Disclosed Chromium Security Bugs

Security: V8: Incorrect type information on SpeculativeSafeIntegerSubtract

#40093360Reporter: ja...@gmail.com
$5,000
3/19/2019

Heap-use-after-free in dawn_native::DeviceBase::Release

#40093335Reporter: cl...@chromium.org
$0
3/16/2019

Heap-use-after-free in dawn_native::DeviceBase::Release

#40093336Reporter: cl...@chromium.org
$0
3/16/2019

Use-of-uninitialized-value in dawn_native::DeviceBase::Release

#40093338Reporter: cl...@chromium.org
$0
3/16/2019

Heap-use-after-free in viz::HostFrameSinkManager::InvalidateFrameSinkId

#40093143Reporter: cl...@chromium.org
$0
3/15/2019

Crash in dawn_native::BufferBase::SetSubData

#40093210Reporter: cl...@chromium.org
$0
3/14/2019

Bad-cast to dawn_native::DeviceBase from invalid vptr in dawn_native::ValidatingDeviceRelease

#40093305Reporter: cl...@chromium.org
$0
3/14/2019

Heap-use-after-free in dawn_native::DeviceBase::Release

#40093144Reporter: cl...@chromium.org
$0
3/13/2019

Use-of-uninitialized-value in dawn_native::DeviceBase::Release

#40093148Reporter: cl...@chromium.org
$0
3/13/2019

Heap-use-after-free in dawn_native::DeviceBase::Release

#40093149Reporter: cl...@chromium.org
$0
3/13/2019
Showing 8891-8900 of 13102 bugs