Disclosed Chromium Security Bugs

CHECK failure: args.Length() == 2 in d8-test.cc

#40056334•Reporter: cl...@chromium.org
$0
10/1/2021

heap-use-after-free : blink::PaintController::FinishCycle

#40056339•Reporter: cr...@system.gserviceaccount.com
$0
10/1/2021

tint_single_entry_point_fuzzer: Illegal-instruction in tint::fuzzers::ValidityErrorReporter

#40055768•Reporter: cl...@chromium.org
$0
9/30/2021

Heap-use-after-free in ash::TrayBubbleView::~TrayBubbleView

#40056181•Reporter: cl...@chromium.org
$0
9/30/2021

Heap-use-after-free in ash::TrayBubbleView::~TrayBubbleView

#40056203•Reporter: cl...@chromium.org
$0
9/30/2021

heap-buffer-overflow : media::D3D11H264Accelerator::SubmitFrameMetadata

#40055401•Reporter: cr...@system.gserviceaccount.com
$0
9/29/2021

Heap-use-after-free in blink::PropertyTreeManager::EnsureCompositorTransformNode

#40056274•Reporter: cl...@chromium.org
$6,000
9/29/2021

Heap-use-after-free in blink::LayoutBlockFlow::RemoveChild

#40056280•Reporter: cl...@chromium.org
$0
9/29/2021

Bad-cast to blink::LayoutBox from blink::LayoutInline in blink::LayoutBox::SplitAnonymousBoxesAroundChild

#40056293•Reporter: cl...@chromium.org
$0
9/29/2021

Heap-buffer-overflow in cc::PaintWorkletImageProvider::GetPaintRecordResult

#40056124•Reporter: cl...@chromium.org
$0
9/26/2021
Showing 8311-8320 of 13102 bugs
1...831832833...1311