Disclosed Chromium Security Bugs

DCHECK failure in NodeTypeIs(type, known_info->type) in maglev-graph-builder.cc

#40064544•Reporter: cl...@chromium.org
$0
8/25/2023

v8_wasm_streaming_fuzzer: Use-after-poison in v8::internal::wasm::WasmFullDecoder

#40064611•Reporter: cl...@chromium.org
$0
8/25/2023

Security: Linux kernel (including Chrome OS kernels) msm drm gpu driver refcount leak in msm_ioctl_gem_submit

#40064164•Reporter: pi...@gmail.com
$0
8/24/2023

Security: .lnk / .local Restricted Extension Download Bypass

#40062678•Reporter: am...@gmail.com
$0
8/23/2023

Security: heap-use-after-free in extensions::NativeExtensionBindingsSystem::HandleResponse

#40063547•Reporter: st...@gmail.com
$1,000
8/23/2023

heap-buffer-overflow in SavedTabGroup

#40064054•Reporter: xp...@gmail.com
$3,000
8/23/2023

Security: UAF in extensions::WebViewFindHelper::FindReply in browser process

#40064425•Reporter: 0x...@gmail.com
$10,000
8/23/2023

Extending non-extensible objects leads to type confusion in V8

#40064428•Reporter: gl...@google.com
$0
8/23/2023

Security:stack-buffer-overflow in vrend_shader_sampler_views_mask_get bypassed

#40064444•Reporter: fi...@gmail.com
$7,000
8/23/2023

Abrt in v8::internal::maglev::LoadPolymorphicDoubleField::GenerateCode

#40064614•Reporter: cl...@chromium.org
$0
8/23/2023
Showing 6671-6680 of 13102 bugs