Disclosed Chromium Security Bugs

Security of media-router built-in extension relies on untrustworthy MessageSender.id

#40051399•Reporter: gl...@google.com
$0
5/12/2020

UI/URL Spoofing by opening popups and putting the background page into fullscreen

#40091613•Reporter: he...@gmail.com
$3,000
5/7/2020

requestFullscreen should consume user activation to prevent UI/URL spoofing

#40091651•Reporter: he...@gmail.com
$1,000
5/7/2020

Security: URL bar spoofing on iOS

#40050175•Reporter: ch...@gmail.com
$500
5/6/2020

Security: OOB access in ReadableStream::Close

#40051366•Reporter: gl...@google.com
$0
5/6/2020

dawn_wire_server_and_vulkan_backend_fuzzer: Null-dereference READ in dawn_native::DeviceBase::BaseDestructor

#40051276•Reporter: cl...@chromium.org
$0
5/2/2020

Security: SQLite 3.30.1 CVE-2019-19923 - NULL pointer dereference (or incorrect results)

#40051256•Reporter: ri...@sap.com
$0
4/30/2020

Security: SQLite CVE-2019-19926

#40051261•Reporter: ri...@sap.com
$500
4/30/2020

Security: Data race in AudioArray::Allocate can lead to OOB access

#40051266•Reporter: gl...@google.com
$0
4/30/2020

Security: More UaFs in WebAudio

#40051247•Reporter: gl...@google.com
$0
4/24/2020
Showing 8701-8710 of 13102 bugs