Disclosed Chromium Security Bugs

ThinStrings are incompatible with TurboFan SeqString types

#40090807•Reporter: bm...@chromium.org
$0
6/22/2018

OOB read/write using Array.prototype.from

#40090764•Reporter: mb...@chromium.org
$0
6/21/2018

DCHECK failure in op->opcode() == IrOpcode::kStateValues || op->opcode() == IrOpcode::kTypedStateV

#40090694•Reporter: cl...@chromium.org
$0
6/16/2018

Bad-cast to v8::internal::compiler::Operator1, v8::internal::compiler::OpHash > from v8::internal::compiler::Operator1, v8::internal::compiler::OpHash > in int const& v8::internal::compiler::OpParameter

#40090687•Reporter: cl...@chromium.org
$0
6/12/2018

Bad-cast to v8::internal::compiler::Operator1, v8::internal::compiler::OpHash > from v8::internal::compiler::Operator1, v8::internal::compiler::OpHash > in OpParameter

#40090666•Reporter: cl...@chromium.org
$0
6/9/2018

Stack-buffer-overflow in CFX_MemoryStream::ReadBlock

#40090468•Reporter: cl...@chromium.org
$0
5/25/2018

Chrome for Android - Window.open combined with the onbeforeunload dialog crashes Chrome's WebView render

#40090046•Reporter: he...@gmail.com
$2,000
5/17/2018

DCHECK failure in op->IsAnyLocationOperand() in instruction.h

#40090195•Reporter: cl...@chromium.org
$0
5/11/2018

Security: heap-use-after-free blink::AudioSummingJunction::UpdateRenderingState

#40089489•Reporter: om...@krashconsulting.com
$3,000
5/10/2018

Security: PDFium: Out-Of-Bounds Read in GetDWord_LSBFirst

#40084446•Reporter: st...@gmail.com
$0
5/8/2018
Showing 8961-8970 of 13102 bugs
1...896897898...1311