Disclosed Chromium Security Bugs

Security: container-overflow in chrome_pdf::PDFiumEngine::SelectFindResult

#40060084Reporter: sk...@gmail.com
$2,000
10/13/2022

Security: UAF in ManagedConfigurationAPI::GetConfigurationOnBackend

#40059808Reporter: et...@gmail.com
$5,000
10/12/2022

Crash in cppgc::internal::ConcurrentMarkingTask::Run

#40060137Reporter: cl...@chromium.org
$0
10/12/2022

Crash in blink::LayoutTable::SlowColElementAtAbsoluteColumn

#40060147Reporter: cl...@chromium.org
$0
10/12/2022

Crash in cppgc::internal::TraceConservatively

#40060160Reporter: cl...@chromium.org
$0
10/12/2022

Out of memory in unsigned int v8::internal::StringTable::Data::TryStringToIndexOrLookupExisting

#40060167Reporter: cl...@chromium.org
$0
10/12/2022

Use-after-poison in blink::SVGElement::AddToPropertyMap

#40060144Reporter: cl...@chromium.org
$0
10/10/2022

libraw:libraw_raf_fuzzer: Use-of-uninitialized-value in LibRaw::parse_rollei

#42516924Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
10/8/2022

Security: GetExecutionContext Type Confusion in OffscreenCanvas

#40059901Reporter: ti...@chromium.org
$0
10/8/2022

tint_ast_spv_writer_fuzzer: Heap-buffer-overflow in tint::writer::spirv::Builder::GenerateBuiltinCall

#40059968Reporter: cl...@chromium.org
$0
10/8/2022
Showing 5371-5380 of 10875 bugs