Disclosed Chromium Security Bugs

libANGLE buffer-overflow (part of pwn2own exploit)

#40083889•Reporter: in...@chromium.org
$0
6/29/2016

Crash in v8::internal::InnerPointerToCodeCache::GcSafeFindCodeForInnerPointer

#40083887•Reporter: de...@googlemail.com
$3,500
6/24/2016

Internal object leak in ModuleSystem::RequireForJsInner => Universal XSS

#40083765•Reporter: se...@gmail.com
$7,500
6/17/2016

Heap-use-after-free in blink::FrameView::performLayout

#40083779•Reporter: cl...@chromium.org
$3,500
6/9/2016

ASSERTION FAILED: value.isPrimitiveValue()

#40083771•Reporter: cl...@chromium.org
$0
6/7/2016

Use-of-uninitialized-value in S32A_Opaque_BlitRow32_SSE4

#40083487•Reporter: at...@gmail.com
$1,000
5/27/2016

Heap-use-after-free in blink::InlineFlowBox::addToLine

#40083689•Reporter: at...@gmail.com
$3,500
5/26/2016

Negative-size-param in SkRBufferWithSizeCheck::read

#40083588•Reporter: cl...@chromium.org
$0
5/12/2016

Crash (assert) in blink::AudioDelayDSPKernel::process

#40083582•Reporter: at...@gmail.com
$1,500
5/10/2016

[MD audit] Problems with video messages and sizes

#40080850•Reporter: sc...@gmail.com
$0
5/5/2010
Showing 9201-9210 of 13102 bugs
1...920921922...1311