Disclosed Chromium Security Bugs

DCHECK failure in static_cast(type) < Type::NUMBER_OF_TYPES in frames.h

#40060810Reporter: cl...@chromium.org
$0
12/13/2022

Crash in Builtins_DatePrototypeGetUTCFullYear

#40060820Reporter: cl...@chromium.org
$0
12/13/2022

Crash in v8::internal::LookupIterator::GetRootForNonJSReceiver

#40060829Reporter: cl...@chromium.org
$0
12/13/2022

use-after-poison local_frame_view.cc:816 in blink::LocalFrameView::PerformLayout

#40060643Reporter: m....@gmail.com
$9,000
12/12/2022

CHECK failure: untyped_->count(slot.address()) > 0 in heap-verifier.cc

#40060756Reporter: cl...@chromium.org
$0
12/12/2022

CHECK failure: proto.map().oddball_type() == OddballType::kNull

#40060758Reporter: cl...@chromium.org
$0
12/12/2022

CHECK failure: context__value.IsContext() in class-verifiers.cc

#40060773Reporter: cl...@chromium.org
$0
12/12/2022

CHECK failure: context__value.IsContext()

#40060774Reporter: cl...@chromium.org
$0
12/12/2022

Crash in Builtins_DatePrototypeGetUTCSeconds

#40060783Reporter: cl...@chromium.org
$0
12/12/2022

Crash in v8::internal::Factory::NewCatchContext

#40060789Reporter: cl...@chromium.org
$0
12/12/2022
Showing 5181-5190 of 10831 bugs