Disclosed Chromium Security Bugs

Container-overflow in ui::Layer::OnDeviceScaleFactorChanged

#40061202•Reporter: cl...@chromium.org
$0
1/24/2023

Heap-buffer-overflow in blink::GetCrossOriginAttributeValue

#40061339•Reporter: cl...@chromium.org
$0
1/24/2023

Crash in v8::internal::Runtime_StringCharCodeAt

#40061397•Reporter: cl...@chromium.org
$0
1/24/2023

Security: heap-use-after-free third_party\blink\renderer\core\workers\worker_thread.cc:905 in blink::WorkerThread::PauseOrFreezeOnWorkerThread

#40061275•Reporter: m....@gmail.com
$7,000
1/23/2023

iOS Chrome Modal Dialog Spoof resulting to URL Spoof

#40061297•Reporter: pr...@gmail.com
$5,000
1/23/2023

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in tsk_UTF16toUTF8

#42520336•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
1/22/2023

Security: heap-use-after-free on aura::WindowOcclusionTracker::MaybeObserveAnimatedWindow

#40061159•Reporter: rh...@gmail.com
$1,000
1/21/2023

DCHECK failure in JSFunction::cast(entry.map(isolate).GetConstructor()) == native_context.array_fu

#40061348•Reporter: cl...@chromium.org
$0
1/21/2023

Security: Heap-use-after-free in SpeechRecognitionRecognizerImpl::ChangeLanguage

#40061294•Reporter: tt...@gmail.com
$10,000
1/19/2023

Security: WebGPU: Out of bounds write in OnBufferMapAsyncCallback

#40061304•Reporter: ti...@chromium.org
$0
1/19/2023
Showing 7311-7320 of 13102 bugs