Disclosed Chromium Security Bugs

DCHECK failure in value.InAnySharedSpace() in marking-barrier-inl.h

#40063947•Reporter: cl...@chromium.org
$0
7/17/2023

Use-after-poison in mojo::InterfaceEndpointClient::HandleValidatedMessage

#40063965•Reporter: cl...@chromium.org
$0
7/17/2023

bluez:fuzz_xml: Heap-use-after-free in convert_raw_data_to_xml

#42526204•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
7/15/2023

Security: heap-buffer-overflow on WebSQL sqlite3VdbeSorterInit

#40063900•Reporter: et...@gmail.com
$1,000
7/14/2023

heap-buffer-overflow : charntorune

#40062980•Reporter: cr...@system.gserviceaccount.com
$0
7/13/2023

Security: Memory corruption due to HeapVector iterator invalidation

#40063839•Reporter: jt...@gmail.com
$8,000
7/13/2023

Security: [WEBGPU] UAF in SetForwardingDeviceCallbacks

#40063883•Reporter: ti...@chromium.org
$0
7/13/2023

CHECK failure: !v8::internal::v8_flags.enable_slow_asserts.value() || (IsHeapObject()) in heap-

#40063910•Reporter: cl...@chromium.org
$0
7/13/2023

MessageSender.url should not be spoofable by a compromised renderer

#40051118•Reporter: lu...@chromium.org
$0
7/12/2023

Security: RACE CONDITION UAF in kfd_ioctl_unmap_memory_from_gpu

#40063288•Reporter: lm...@gmail.com
$11,000
7/12/2023
Showing 6781-6790 of 13102 bugs