Disclosed Chromium Security Bugs

ASSERTION FAILED: curr->isRenderInline(), UNKNOWN in blink::RenderInline::splitInlines

#40080493Reporter: cl...@chromium.org
$0
10/1/2016

Media permission not displayed in PageInfo

#40080849Reporter: fe...@chromium.org
$0
10/1/2016

Use-after-free in blink::RenderLayer::invalidatePaintForBlockSelectionGaps

#40081016Reporter: cl...@chromium.org
$0
10/1/2016

Use-of-uninitialized-value in blink::MediaControls::shouldHideMediaControls

#40081074Reporter: cl...@chromium.org
$0
10/1/2016

Heap-use-after-free in cc::ScrollbarLayerImplBase::PushScrollClipPropertiesTo

#40081895Reporter: cl...@chromium.org
$0
10/1/2016

Stack-buffer-overflow in SkPackBits::Unpack8

#40082057Reporter: cl...@gmail.com
$5,000
10/1/2016

Heap-double-free in SkPictureData::~SkPictureData

#40082058Reporter: cl...@gmail.com
$5,000
10/1/2016

UNKNOWN in _fini

#40082059Reporter: cl...@gmail.com
$5,000
10/1/2016

Heap-buffer-overflow in SkData::NewUninitialized

#40082061Reporter: cl...@gmail.com
$5,000
10/1/2016

ASSERTION FAILED: !node || (node->isContainerNode())

#40082199Reporter: cl...@chromium.org
$0
10/1/2016
Showing 7001-7010 of 10939 bugs