Disclosed Chromium Security Bugs

Security: LoadPropertyFromGlobalDictionary checks the wrong hole

#40068402•Reporter: sr...@google.com
$0
11/6/2023

Security: [GPU/Angle] heap-buffer-overflow WRITE of size 496 [@rx::PackPixels]

#40066451•Reporter: Di...@microsoft.com
$0
11/4/2023

Trap in Builtins_CheckTurboshaftWord32Type

#40068058•Reporter: cl...@chromium.org
$0
11/3/2023

Fatal error in #41:Dead should be followed by IfSuccess/IfException, but is only followed by si

#40064863•Reporter: cl...@chromium.org
$0
11/2/2023

Security: Heap-use-after-free in KeyRotationLauncherImpl::SynchronizePublicKey

#40066476•Reporter: me...@gmail.com
$5,000
11/2/2023

Security: Eyedropper API can confuse real cursor position which can cause users to be tricked into clicking unwanted positions (ie. accepting permission prompts)

#40066990•Reporter: ha...@gmail.com
$2,000
11/2/2023

Security: V8: Debug check failed: result_type.IsSubtypeOf(output_graph_types_[index]).

#40067943•Reporter: sw...@gmail.com
$7,000
11/2/2023

UAF in raw_ptr with FedCM IDP Signin status

#40068071•Reporter: np...@chromium.org
$0
11/2/2023

[Autofill] Keyboard accessory, bottom sheet accept unintentional user input

#40067505•Reporter: sc...@google.com
$2,000
11/1/2023

dawn_wire_server_and_vulkan_backend_fuzzer.exe: Crash in marl::Scheduler::Worker::run

#40067698•Reporter: cl...@chromium.org
$0
11/1/2023
Showing 6441-6450 of 13102 bugs