Disclosed Chromium Security Bugs

Security: Memory corruption due to HeapVector iterator invalidation

#40067496•Reporter: m....@gmail.com
$4,000
10/24/2023

Security: Heap-use-after-free in BrowsingTopicsServiceImpl::GetBrowsingTopicsStateForWebUi

#40067522•Reporter: me...@gmail.com
$2,000
10/24/2023

Security: Heap-use-after-free in ui::PropertyHandler::GetPropertyInternal

#40065894•Reporter: ch...@gmail.com
$2,000
10/23/2023

Security: v8 Fatal error in ../../src/objects/tagged-impl-inl.h, line 213

#40067341•Reporter: be...@gmail.com
$0
10/23/2023

Security: Debug check failed: !s.InSharedHeap().

#40067485•Reporter: wh...@gmail.com
$7,000
10/23/2023

Crash in Builtins_ArrayPrototypeJoin

#40067525•Reporter: cl...@chromium.org
$0
10/23/2023

DCHECK failure in page->area_size() >= static_cast(page->live_bytes()) in sweeper.cc

#40067533•Reporter: cl...@chromium.org
$0
10/23/2023

Crash in v8::internal::ConcurrentMarking::JobTaskMajor::Run

#40067535•Reporter: cl...@chromium.org
$0
10/23/2023

Crash in Builtins_ArrayIteratorPrototypeNext

#40067536•Reporter: cl...@chromium.org
$0
10/23/2023

Crash in void v8::internal::String::WriteToFlat

#40067537•Reporter: cl...@chromium.org
$0
10/23/2023
Showing 6491-6500 of 13102 bugs