Disclosed Chromium Security Bugs

Heap-use-after-free in Lookup,

#40091338•Reporter: cl...@chromium.org
$0
8/16/2018

Bad-cast to blink::LayoutBox from invalid vptr in blink::LayoutBlockFlow::XPositionForFloatIncludingMargin

#40091160•Reporter: cl...@chromium.org
$0
8/7/2018

Heap-buffer-overflow in angle::LoadToNative

#40091191•Reporter: w3...@gmail.com
$1,500
8/1/2018

Security: ANGLE LoadToNative memory corruption

#40090971•Reporter: om...@krashconsulting.com
$1,000
7/25/2018

Out-of-bounds read in Promise

#40091060•Reporter: l....@gmail.com
$0
7/25/2018

Security: SEE_MASK_FLAG_NO_UI behavior changes in Windows 10, allowing SmartScreen bypass

#40090721•Reporter: jk...@cornell.edu
$500
7/19/2018

CHECK failure: Type cast failed in CAST(properties) at ../../src/code-stub-assembler.cc:1412 in

#40091021•Reporter: cl...@chromium.org
$0
7/13/2018

Uninitialized variable usage in ANGLE may cause a memory disclosure

#40090901•Reporter: al...@gmail.com
$500
7/3/2018

Security: Bug in BoringSSL P-256 point_add

#40090896•Reporter: da...@xcx.cc
$500
6/30/2018

CHECK failure: InstructionSelector::SupportsSpeculationPoisoning() in pipeline.cc

#40090763•Reporter: cl...@chromium.org
$0
6/28/2018
Showing 8951-8960 of 13102 bugs
1...895896897...1311