Disclosed Chromium Security Bugs

Container-overflow in cc::draw_property_utils::CalculateDrawProperties

#40056410•Reporter: cl...@chromium.org
$0
10/16/2021

CHECK failure: addr + size <= chunk_->area_end()

#40056243•Reporter: cl...@chromium.org
$0
10/15/2021

Security: Security DCHECK failed i < length() in WTF::StringView::operator[]

#40056413•Reporter: ho...@gmail.com
$2,000
10/15/2021

Bad-cast to blink::ScriptWrappable from invalid vptr in blink::DOMDataStore::GetWrapper

#40056447•Reporter: cl...@chromium.org
$0
10/15/2021

CHECK failure: JSFunctionRef construction failed

#40056456•Reporter: cl...@chromium.org
$0
10/15/2021

Security: Heap-use-after-free in CreditCardAccessManager::FetchCreditCard

#40056032•Reporter: me...@gmail.com
$20,000
10/14/2021

Use-after-poison in blink::ImageResourceContent::ShouldPauseAnimation

#40056426•Reporter: cl...@chromium.org
$0
10/14/2021

CHECK failure: !v8::internal::FLAG_enable_slow_asserts || (IsHeapObject()) in heap-object.h

#40056438•Reporter: cl...@chromium.org
$0
10/14/2021

nginx:http_request_fuzzer: Stack-use-after-return in ngx_http_upstream_init_request

#42503259•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
10/14/2021

Segv on unknown address in blink::ScriptState::From

#40056416•Reporter: cl...@chromium.org
$0
10/13/2021
Showing 8281-8290 of 13102 bugs