Disclosed Chromium Security Bugs

Use-after-poison in blink::HTMLSlotElement::DetachLayoutTree

#40056128•Reporter: cl...@chromium.org
$0
9/18/2021

Bad-cast to blink::ImageResourceObserver from invalid vptr in blink::ImageResourceContent::PriorityFromObservers

#40056167•Reporter: cl...@chromium.org
$0
9/18/2021

Heap-use-after-free in blink::StyleCrossfadeImage::ImageChanged

#40056172•Reporter: cl...@chromium.org
$0
9/18/2021

Heap-buffer-overflow in ash::ScrollableShelfView::CalculateTappableIconIndices

#40056176•Reporter: cl...@chromium.org
$0
9/18/2021

Heap-use-after-free in views::Widget::OnNativeWidgetDestroying

#40056025•Reporter: cl...@chromium.org
$0
9/17/2021

Heap-use-after-free in ui::LayerAnimationSequence::ProgressToEnd

#40056045•Reporter: cl...@chromium.org
$0
9/17/2021

dawn_wire_server_and_frontend_fuzzer: Heap-use-after-free in dawn_native::ObjectBase::IsError

#40056151•Reporter: cl...@chromium.org
$0
9/17/2021

Breakpoint with empty stacktrace

#40055882•Reporter: cl...@chromium.org
$0
9/16/2021

DCHECK failure in *p != to_check_ in heap.cc

#40055938•Reporter: cl...@chromium.org
$0
9/16/2021

Security: Unexpected JS execution in GetScriptableObjectProperty leads to JS object corruption

#40056119•Reporter: gl...@google.com
$0
9/16/2021
Showing 8331-8340 of 13102 bugs
1...833834835...1311