Disclosed Chromium Security Bugs

Freelist Corruption with PartitionAlloc on 93.0.4541.0+ related to allocation of LayoutObjects/PaintLayers

#40056099•Reporter: li...@chromium.org
$0
9/24/2021

Heap-use-after-free in ash::TrayBubbleView::RerouteEventHandler::OnKeyEvent

#40056217•Reporter: cl...@chromium.org
$0
9/24/2021

Crash in cppgc::internal::PageBackend::AllocateLargePageMemory

#40056246•Reporter: cl...@chromium.org
$0
9/24/2021

Heap-buffer-overflow in ash::ScrollableShelfView::CalculateTappableIconIndices

#40056205•Reporter: cl...@chromium.org
$0
9/23/2021

v8_wasm_fuzzer: DCHECK failure in 0 < code.size() in function-compiler.cc

#40056215•Reporter: cl...@chromium.org
$0
9/23/2021

Security: Cross-origin iframe can navigate top window to different site via same-site open redirect or XSS redirect

#40053936•Reporter: al...@alesandroortiz.com
$3,000
9/22/2021

Heap-use-after-free in views::MenuController::ExitMenu

#40055016•Reporter: cl...@chromium.org
$0
9/22/2021

bypass blocked autoredirects from cross-origin iframes

#40053780•Reporter: el...@confiant.com
$5,000
9/21/2021

v8_wasm_code_fuzzer: DCHECK failure in exception_stack.back() == control_stack.size() - 1 in wasm-interpreter.cc

#40056207•Reporter: cl...@chromium.org
$0
9/21/2021

Heap-use-after-free in ash::TrayBubbleView::RerouteEventHandler::OnKeyEvent

#40056192•Reporter: cl...@chromium.org
$0
9/19/2021
Showing 8321-8330 of 13102 bugs
1...832833834...1311