Disclosed Chromium Security Bugs

Stack-use-after-return in blink::NGConstraintSpaceBuilder::NGConstraintSpaceBuilder

#40061749•Reporter: cl...@chromium.org
$0
2/22/2023

DCHECK failure in kCanBeWeak || (!IsSmi() == HAS_STRONG_HEAP_OBJECT_TAG(ptr_)) in tagged-impl.h

#40061764•Reporter: cl...@chromium.org
$0
2/22/2023

Segv on unknown address in Builtins_InterpreterEntryTrampoline

#40061766•Reporter: cl...@chromium.org
$0
2/22/2023

Security: SameSite cookie bypass on Android by redirecting to to intent-picker

#40061152•Reporter: ha...@gmail.com
$5,000
2/21/2023

Security: Avast aswJsFlt.dll 18.0.1479.0 exposes vulnerable pipe endpoint to renderers

#40061472•Reporter: wf...@chromium.org
$0
2/21/2023

UAF in AppIconReader

#40061648•Reporter: ha...@gmail.com
$2,000
2/21/2023

Security: UAF in validation_message_overlay_delegate

#40061660•Reporter: sp...@gmail.com
$7,000
2/21/2023

Trap in Builtins_CheckTurbofanType

#40061698•Reporter: cl...@chromium.org
$0
2/21/2023

Security: Heap-buffer-overflow in CommerceHintAgent::DidFinishLoadCallback

#40061704•Reporter: me...@gmail.com
$2,500
2/21/2023

Crash in Builtins_StringEqual

#40061751•Reporter: cl...@chromium.org
$0
2/21/2023
Showing 7211-7220 of 13102 bugs