Disclosed Chromium Security Bugs

DCHECK failure in ArrayBufferExtension::Age::kYoung == extension->age() in js-array-buffer.cc

#347804251•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

GPU process crash via WebGPU shader - UAF in RecursivelyDeleteTriviallyDeadInstructions at Transforms\Utils\Local.cpp:368

#345993680•Reporter: wg...@gmail.com
$10,000
9/25/2024

DCHECK failure in old_details.representation().IsCompatibleForLoad( root_details.representation())

#346411875•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

CHECK failure: representation_.Equals(owner->instance_descriptors(isolate) ->GetDetails(descrip

#347055166•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

CHECK failure: function->closure_feedback_cell_array()->length() == function->shared()->feedbac

#347141372•Reporter: 24...@project.gserviceaccount.com
$0
9/25/2024

MemorySanitizer: use-of-uninitialized-value in v8::internal::maglev::Phi::RecordUseReprHint()

#346686148•Reporter: dc...@chromium.org
$0
9/24/2024

DCHECK failure in HasFeedbackMetadata() in shared-function-info-inl.h

#346389916•Reporter: 24...@project.gserviceaccount.com
$0
9/22/2024

browser_accessibility_fuzzer: Heap-use-after-free in content::BrowserAccessibilityStateImpl::UpdateAccessibilityActivityTask

#345562940•Reporter: 24...@project.gserviceaccount.com
$0
9/21/2024

DCHECK failure in 1 <= target_receiver_maps.size() in ic.cc

#339064932•Reporter: 24...@project.gserviceaccount.com
$0
9/21/2024

Incorrect serialization of at-rules in CSS can lead to CSS injection

#343000522•Reporter: se...@google.com
$0
9/21/2024
Showing 5501-5510 of 13102 bugs
1...550551552...1311