Disclosed Chromium Security Bugs

Security: spook.js attacks on site vs origin isolation; extensions

#40055571•Reporter: ge...@umich.edu
$3,000
11/12/2021

Security: Autofill prompt can render over browser UI (bypasses of recent reports)

#40056753•Reporter: al...@alesandroortiz.com
$3,000
11/12/2021

wasm3:fuzzer: Crash in m3_FreeRuntime

#42504336•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
11/11/2021

v8/Turbofan: Invalid rotate-right optimization + Typer hardening bypass

#40056729•Reporter: ma...@gmail.com
$21,000
11/9/2021

v8/Turbofan: Wrong optimization of bitfield checks

#40056730•Reporter: ma...@gmail.com
$21,000
11/9/2021

Security: blink_platform!blink::CreateImageFromVideoFrame checkfailed

#40056721•Reporter: ha...@gmail.com
$0
11/8/2021

dawn_wire_server_and_vulkan_backend_fuzzer: Heap-use-after-free in dawn_wire::server::Server::InjectDevice

#40056745•Reporter: cl...@chromium.org
$0
11/8/2021

tint_msl_transform_fuzzer: Heap-buffer-overflow in tint::writer::msl::GeneratorImpl::EmitTypeConstructor

#40056630•Reporter: cl...@chromium.org
$0
11/5/2021

Security: SameSite=Lax cookie sent with cross-origin request inside iframe

#40050641•Reporter: am...@sevone.com
$1,000
11/4/2021

trunks_tpm_pinweaver_fuzzer: Global-buffer-overflow in google::protobuf::internal::EpsCopyInputStream::ReadString

#40056145•Reporter: cl...@chromium.org
$0
11/4/2021
Showing 8221-8230 of 13102 bugs