Disclosed Chromium Security Bugs

Heap-use-after-free in blink::StyleVariables::operator==

#40060747•Reporter: m....@gmail.com
$9,000
12/22/2022

DCHECK failure in !node->is_dead() in maglev-regalloc.cc

#40060772•Reporter: cl...@chromium.org
$0
12/22/2022

CHECK failure: properties_or_hash__value.IsSmi() || properties_or_hash__value.IsFixedArrayBase(

#40060777•Reporter: cl...@chromium.org
$0
12/22/2022

DCHECK failure in IsPrimitiveMap() in map-inl.h

#40060803•Reporter: cl...@chromium.org
$0
12/22/2022

CHECK failure: shared(isolate).IsSharedFunctionInfo() in objects-debug.cc

#40060819•Reporter: cl...@chromium.org
$0
12/22/2022

Crash in Builtins_JSEntryTrampoline

#40060854•Reporter: cl...@chromium.org
$0
12/22/2022

CHECK failure: map.IsMap(cage_base) in new-spaces.cc

#40060857•Reporter: cl...@chromium.org
$0
12/22/2022

Trap in v8::internal::Isolate::PushStackTraceAndDie

#40060858•Reporter: cl...@chromium.org
$0
12/22/2022

Crash in Builtins_StringEqual

#40060860•Reporter: cl...@chromium.org
$0
12/22/2022

Segv on unknown address in v8::internal::IsolateData::cage_base

#40060985•Reporter: cl...@chromium.org
$0
12/22/2022
Showing 7391-7400 of 13102 bugs