Disclosed Chromium Security Bugs

DCHECK failure in v8::internal::ValueHelper::IsEmpty(that) || IsJSReceiver(v8::internal::Tagged

#378014601•Reporter: 24...@project.gserviceaccount.com
$0
2/23/2025

MiraclePtr bypass by abusing ref_count double fetch

#377803496•Reporter: vu...@darknavy.com
$0
2/22/2025

Security: WebGL ANGLE MTLCompilerService OOB Write

#40075394•Reporter: pw...@gmail.com
$0
2/22/2025

v8_multi_return_fuzzer: Crash in objects-inl.h

#378836894•Reporter: 24...@project.gserviceaccount.com
$0
2/22/2025

Trap in Wasm code for fast-api call

#375270509•Reporter: 24...@project.gserviceaccount.com
$0
2/22/2025

Crash in Builtins_KeyedLoadIC_Megamorphic

#378634713•Reporter: 24...@project.gserviceaccount.com
$0
2/22/2025

blank and inside iframe can be drawn outside of iframe

#377948403•Reporter: tr...@gmail.com
$1,000
2/21/2025

Debug check failed: string->IsFlat(). in v8

#377829476•Reporter: ki...@gmail.com
$0
2/21/2025

DCHECK failure in Handle v8::internal::Cast(Handle, const v8::SourceLocation &) [To = v8

#378014589•Reporter: sa...@google.com
$0
2/21/2025

Crash in Builtins_InterpreterPushArgsThenFastConstructFunction

#378836886•Reporter: 24...@project.gserviceaccount.com
$0
2/21/2025
Showing 5021-5030 of 13102 bugs
1...502503504...1311