Disclosed Chromium Security Bugs

Memory corruption in ReadableByteStreamController::FillPullIntoDescriptorFromQueue

#339877167•Reporter: jt...@gmail.com
$11,000
8/28/2024

GPU process crash via WebGPU shader - UAF in ProcessValue at DxilValueCache.cpp:555

#338071106•Reporter: wg...@gmail.com
$10,000
8/28/2024

GPU process crash via WebGPU shader - UAF in SimplifyTerminatorOnSelect at SimplifyCFG.cpp:2637

#338103465•Reporter: wg...@gmail.com
$10,000
8/28/2024

UaF triggered by post-commit error page

#340606786•Reporter: xi...@chromium.org
$0
8/28/2024

Security: [0-day] V8 Incorrect parsing leads to type confusions

#341663589•Reporter: ti...@chromium.org
$0
8/28/2024

Security: Compromised renderer can commit navigations to illegal schemes.

#324934416•Reporter: cr...@chromium.org
$0
8/27/2024

Use After Free in PresentationConnectionCallbacks::OnSuccess

#339588211•Reporter: ha...@gmail.com
$1,000
8/27/2024

Heap-buffer-overflow in blink::SmallCapsIterator::Consume

#341142174•Reporter: 24...@project.gserviceaccount.com
$0
8/27/2024

heap-use-after-free on AudioManagerMac

#340178596•Reporter: ha...@gmail.com
$2,000
8/24/2024

JSPI type confusion with re-exported JS import

#340102752•Reporter: th...@chromium.org
$0
8/24/2024
Showing 5611-5620 of 13102 bugs
1...561562563...1311