Disclosed Chromium Security Bugs

Security: transferring WebAssembly.Memory's buffer allows shared read/write access across threads

#40054566•Reporter: ma...@gmail.com
$7,500
5/13/2021

AddressSanitizer: access-violation on unknown address 0x000000000000

#40054240•Reporter: wx...@gmail.com
$0
5/12/2021

Heap-use-after-free in blink::LocalFrameView::PerformPreLayoutTasks

#40054601•Reporter: cl...@chromium.org
$0
5/12/2021

wasm3:fuzzer: Index-out-of-bounds in FindReferencedLocalWithinCurrentBlock

#42496881•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/12/2021

Security: allow-top-navigation-by-user-activation bypasses via message event listeners on iOS

#40052658•Reporter: el...@confiant.com
$5,000
5/11/2021

dawn_wire_server_and_vulkan_backend_fuzzer: Crash in vk::DescriptorSetLayout::DescriptorSetLayout

#40054405•Reporter: cl...@chromium.org
$0
5/11/2021

dawn_spirv_cross_glsl_fast_fuzzer: Use-of-uninitialized-value in spirv_cross::Compiler::CombinedImageSamplerUsageHandler::add_dependency

#40054635•Reporter: cl...@chromium.org
$0
5/11/2021

wasm3:fuzzer: Index-out-of-bounds in GetStackTypeFromTop

#42496846•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/11/2021

wasm3:fuzzer: Index-out-of-bounds in CopyStackTopToRegister

#42496842•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/11/2021

v8_multi_return_fuzzer: DCHECK failure in stack_decrement == kSystemPointerSize in code-generator-arm.cc

#40054600•Reporter: cl...@chromium.org
$0
5/9/2021
Showing 8511-8520 of 13102 bugs
1...851852853...1311