Disclosed Chromium Security Bugs

A security issue when using the JSPI feature.

#342415789•Reporter: jo...@gmail.com
$11,000
9/5/2024

renderer_in_process_mojolpm_fuzzer: Crash in performance_manager::execution_context_priority::BoostingVoteAggregator::MarkNod

#339704116•Reporter: 24...@project.gserviceaccount.com
$0
9/5/2024

V8 Sandbox Bypass: JSToWasmWrapperAsm accessible and allows type confusion

#342866373•Reporter: cl...@gmail.com
$5,000
9/5/2024

Trap in v8::internal::__RT_impl_Runtime_Abort

#343069827•Reporter: sa...@google.com
$0
9/5/2024

DCHECK failure in current_speculation_mode_ == SpeculationMode::kAllowSpeculation in maglev-graph-

#343069824•Reporter: 24...@project.gserviceaccount.com
$0
9/5/2024

DCHECK failure in details.representation().Equals(new_representation) || details.representation().

#343338105•Reporter: 24...@project.gserviceaccount.com
$0
9/5/2024

UAF in third_party/blink/renderer/platform/graphics/decoding_image_generator.cc

#341812566•Reporter: mc...@amazon.com
$0
9/5/2024

UaF in LensOverlayController::~LensOverlayController

#342419061•Reporter: ch...@gmail.com
$3,000
9/5/2024

Debug check failed: code.SafeEquals(topmost_) implies safe_to_deopt_.

#339759428•Reporter: da...@gmail.com
$0
9/4/2024

Trap in v8::internal::__RT_impl_Runtime_Abort

#343069823•Reporter: sa...@google.com
$0
9/4/2024
Showing 5571-5580 of 13102 bugs