Disclosed Chromium Security Bugs

Security: V8: GenericJsToWasmWrapper is broken, creates type confusion on the stack

#40059920•Reporter: jk...@chromium.org
$0
9/19/2022

bluez:fuzz_xml: Heap-buffer-overflow in element_end

#42516062•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
9/17/2022

Security: heap-buffer-overflow in chrome_pdf::PDFiumEngine::GetNamedDestination

#40059871•Reporter: tr...@gmail.com
$7,500
9/16/2022

DCHECK failure in *p != to_check_ in heap.cc

#40059909•Reporter: cl...@chromium.org
$0
9/16/2022

Security: Security DCHECK failed: !NeedsLayout() || ChildLayoutBlockedByDisplayLock() in blink::LayoutObject::AssertLaidOut

#40054167•Reporter: ho...@gmail.com
$5,000
9/15/2022

Security: Heap-use-after-free in ash::SavedDeskDialogController::CreateDialogWidget

#40059699•Reporter: ch...@gmail.com
$3,000
9/15/2022

Security: Heap-use-after-free in ash::OverviewItem::DestroyPhantomsForDragging

#40059787•Reporter: ch...@gmail.com
$3,000
9/15/2022

Heap-use-after-free in ash::CalendarEventListView::~CalendarEventListView

#40059908•Reporter: cl...@chromium.org
$0
9/15/2022

Security: BackgroundFetch leaks URL of cross-origin redirects

#40058171•Reporter: la...@gmail.com
$8,000
9/14/2022

tint_renamer_fuzzer.exe: Illegal-instruction in tint::fuzzers::TintInternalCompilerErrorReporter

#40059857•Reporter: cl...@chromium.org
$0
9/14/2022
Showing 7641-7650 of 13102 bugs