Disclosed Chromium Security Bugs

opennavsurf-bag:bag_read_fuzzer: Crash in H5HG__cache_heap_deserialize

#42535859•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/28/2024

Security: Nested RunLoops can trigger a UAF in MessagePumpEpoll

#40068536•Reporter: pa...@chromium.org
$0
5/27/2024

poppler:pdf_draw_fuzzer: Heap-use-after-free in cff_index_read

#42535833•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/27/2024

Debug check failed: i.valid(). in v8

#324690505•Reporter: je...@gmail.com
$1,000
5/25/2024

CHECK failure: !ProcessEphemeron(ephemeron.key, ephemeron.value) in mark-compact.cc

#325132945•Reporter: 24...@project.gserviceaccount.com
$0
5/25/2024

Data races in blink::BufferingBytesConsumer without (sufficient) external synchronization

#41496341•Reporter: pb...@chromium.org
$0
5/24/2024

Debug check failed: !type.is_uninhabited(). in v8

#324747822•Reporter: je...@gmail.com
$8,000
5/24/2024

Iframe sandbox allow-popups-to-escape-sandbox bypass

#40069622•Reporter: nd...@protonmail.com
$3,000
5/24/2024

Integer overflow issue AV1 decoding through dav1d.

#325284120•Reporter: da...@chromium.org
$0
5/24/2024

[security] UAF in gpu::SharedContextState::MakeCurrent (AMD driver)

#40945751•Reporter: el...@chromium.org
$0
5/23/2024
Showing 5861-5870 of 13102 bugs