Disclosed Chromium Security Bugs

Stack-buffer-overflow in CFX_MemoryStream::ReadBlock

#40090468Reporter: cl...@chromium.org
$0
5/25/2018

Chrome for Android - Window.open combined with the onbeforeunload dialog crashes Chrome's WebView render

#40090046Reporter: he...@gmail.com
$2,000
5/17/2018

DCHECK failure in op->IsAnyLocationOperand() in instruction.h

#40090195Reporter: cl...@chromium.org
$0
5/11/2018

Security: heap-use-after-free blink::AudioSummingJunction::UpdateRenderingState

#40089489Reporter: om...@krashconsulting.com
$3,000
5/10/2018

Security: PDFium: Out-Of-Bounds Read in GetDWord_LSBFirst

#40084446Reporter: st...@gmail.com
$0
5/8/2018

Security: WriteTexture heap-buffer-overflow in WebGL on macOS

#40090246Reporter: om...@krashconsulting.com
$1,000
5/8/2018

Security: V8: A bug in the ObjectDescriptor class

#40090201Reporter: lo...@google.com
$0
5/4/2018

DCHECK failure in current_ == next_ in node.h

#40090214Reporter: cl...@chromium.org
$3,500
5/2/2018

CHECK failure: Type cast failed in CAST(add_func) at ../../src/builtins/builtins-collections-ge

#40090263Reporter: cl...@chromium.org
$0
5/2/2018

CHECK failure: LoadElement of kRepFloat64 (NumberOrHole) cannot be changed to kRepTagged in rep

#40090265Reporter: cl...@chromium.org
$0
5/2/2018
Showing 6821-6830 of 10955 bugs