Disclosed Chromium Security Bugs

Crash in SkArenaAllocWithReset::reset

#40058054•Reporter: cl...@chromium.org
$6,000
4/1/2022

SUMMARY: AddressSanitizer: heap-use-after-free base/bind_internal.h:535:12 in BindState

#40058074•Reporter: m....@gmail.com
$20,000
3/31/2022

Security: heap-use-after-free ui::AXEventRecorder::OnEvent

#40058146•Reporter: ha...@gmail.com
$7,000
3/31/2022

Heap-use-after-free in optimization_guide::OptimizationGuideStore::ClearFetchedHintsFromDatabase

#40058312•Reporter: sa...@gmail.com
$2,000
3/31/2022

Security: heap-buffer-overflow around blink::mojom::WidgetInputHandlerProxy::DispatchEvent

#40058113•Reporter: ab...@microsoft.com
$0
3/30/2022

Use-after-poison in blink::FrameOrWorkerScheduler::NotifyLifecycleObservers

#40058257•Reporter: cl...@chromium.org
$0
3/27/2022

uaf in rx::vk::CommandBufferHelper::bufferWrite

#40058051•Reporter: em...@gmail.com
$5,000
3/24/2022

Security: Heap-use-after-free in ui::MenuModel::GetModelAndIndexForCommandId

#40058166•Reporter: me...@gmail.com
$10,000
3/24/2022

Security: invalid parsing of HTML by tree_builder_simulator leading to mutation XSS

#40056601•Reporter: mi...@bentkowski.info
$5,000
3/23/2022

heap buffer overflow in BookmarkManagerPrivateDropFunction::RunOnReady

#40057258•Reporter: wx...@gmail.com
$1,000
3/22/2022
Showing 8021-8030 of 13102 bugs