Disclosed Chromium Security Bugs

Crash in Builtins_ConstructProxy

#40061864•Reporter: cl...@chromium.org
$0
3/2/2023

CHECK failure: InTypedSet(SlotType::kEmbeddedObjectFull, rinfo->pc()) || InTypedSet(SlotType::k

#40061876•Reporter: cl...@chromium.org
$0
3/2/2023

DCHECK failure in receiver_mode_ != ConvertReceiverMode::kNullOrUndefined in maglev-graph-builder.

#40061879•Reporter: cl...@chromium.org
$0
3/2/2023

Optimization bug in TurboShaft::MachineOptimizationReducer::ReduceSignedDiv

#40061881•Reporter: kw...@gmail.com
$10,000
3/2/2023

DCHECK failure at blink::WebFrameWidgetImpl::DragTargetDragEnter

#40059378•Reporter: rz...@gmail.com
$1,500
3/1/2023

Security: heap-buffer-overflow in network::ThrottlingNetworkInterceptor::UpdateThrottledRecords

#40061636•Reporter: 0x...@gmail.com
$2,000
3/1/2023

UAF in CartHandler

#40061782•Reporter: ha...@gmail.com
$2,500
3/1/2023

substring_set_matcher_fuzzer: Crash in base::SubstringSetMatcher::AhoCorasickNode::SetEdge

#40061866•Reporter: cl...@chromium.org
$0
3/1/2023

Security: heap-buffer-overflow in gpu::gles2::Texture::SetLevelCleared

#40061871•Reporter: gl...@google.com
$0
3/1/2023

Security: global-buffer-overflow css_property.cc:27 in blink::CSSProperty::Get

#40061781•Reporter: m....@gmail.com
$7,000
2/28/2023
Showing 7181-7190 of 13102 bugs