Disclosed Chromium Security Bugs

Security DCHECK failure: !object || (object->IsLayoutMultiColumnSet()) in layout_multi_column_set.h

#40052772•Reporter: cl...@chromium.org
$0
10/14/2020

WebView: Cross-domain content can be fetched from resources loaded by the content scheme

#40052621•Reporter: wy...@gmail.com
$0
10/9/2020

dawn_wire_server_and_vulkan_backend_fuzzer: Crash in vk::DescriptorSetLayout::DescriptorSetLayout

#40052501•Reporter: cl...@chromium.org
$0
10/8/2020

dawn_wire_server_and_frontend_fuzzer.exe: Heap-use-after-free in dawn_wire::server::Server::OnBufferMapWriteAsyncCallback

#40052614•Reporter: cl...@chromium.org
$0
10/8/2020

Security: URL bar spoofing with prompt dialog on iOS

#40050861•Reporter: ch...@gmail.com
$500
10/7/2020

dawn_wire_server_and_frontend_fuzzer: Heap-buffer-overflow in dawn_native::null::Buffer::DoWriteBuffer

#40052683•Reporter: cl...@chromium.org
$0
10/7/2020

gpu_swangle_passthrough_fuzzer: Heap-buffer-overflow in libvk_swiftshader.so

#40052580•Reporter: cl...@chromium.org
$0
10/2/2020

WebFrameImpl::CallJavaScriptFunction allows child frames to inject scripts into parent.

#40052662•Reporter: ah...@microsoft.com
$0
10/2/2020

heap-use-after-free : content::NavigationRequest::OnWillProcessResponseProcessed

#40052472•Reporter: cr...@system.gserviceaccount.com
$0
9/30/2020

Security: PDFium Heap-use-after-free in ProbeForLowSeverityLifetimeIssue (XFA)

#40096081•Reporter: cn...@chromium.org
$0
9/25/2020
Showing 8641-8650 of 13102 bugs