Disclosed Chromium Security Bugs

Security DCHECK failure: IsA(from) in casting.h

#40058495•Reporter: cl...@chromium.org
$0
4/22/2022

Security: mojo race NodeName reuse to leak messages

#40058037•Reporter: sr...@google.com
$0
4/21/2022

AddressSanitizer: use-after-poison frame_or_worker_scheduler.cc:88 in blink::FrameOrWorkerScheduler::NotifyLifecycleObservers

#40055998•Reporter: m....@gmail.com
$8,500
4/20/2022

Security: JBIG2_Context.cpp arithmetic looks prone to overflow.

#40058256•Reporter: ts...@chromium.org
$0
4/20/2022

Security: heap-buffer-overflow in webui tabstrip

#40058358•Reporter: ab...@microsoft.com
$0
4/20/2022

Security: Heap UAF in media_gpu!media::VideoProcessorProxy::VideoProcessorBlt

#40056669•Reporter: ha...@gmail.com
$7,000
4/19/2022

Security: UAF in DateTimeChooserAndroid::ReplaceDateTime

#40058088•Reporter: jt...@gmail.com
$25,000
4/19/2022

Security: UAF in BookmarkDragHelper::OnBookmarkIconLoaded

#40058319•Reporter: jt...@gmail.com
$10,000
4/19/2022

Crash in cppgc::internal::MemberBase::MemberBase

#40058432•Reporter: cl...@chromium.org
$0
4/19/2022

Crash in blink::LayoutObject::RemoveChild

#40058460•Reporter: cl...@chromium.org
$0
4/19/2022
Showing 7981-7990 of 13102 bugs