Disclosed Chromium Security Bugs

Security: container-overflow in ChromeOSSystemProfileProvider::WriteLinkedAndroidPhoneProto(metrics::SystemProfileProto*)

#40940871•Reporter: 0x...@gmail.com
$0
3/23/2024

Cherry-pick the fix for AV1 video encoder bugs b/314858909, b/310455204 to the Chrome M121 branch

#41483975•Reporter: wt...@google.com
$0
3/22/2024

dcsctp_socket_fuzzer: Heap-use-after-free in dcsctp::OutstandingData::NackAll

#41482961•Reporter: cl...@chromium.org
$0
3/22/2024

gpu_raster_swangle_passthrough_fuzzer: Incorrect-function-pointer-type in rx::vk::priv::SecondaryCommandBuffer::executeCommands

#40946012•Reporter: cl...@chromium.org
$0
3/21/2024

Security: Heap-use-after-free WRITE 16 · cppgc::internal::PersistentRegionBase::ClearAllUsedNodes

#40947602•Reporter: m....@gmail.com
$11,000
3/21/2024

Security: Possible to open new tab page, view-source: pages and chrome-native:// pages by redirecting a same-origin download

#40095183•Reporter: de...@gmail.com
$1,000
3/21/2024

Security: Type confusion in Harmony Set methods (Leads to RCE)

#41483297•Reporter: h0...@gmail.com
$7,000
3/21/2024

third_party/icu has known bugs

#40052843•Reporter: oc...@google.com
$0
3/21/2024

Cherry-pick VP9 encoder bug fixes to the Chrome M121 branch

#41483159•Reporter: wt...@google.com
$0
3/20/2024

heap-use-after-free in ReadAnythingAppController::OnActiveAXTreeIDChanged(ui::AXTreeID const&, long long, GURL const&)

#40070902•Reporter: zy...@gmail.com
$1,000
3/19/2024
Showing 6041-6050 of 13102 bugs