Disclosed Chromium Security Bugs

Security: Race Condition UAF in amdtee_open_session

#40062626•Reporter: lm...@gmail.com
$10,000
7/19/2023

Extension has access to chrome://new-tab-page

#40063811•Reporter: jk...@google.com
$0
7/19/2023

CHECK failure: ReadOnlyHeap::Contains(heap_object) || shared_space_->Contains(heap_object) || s

#40063949•Reporter: cl...@chromium.org
$0
7/19/2023

Use-after-poison in mojo::SimpleWatcher::OnHandleReady

#40063970•Reporter: cl...@chromium.org
$0
7/19/2023

Security: [0-day] JIT optimisation issue

#40063989•Reporter: cl...@google.com
$0
7/19/2023

Security: Document PiP can spoof top-level page origin, show attacker content in PiP window, open PiP windows from iframes

#40063068•Reporter: al...@alesandroortiz.com
$4,000
7/18/2023

Security: Race Condition UAF in evdi_painter_mode_changed_notify

#40063434•Reporter: lm...@gmail.com
$6,000
7/18/2023

freetype_cff_ftengine_fuzzer: Heap-buffer-overflow in tt_size_reset_iterator

#40063842•Reporter: cl...@chromium.org
$0
7/18/2023

Stack-use-after-scope in blink::AnimationFrameTimingMonitor::Did

#40063901•Reporter: cl...@chromium.org
$0
7/18/2023

GPU failure in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork

#40063985•Reporter: cl...@chromium.org
$0
7/18/2023
Showing 6771-6780 of 13102 bugs