Disclosed Chromium Security Bugs

Security: Top-level redirect from cross-origin iframe by setting `Content-Security-Policy: sandbox allow-top-navigation`

#40057349•Reporter: da...@gmail.com
$5,000
1/28/2023

Multiple checks fail, cross process crash, maybe race condition & use-after-free in video_encoder.cc

#40061367•Reporter: so...@gmail.com
$7,000
1/28/2023

Heap-use-after-free in blink::BoxPainterBase::PaintFillLayer

#40059000•Reporter: m....@gmail.com
$10,000
1/27/2023

Security: OOB write on Lacros

#40060865•Reporter: rh...@gmail.com
$2,000
1/27/2023

Security: UAF in ash::network_diagnostics::DnsResolutionRoutine::CreateHostResolver() (browser process)

#40061060•Reporter: 0x...@gmail.com
$3,000
1/27/2023

CHECK failure: BigIntNegate of kRepTaggedPointer (BigInt) cannot be changed to kRepTaggedPointe

#40061422•Reporter: cl...@chromium.org
$0
1/27/2023

envoy:server_fuzz_test: Container-overflow in std::__1::basic_string, std::__1::allocator

#42520432•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
1/26/2023

Security: heap-use-after-free in ProfileDestroyer::DestroyProfileNow

#40061321•Reporter: ne...@nesk.kr
$2,000
1/25/2023

Security: UAF in webgpu\gpu.cc in blink::`anonymous namespace'::CreateContextProviderOnMainThread

#40061370•Reporter: m....@gmail.com
$8,000
1/25/2023

Heap-buffer-overflow in blink::CSSParserImpl::ConsumeStyleRule

#40061396•Reporter: cl...@chromium.org
$0
1/25/2023
Showing 7301-7310 of 13102 bugs
1...730731732...1311