Disclosed Chromium Security Bugs

V8 Sandbox Bypass: AAR/W via WASM function signature confusion in TurboFan call_ref

#352689356•Reporter: se...@gmail.com
$0
10/23/2024

Security: Potential Use-After-Free in PasswordGenerationPopupControllerImpl::EditPasswordClicked

#349253666•Reporter: kd...@gmail.com
$1,000
10/22/2024

Permission Element overlay and tapjacking

#347588491•Reporter: st...@gmail.com
$3,000
10/22/2024

SameSite strict cookies bypass/cross-origin download via `e.dataTransfer.setData('DownloadURL', ...`

#40060358•Reporter: nd...@protonmail.com
$1,000
10/22/2024

v8_fully_instrumented_fuzzer: DCHECK failure in is_one_byte_ == sizeof(Char) == 1 in literal-buffer.h

#351876778•Reporter: 24...@project.gserviceaccount.com
$0
10/22/2024

v8_fully_instrumented_fuzzer: DCHECK failure in scope->UniqueIdInScript() > UniqueIdInScript() in scopes.cc

#352402518•Reporter: 24...@project.gserviceaccount.com
$0
10/22/2024

GPU process crash via WebGPU shader - Stack use-after-return at HLMatrixLowerPass.cpp:63

#346618785•Reporter: wg...@gmail.com
$10,000
10/22/2024

V8 Sandbox Bypass: AAR/W via function import signature check race

#349529650•Reporter: se...@gmail.com
$5,000
10/22/2024

Security: heap-use-after-free in GetModalDialogBounds

#347664964•Reporter: st...@gmail.com
$1,000
10/22/2024

Security: Heap OOB write in dxc via tint-generated shaders

#41485642•Reporter: wg...@gmail.com
$0
10/22/2024
Showing 5361-5370 of 13102 bugs
1...536537538...1311