Disclosed Chromium Security Bugs

TaskManager fails to keep Profile alive leading to UAF in CreateNativeWidget

#40056556•Reporter: wx...@gmail.com
$1,000
10/29/2021

webcodecs_audio_encoder_fuzzer: Use-of-uninitialized-value in media::AudioOpusEncoder::OnFifoOutput

#40056580•Reporter: cl...@chromium.org
$0
10/29/2021

webcodecs_image_decoder_fuzzer: Heap-buffer-overflow in media::DownShiftHighbitVideoFrame

#40056581•Reporter: cl...@chromium.org
$0
10/29/2021

DCHECK failure in IsNumber() in objects-inl.h

#40056582•Reporter: cl...@chromium.org
$0
10/29/2021

Security: heap-use-after-free in the PaymentCredential in the browser process

#40056586•Reporter: 0x...@gmail.com
$20,000
10/29/2021

CHECK failure: proto.map().oddball_type() == OddballType::kNull in compilation-dependencies.cc

#40056605•Reporter: cl...@chromium.org
$0
10/29/2021

tint_all_transforms_fuzzer: Use-of-uninitialized-value in tint::fuzzers::AddPlatformIndependentPasses

#40056607•Reporter: cl...@chromium.org
$0
10/29/2021

use after poison in ImageDecoderExternal

#40056609•Reporter: em...@gmail.com
$5,000
10/29/2021

Security: Clickjacking

#40056418•Reporter: pt...@gmail.com
$500
10/26/2021

code_cache_host_mojolpm_fuzzer: Illegal-instruction in StackTraceGetter::CurrentStackTrace

#40056545•Reporter: cl...@chromium.org
$0
10/26/2021
Showing 8251-8260 of 13102 bugs