Disclosed Chromium Security Bugs

Fatal error in ../../v8/src/compiler/representation-change.cc, line 1055

#40088378Reporter: mg...@gmail.com
$3,000
10/27/2017

CHECK failure: #28:JSStackCheck should be followed by IfSuccess/IfException, but is only follow

#40088433Reporter: cl...@chromium.org
$0
10/27/2017

CHECK failure: dependent_code()->IsEmpty(DependentCode::kPrototypeCheckGroup) in objects-debug.

#40088314Reporter: cl...@chromium.org
$0
10/24/2017

Heap-buffer-overflow in gl::Texture::getWidth

#40088302Reporter: cl...@chromium.org
$0
10/22/2017

Use-after-poison in v8::internal::compiler::InstructionSelector::EmitTableSwitch

#40088188Reporter: cl...@chromium.org
$0
10/18/2017

CHECK failure: !v8::internal::FLAG_enable_slow_asserts || (IsDereferenceAllowed(INCLUDE_DEFERRE

#40088303Reporter: cl...@chromium.org
$0
10/16/2017

Ill in v8::internal::TranslatedState::MaterializeCapturedObjectAt

#40088044Reporter: cl...@chromium.org
$0
9/19/2017

Security: Omnibox scrolls RTL domains off-screen (spoofing)

#40085709Reporter: ja...@gmail.com
$1,000
8/29/2017

Type Confusion In Chrome Lead to RCE

#40087661Reporter: so...@gmail.com
$7,500
8/25/2017

Use-of-uninitialized-value in u_strToUTF8WithSub_56

#40084495Reporter: cl...@chromium.org
$0
8/24/2017
Showing 9031-9040 of 13102 bugs