Disclosed Chromium Security Bugs

DCHECK failure in !value->is_conversion() in maglev-interpreter-frame-state.h

#511579746•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Trap in Builtins_LdaImmutableCurrentContextSlotHandler

#511588901•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Trap in Builtins_PromiseConstructor

#511647904•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Trap in Builtins_JSEntryTrampoline

#511574524•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

DCHECK failure in !map.is_identical_to(lookup_start_object_map()) in ic.cc

#511549247•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

DCHECK failure in !is_dead() in maglev-basic-block.h

#511549432•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Crash in Builtins_ProxyConstructor

#511588902•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

DCHECK failure in IsConsideredForResultLocation() in maglev-ir.h

#511244873•Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

DCHECK failure in !value->is_conversion() in maglev-interpreter-frame-state.h

#511244870•Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

DCHECK failure in IsConsideredForResultLocation() in maglev-ir.h

#511225477•Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026
Showing 841-850 of 13102 bugs
1...848586...1311