Disclosed Chromium Security Bugs

updater allows non-admins to install a system app via the COM API

#366287940•Reporter: ga...@google.com
$0
12/21/2024

Security: Potential Use-After-Free in GetAttrSubstitutionValue

#365802556•Reporter: kd...@gmail.com
$11,000
12/21/2024

Reset dummy GCPW gaia user if device is cloned via sysprep

#41485478•Reporter: yu...@google.com
$0
12/21/2024

Security: bypass CSP navigate-to feature with serviceWorker navigate function

#40059525•Reporter: 0x...@gmail.com
$1,000
12/20/2024

Fatal error in ../../src/deoptimizer/deoptimizer.cc, line 1002

#363826217•Reporter: sw...@gmail.com
$0
12/19/2024

Chrome devTools "Copy as cURL (cmd)" Allows Arbitrary Code Execution in CMD

#352651673•Reporter: fa...@gmail.com
$1,000
12/18/2024

JSPI stack switching breaks lazy deoptimization guarantees, leading to type confusion

#365376497•Reporter: ma...@gmail.com
$55,000
12/18/2024

UaF in LensOverlayBlurLayerDelegate::FetchBackgroundImage

#365516486•Reporter: ch...@gmail.com
$2,000
12/18/2024

CRLSet not being respected on launch and still loading websites with revoked certificates

#365589060•Reporter: ka...@brave.com
$0
12/18/2024

Multiple Vulnerability Address Bar Spoofing to XSS via Recent Search

#360642942•Reporter: gh...@gmail.com
$1,000
12/17/2024
Showing 5201-5210 of 13102 bugs
1...520521522...1311