccount.com
$0
2/28/2025

Use-after-free in GestureListenerManager if destroyed before RenderWidgetHost

#378464985•Reporter: ol...@opera.com
$0
2/28/2025

V8 sandbox violation in Builtins_ContinueToJavaScriptBuiltinWithResult

#379418918•Reporter: sa...@google.com
$0
2/28/2025

heap-use-after-free in v4l2 (AppendVP9SuperFrameIndex)

#379715150•Reporter: mp...@google.com
$0
2/27/2025

Debug check failed in wasm-objects.cc

#379052295•Reporter: li...@gmail.com
$0
2/27/2025

V8 sandbox violation in v8::internal::SlotSet* v8::internal::MutablePageMetadata::slot_set<

#379768241•Reporter: sa...@google.com
$0
2/27/2025

DCHECK failure in Handle v8::internal::Cast(Handle, const v8::SourceLocation &) [To = v8

#374627491•Reporter: dd...@gmail.com
$7,000
2/26/2025
Showing 5001-5010 of 13102 bugs
1...500501502...1311