Disclosed Chromium Security Bugs

Security: heap-use-after-free in GrClientMappedBufferManager::owningDirectContext

#40061001•Reporter: et...@gmail.com
$15,000
1/3/2023

CHECK failure: size <= kMaxRegularHeapObjectSize

#40061133•Reporter: cl...@chromium.org
$0
1/3/2023

Security: Custom Tab HTTP Header Injection

#40060115•Reporter: ph...@gmail.com
$3,000
1/2/2023

CrOS: Vulnerability reported in media-libs/freetype

#40059561•Reporter: vo...@appspot.gserviceaccount.com
$0
12/31/2022

CrOS: Vulnerability reported in media-libs/freetype

#40059573•Reporter: vo...@appspot.gserviceaccount.com
$0
12/31/2022

heap-buffer-overflow in RPHReferenceManager::OnWebContentsDestroyedOrNavigated

#40060240•Reporter: ro...@gmail.com
$7,000
12/31/2022

Existing Trusted Types check for javascript url can be bypassed

#40061024•Reporter: jk...@google.com
$0
12/31/2022

Security: custom_element_registry use-after-poison

#40061097•Reporter: sp...@gmail.com
$7,000
12/31/2022

CHECK failure: elements() == ReadOnlyRoots(isolate).empty_fixed_array()

#40061107•Reporter: cl...@chromium.org
$0
12/31/2022

CHECK failure: fixed_size_above_fp + (stack_slots * kSystemPointerSize) - CommonFrameConstants:

#40061109•Reporter: cl...@chromium.org
$0
12/31/2022
Showing 7361-7370 of 13102 bugs