Disclosed Chromium Security Bugs

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.fasterxml.jackson.databind.deser.SettableBeanProperty.deserialize

#374601312•Reporter: 87...@developer.gserviceaccount.com
$0
1/20/2025

tinyusb:cdc: Use-of-uninitialized-value in usbd_edpt_open

#373473128•Reporter: 87...@developer.gserviceaccount.com
$0
1/20/2025

tinyusb:msc: Segv on unknown address in tud_task_ext

#373467907•Reporter: 87...@developer.gserviceaccount.com
$0
1/20/2025

Type confusion due to DefaultReferenceValue() `undefined` default value for kNoExtern

#372269618•Reporter: se...@gmail.com
$55,000
1/18/2025

Reporting API is not isolated for Content Scripts

#356098278•Reporter: te...@google.com
$0
1/18/2025

DCHECK failure in can_throw == CanThrow::kNo implies lazy_deopt_on_throw == LazyDeoptOnThrow::kNo

#361124378•Reporter: 24...@project.gserviceaccount.com
$0
1/18/2025

Security: Trick user into thinking they have escaped fullscreen on MacOS

#40071026•Reporter: ha...@gmail.com
$3,000
1/17/2025

Arbitrary WASM type confusion due to module confusion in wasm-to-js tier-up

#371565065•Reporter: se...@gmail.com
$11,000
1/17/2025

Security: https://bugs.chromium.org/p/chromium/issues/detail?id=1259694 can be reproduced

#40070964•Reporter: du...@gmail.com
$1,000
1/17/2025

Heap-use-after-free in skgpu::graphite::DawnCommandBuffer::bindTextureAndSamplers

#372298916•Reporter: 24...@project.gserviceaccount.com
$0
1/17/2025
Showing 5131-5140 of 13102 bugs
1...513514515...1311