Disclosed Chromium Security Bugs

CHECK failure: is_int8(disp) in assembler-x64.cc

#40064545•Reporter: cl...@chromium.org
$0
8/21/2023

DCHECK failure in expected_value_stack_size <= stack_value_types_for_debugging_.size() + num_gc_st

#40064407•Reporter: cl...@chromium.org
$0
8/19/2023

CHECK failure: maybe_constructor.IsJSFunction() in call-optimization.cc

#40064458•Reporter: cl...@chromium.org
$0
8/19/2023

Security: PDFium (XFA) Use-after-free in CPWL_ComboBox::OnChar

#40064463•Reporter: hu...@gmail.com
$9,000
8/19/2023

Security: UAF in CommitErrorPage

#40064476•Reporter: hi...@gmail.com
$31,000
8/19/2023

Security: PDFium (XFA) Use-after-free in CFFL_ListBox::SaveData

#40064490•Reporter: hu...@gmail.com
$9,000
8/19/2023

Heap-use-after-free in v8::internal::TracedHandles::Destroy

#40064452•Reporter: cl...@chromium.org
$9,000
8/17/2023

Security: CSA_DCHECK failed: Torque assert 'IsConstructor(target)'

#40064002•Reporter: wh...@gmail.com
$10,000
8/16/2023

DCHECK failure in has_prototype_slot(cage_base) in js-function-inl.h

#40064295•Reporter: cl...@chromium.org
$0
8/16/2023

Security: UAF in content::BrowserPluginGuest::GetProspectiveOuterDocument() in browser process

#40064365•Reporter: 0x...@gmail.com
$10,000
8/16/2023
Showing 6691-6700 of 13102 bugs