{ "error": null, "result": [ { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1320854, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1318610, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1310597, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1306751, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1310038, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1306968, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1303552, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1266953, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1853", "date": "Thu, 12 May 2022 00:00:00 GMT", "description": "Use after free in Indexed DB. Reported by Anonymous", "issue_id": 1324864, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Critical" }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1320614, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1312563, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1298867, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1309583, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1856", "date": "Fri, 06 May 2022 00:00:00 GMT", "description": "Use after free in User Education. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab ", "issue_id": 1323239, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "High" }, { "cve": "CVE-2022-1870", "date": "Fri, 06 May 2022 00:00:00 GMT", "description": "Use after free in App Service. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab ", "issue_id": 1323236, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1859", "date": "Thu, 05 May 2022 00:00:00 GMT", "description": "Use after free in Performance Manager. Reported by Guannan Wang (@Keenan7310) of Tencent Security Xuanwu Lab", "issue_id": 1322744, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$1000", "severity": "High" }, { "cve": "CVE-2022-1864", "date": "Thu, 28 Apr 2022 00:00:00 GMT", "description": "Use after free in WebApp Installs. Reported by Yuntao You (@GraVity0) of Bytedance Wuheng Lab", "issue_id": 1320624, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2022-1640", "date": "Thu, 28 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1320592, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1854", "date": "Wed, 27 Apr 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1320024, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2022-1635", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "Use after free in Permission Prompts. Reported by Anonymous", "issue_id": 1319797, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$3000", "severity": "High" }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1313709, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1312016, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1301117, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1300995, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1296334, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1639", "date": "Tue, 19 Apr 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1317650, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1633", "date": "Mon, 18 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharesheet. Reported by Khalil Zhani", "issue_id": 1316990, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-1638", "date": "Sun, 17 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in V8 Internationalization. Reported by DoHyun Lee (@l33d0hyun) of DNSLab, Korea University", "issue_id": 1316946, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1861", "date": "Sat, 16 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Khalil Zhani", "issue_id": 1316846, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Thu, 14 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1314184, "post_url": "https://chromereleases.googleblog.com/2022/04/chrome-for-android-update_01436352408.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1364", "date": "Wed, 13 Apr 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Clément Lecigne of Google's Threat Analysis Group", "issue_id": 1315901, "post_url": "https://chromereleases.googleblog.com/2022/04/chrome-for-android-update_01436352408.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-1867", "date": "Tue, 12 Apr 2022 00:00:00 GMT", "description": "Insufficient validation of untrusted input in Data Transfer. Reported by Michał Bentkowski of Securitum", "issue_id": 1315563, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2022-1492", "date": "Mon, 11 Apr 2022 00:00:00 GMT", "description": "Insufficient data validation in Blink Editing. Reported by Michał Bentkowski of Securitum", "issue_id": 1315040, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium" }, { "cve": "none", "date": "Mon, 11 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1292905, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1634", "date": "Sat, 09 Apr 2022 00:00:00 GMT", "description": "Use after free in Browser UI. Reported by Khalil Zhani", "issue_id": 1314908, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$3000", "severity": "High" }, { "cve": "CVE-2022-1483", "date": "Fri, 08 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in WebGPU. Reported by Mark Brand of Google Project Zero", "issue_id": 1314754, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-1486", "date": "Fri, 08 Apr 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Brendon Tiszka", "issue_id": 1314616, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7500", "severity": "Medium" }, { "cve": "CVE-2022-1858", "date": "Thu, 07 Apr 2022 00:00:00 GMT", "description": "Out of bounds read in DevTools. Reported by EllisVlad", "issue_id": 1314310, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$1000", "severity": "High" }, { "cve": "CVE-2022-1876", "date": "Wed, 06 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in DevTools. Reported by @ginggilBesel", "issue_id": 1313600, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Low" }, { "cve": "CVE-2022-1477", "date": "Wed, 06 Apr 2022 00:00:00 GMT", "description": "Use after free in Vulkan. Reported by SeongHwan Park (SeHwa)", "issue_id": 1313905, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2022-1637", "date": "Thu, 31 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Web Contents. Reported by Alesandro Ortiz", "issue_id": 1311820, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1312", "date": "Wed, 30 Mar 2022 00:00:00 GMT", "description": "Use after free in storage. Reported by Leecraso and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1311701, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1232", "date": "Wed, 30 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1311641, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High" }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1305234, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1304659, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1278260, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1083835, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1311", "date": "Mon, 28 Mar 2022 00:00:00 GMT", "description": "Use after free in Chrome OS shell. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab", "issue_id": 1310717, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1872", "date": "Sat, 26 Mar 2022 00:00:00 GMT", "description": "Insufficient policy enforcement in Extensions API. Reported by ChaobinZhang", "issue_id": 1310461, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$7000", "severity": "Low" }, { "cve": "CVE-2022-1869", "date": "Wed, 23 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab", "issue_id": 1309467, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$NA", "severity": "Medium" }, { "cve": "CVE-2022-1096", "date": "Wed, 23 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by anonymous", "issue_id": 1309225, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1871", "date": "Mon, 21 Mar 2022 00:00:00 GMT", "description": "Insufficient policy enforcement in File System API. Reported by Thomas Orlita ", "issue_id": 1308199, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$7000", "severity": "Low" }, { "cve": "CVE-2022-1134", "date": "Mon, 21 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab", "issue_id": 1308360, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1310", "date": "Fri, 18 Mar 2022 00:00:00 GMT", "description": "Use after free in regular expressions. Reported by Brendon Tiszka ", "issue_id": 1307610, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1875", "date": "Tue, 15 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in PDF. Reported by NDevTK", "issue_id": 1306443, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$500", "severity": "Low" }, { "cve": "CVE-2022-1496", "date": "Tue, 15 Mar 2022 00:00:00 GMT", "description": "Use after free in File Manager. Reported by Zhiyi Zhang and Zhunki from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1306391, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium" }, { "cve": "none", "date": "Tue, 15 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1296876, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1133", "date": "Sun, 13 Mar 2022 00:00:00 GMT", "description": "Use after free in WebRTC. Reported by Anonymous", "issue_id": 1305776, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1491", "date": "Sat, 12 Mar 2022 00:00:00 GMT", "description": "Use after free in Bookmarks. Reported by raven at KunLun lab", "issue_id": 1305706, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2022-1873", "date": "Fri, 11 Mar 2022 00:00:00 GMT", "description": "Insufficient policy enforcement in COOP. Reported by NDevTK", "issue_id": 1305394, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$2000", "severity": "Low" }, { "cve": "CVE-2022-1641", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Use after free in Web UI Diagnostics. Reported by Rong Jian of VRI", "issue_id": 1305068, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2022-1479", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by Jeonghoon Shin of Theori", "issue_id": 1305190, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-1482", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in WebGL. Reported by Christoph Diehl, Microsoft", "issue_id": 1304987, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-1487", "date": "Wed, 09 Mar 2022 00:00:00 GMT", "description": "Use after free in Ozone. Reported by Sri", "issue_id": 1304368, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "Medium" }, { "cve": "CVE-2022-1314", "date": "Wed, 09 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Bohan Liu (@P4nda20371774) and exp-sky of Tencent Security Xuanwu Lab", "issue_id": 1304658, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1145", "date": "Wed, 09 Mar 2022 00:00:00 GMT", "description": "Use after free in Extensions. Reported by Yakun Zhang of Baidu Security", "issue_id": 1304545, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1144", "date": "Tue, 08 Mar 2022 00:00:00 GMT", "description": "Use after free in WebUI. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1304145, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1132", "date": "Mon, 07 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Virtual Keyboard. Reported by Andr.Ess", "issue_id": 1303410, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1142", "date": "Mon, 07 Mar 2022 00:00:00 GMT", "description": "Heap buffer overflow in WebUI. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1303613, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1143", "date": "Mon, 07 Mar 2022 00:00:00 GMT", "description": "Heap buffer overflow in WebUI. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1303615, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1141", "date": "Sat, 05 Mar 2022 00:00:00 GMT", "description": "Use after free in File Manager. Reported by raven at KunLun lab", "issue_id": 1303253, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1481", "date": "Fri, 04 Mar 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1302949, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-1488", "date": "Fri, 04 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Extensions API. Reported by Thomas Beverley from Wavebox.io", "issue_id": 1302959, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2022-0979", "date": "Thu, 03 Mar 2022 00:00:00 GMT", "description": "Use after free in Safe Browsing. Reported by anonymous", "issue_id": 1302644, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0980", "date": "Wed, 02 Mar 2022 00:00:00 GMT", "description": "Use after free in New Tab Page. Reported by Krace", "issue_id": 1302157, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1490", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Use after free in Browser Switcher. Reported by raven at KunLun lab", "issue_id": 1301840, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2022-1307", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in full screen. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1301873, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$3000", "severity": "High" }, { "cve": "CVE-2022-1128", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Web Share API. Reported by Abdel Adim (@smaury92) Oisfi of Shielder", "issue_id": 1301920, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "High" }, { "cve": "none", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1259596, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1868", "date": "Mon, 28 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in Extensions API. Reported by Alesandro Ortiz", "issue_id": 1301203, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1495", "date": "Mon, 28 Feb 2022 00:00:00 GMT", "description": "Incorrect security UI in Downloads. Reported by Umar Farooq ", "issue_id": 1301180, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2022-0972", "date": "Mon, 28 Feb 2022 00:00:00 GMT", "description": "Use after free in Extensions. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1301320, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-1489", "date": "Fri, 25 Feb 2022 00:00:00 GMT", "description": "Out of bounds memory access in UI Shelf. Reported by Khalil Zhani", "issue_id": 1300561, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2022-1129", "date": "Thu, 24 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in Full Screen Mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1300253, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$3000", "severity": "High" }, { "cve": "CVE-2022-1485", "date": "Tue, 22 Feb 2022 00:00:00 GMT", "description": "Use after free in File System API. Reported by Anonymous", "issue_id": 1299743, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7500", "severity": "Medium" }, { "cve": "CVE-2022-1306", "date": "Mon, 21 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in compositing. Reported by Sven Dysthe", "issue_id": 1299287, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$3000", "severity": "High" }, { "cve": "CVE-2022-0971", "date": "Mon, 21 Feb 2022 00:00:00 GMT", "description": "Use after free in Blink Layout. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1299422, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$NA", "severity": "Critical" }, { "cve": "CVE-2022-1478", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in SwiftShader. Reported by SeongHwan Park (SeHwa)", "issue_id": 1299261, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0977", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in Browser UI. Reported by Khalil Zhani", "issue_id": 1299225, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$3000", "severity": "High" }, { "cve": "CVE-2022-0978", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1299264, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1494", "date": "Thu, 17 Feb 2022 00:00:00 GMT", "description": "Insufficient data validation in Trusted Types. Reported by Masato Kinugawa", "issue_id": 1298122, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium" }, { "cve": "none", "date": "Tue, 15 Feb 2022 15:14:15 GMT", "description": "internal security issue", "issue_id": 1297764, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1860", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in UI Foundations. Reported by @ginggilBesel", "issue_id": 1297209, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-1636", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Performance APIs. Reported by Seth Brenith, Microsoft ", "issue_id": 1297283, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-1484", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Heap buffer overflow in Web UI Settings. Reported by Chaoyuan Peng (@ret2happy)", "issue_id": 1297429, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7500", "severity": "Medium" }, { "cve": "CVE-2022-1131", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Cast UI. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1297404, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-0973", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Safe Browsing. Reported by avaue and Buff3tts at S.S.L.", "issue_id": 1297498, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$15000", "severity": "High" }, { "cve": "CVE-2022-1498", "date": "Mon, 14 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in HTML Parser. Reported by SeungJu Oh (@real_as3617)", "issue_id": 1297138, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$500", "severity": "Low" }, { "cve": "CVE-2022-0976", "date": "Sun, 13 Feb 2022 00:00:00 GMT", "description": "Heap buffer overflow in GPU. Reported by Omair", "issue_id": 1296866, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0609", "date": "Thu, 10 Feb 2022 06:30:28 GMT", "description": "Use after free in Animation. Reported by Adam Weidemann and Clément Lecigne of Google's Threat Analysis Group", "issue_id": 1296150, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-0796", "date": "Wed, 09 Feb 2022 10:32:10 GMT", "description": "Use after free in Media. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1295786, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-0975", "date": "Wed, 09 Feb 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1295411, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0794", "date": "Thu, 03 Feb 2022 19:31:47 GMT", "description": "Use after free in WebShare. Reported by Khalil Zhani", "issue_id": 1294097, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0809", "date": "Thu, 03 Feb 2022 00:00:00 GMT", "description": "Out of bounds memory access in WebXR. Reported by @uwu7586", "issue_id": 1293428, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1501", "date": "Wed, 02 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in iframe. Reported by Oriol Brufau", "issue_id": 1293191, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "Low" }, { "cve": "CVE-2022-1863", "date": "Tue, 01 Feb 2022 00:00:00 GMT", "description": "Use after free in Tab Groups. Reported by David Erceg", "issue_id": 1292870, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$5000", "severity": "Medium" }, { "cve": "none", "date": "Mon, 31 Jan 2022 08:48:57 GMT", "description": "internal security issue", "issue_id": 1292537, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1866", "date": "Sat, 29 Jan 2022 00:00:00 GMT", "description": "Use after free in Tablet Mode. Reported by @ginggilBesel", "issue_id": 1292264, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2022-1125", "date": "Sat, 29 Jan 2022 00:00:00 GMT", "description": "Use after free in Portals. Reported by Khalil Zhani", "issue_id": 1292261, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0808", "date": "Fri, 28 Jan 2022 23:57:31 GMT", "description": "Use after free in Chrome OS Shell. Reported by @ginggilBesel", "issue_id": 1292271, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1127", "date": "Fri, 28 Jan 2022 00:00:00 GMT", "description": "Use after free in QR Code Generator. Reported by anonymous", "issue_id": 1291891, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-0974", "date": "Fri, 28 Jan 2022 00:00:00 GMT", "description": "Use after free in Splitscreen. Reported by @ginggilBesel", "issue_id": 1291986, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0793", "date": "Thu, 27 Jan 2022 14:51:35 GMT", "description": "Use after free in Views. Reported by Thomas Orlita", "issue_id": 1291728, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High" }, { "cve": "none", "date": "Wed, 26 Jan 2022 23:46:04 GMT", "description": "internal security issue", "issue_id": 1291482, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0805", "date": "Mon, 24 Jan 2022 22:40:35 GMT", "description": "Use after free in Browser Switcher. Reported by raven at KunLun Lab", "issue_id": 1290700, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2022-1146", "date": "Sun, 23 Jan 2022 07:59:22 GMT", "description": "Inappropriate implementation in Resource Timing. Reported by Sohom Datta", "issue_id": 1290150, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Low" }, { "cve": "CVE-2022-0603", "date": "Sat, 22 Jan 2022 03:21:42 GMT", "description": "Use after free in File Manager. Reported by Chaoyuan Peng (@ret2happy)", "issue_id": 1290008, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$15000", "severity": "High" }, { "cve": "CVE-2022-1137", "date": "Fri, 21 Jan 2022 14:36:30 GMT", "description": "Inappropriate implementation in Extensions. Reported by Thomas Orlita ", "issue_id": 1289846, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "Medium" }, { "cve": "none", "date": "Fri, 21 Jan 2022 06:50:16 GMT", "description": "internal security issue", "issue_id": 1289678, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0456", "date": "Thu, 20 Jan 2022 22:06:47 GMT", "description": "Use after free in Web Search. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1289523, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High" }, { "cve": "none", "date": "Thu, 20 Jan 2022 13:57:38 GMT", "description": "internal security issue", "issue_id": 1289394, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Thu, 20 Jan 2022 13:44:06 GMT", "description": "internal security issue", "issue_id": 1289384, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0789", "date": "Thu, 20 Jan 2022 13:43:36 GMT", "description": "Heap buffer overflow in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1289383, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High" }, { "cve": "none", "date": "Thu, 20 Jan 2022 13:32:33 GMT", "description": "internal security issue", "issue_id": 1289378, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1865", "date": "Thu, 20 Jan 2022 00:00:00 GMT", "description": "Use after free in Bookmarks. Reported by Rong Jian of VRI", "issue_id": 1289192, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2022-0606", "date": "Mon, 17 Jan 2022 06:45:57 GMT", "description": "Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1288020, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0454", "date": "Mon, 17 Jan 2022 02:24:11 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Seong-Hwan Park (SeHwa)", "issue_id": 1287962, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$12000", "severity": "High" }, { "cve": "CVE-2022-0807", "date": "Thu, 13 Jan 2022 21:25:38 GMT", "description": "Inappropriate implementation in Autofill. Reported by Alesandro Ortiz", "issue_id": 1287364, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-0605", "date": "Wed, 12 Jan 2022 16:40:44 GMT", "description": "Use after free in Webstore API. Reported by Thomas Orlita ", "issue_id": 1286940, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High" }, { "cve": "none", "date": "Wed, 12 Jan 2022 10:31:35 GMT", "description": "internal security issue", "issue_id": 1286816, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0792", "date": "Mon, 10 Jan 2022 08:41:17 GMT", "description": "Out of bounds read in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1285885, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-1135", "date": "Sat, 08 Jan 2022 08:11:44 GMT", "description": "Use after free in Shopping Cart. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1285601, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$16000", "severity": "Medium" }, { "cve": "CVE-2022-0610", "date": "Sat, 08 Jan 2022 00:00:00 GMT", "description": "Inappropriate implementation in Gamepad API. Reported by Anonymous", "issue_id": 1285449, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-1305", "date": "Fri, 07 Jan 2022 00:00:00 GMT", "description": "Use after free in storage. Reported by Anonymous", "issue_id": 1285234, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$6000", "severity": "High" }, { "cve": "CVE-2022-0453", "date": "Thu, 06 Jan 2022 03:00:48 GMT", "description": "Use after free in Reader Mode. Reported by Rong Jian of VRI", "issue_id": 1284916, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2022-0452", "date": "Wed, 05 Jan 2022 04:08:17 GMT", "description": "Use after free in Safe Browsing. Reported by avaue at S.S.L.", "issue_id": 1284584, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2022-0289", "date": "Tue, 04 Jan 2022 09:56:09 GMT", "description": "Use after free in Safe browsing. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1284367, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "Critical" }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1262967, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1262516, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1155297, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1260869, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0311", "date": "Sun, 02 Jan 2022 15:19:53 GMT", "description": "Heap buffer overflow in Task Manager. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1283807, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-0806", "date": "Thu, 30 Dec 2021 08:27:26 GMT", "description": "Data leak in Canvas. Reported by Paril", "issue_id": 1283434, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2022-0798", "date": "Thu, 30 Dec 2021 04:04:03 GMT", "description": "Use after free in MediaStream. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1283402, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$15000", "severity": "Medium" }, { "cve": "CVE-2022-0296", "date": "Thu, 30 Dec 2021 01:57:23 GMT", "description": "Use after free in Printing. Reported by koocola(@alo_cook) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1283375, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2022-0293", "date": "Thu, 30 Dec 2021 01:28:13 GMT", "description": "Use after free in Web packaging. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1283371, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$15000", "severity": "High" }, { "cve": "none", "date": "Wed, 29 Dec 2021 12:09:20 GMT", "description": "internal security issue", "issue_id": 1283255, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0306", "date": "Wed, 29 Dec 2021 04:35:13 GMT", "description": "Heap buffer overflow in PDFium. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1283198, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-1308", "date": "Tue, 28 Dec 2021 00:00:00 GMT", "description": "Use after free in BFCache. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1283050, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$1000", "severity": "High" }, { "cve": "CVE-2022-0795", "date": "Sun, 26 Dec 2021 08:16:55 GMT", "description": "Type Confusion in Blink Layout. Reported by 0x74960", "issue_id": 1282782, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-0308", "date": "Thu, 23 Dec 2021 09:14:14 GMT", "description": "Use after free in Data Transfer. Reported by @ginggilBesel", "issue_id": 1282480, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2022-0305", "date": "Thu, 23 Dec 2021 00:00:00 GMT", "description": "Inappropriate implementation in Service Worker API. Reported by @uwu7586", "issue_id": 1282354, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0304", "date": "Wed, 22 Dec 2021 01:21:08 GMT", "description": "Use after free in Bookmarks. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1282118, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0465", "date": "Tue, 21 Dec 2021 09:43:10 GMT", "description": "Use after free in Extensions. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1281941, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2022-0797", "date": "Tue, 21 Dec 2021 07:30:46 GMT", "description": "Out of bounds memory access in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1281908, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-0307", "date": "Tue, 21 Dec 2021 05:48:28 GMT", "description": "Use after free in Optimization Guide. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1281881, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2022-0291", "date": "Sun, 19 Dec 2021 00:00:00 GMT", "description": "Inappropriate implementation in Storage. Reported by Anonymous", "issue_id": 1281084, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$20000", "severity": "High" }, { "cve": "none", "date": "Thu, 16 Dec 2021 22:05:59 GMT", "description": "internal security issue", "issue_id": 1280852, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Thu, 16 Dec 2021 12:42:37 GMT", "description": "internal security issue", "issue_id": 1280743, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0803", "date": "Wed, 15 Dec 2021 04:24:20 GMT", "description": "Inappropriate implementation in Permissions. Reported by Abdulla Aldoseri", "issue_id": 1280233, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2022-1136", "date": "Wed, 15 Dec 2021 00:00:00 GMT", "description": "Use after free in Tab Strip . Reported by Krace", "issue_id": 1280205, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$7000", "severity": "Medium" }, { "cve": "CVE-2022-0469", "date": "Mon, 13 Dec 2021 12:05:07 GMT", "description": "Use after free in Cast. Reported by Thomas Orlita", "issue_id": 1279531, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-0799", "date": "Sun, 12 Dec 2021 04:48:25 GMT", "description": "Insufficient policy enforcement in Installer. Reported by Abdelhamid Naceri (halov)", "issue_id": 1279188, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "Medium" }, { "cve": "none", "date": "Sat, 11 Dec 2021 18:56:03 GMT", "description": "internal security issue", "issue_id": 1279147, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0106", "date": "Fri, 10 Dec 2021 15:41:14 GMT", "description": "Use after free in Autofill. Reported by Khalil Zhani", "issue_id": 1278960, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0302", "date": "Thu, 09 Dec 2021 20:49:39 GMT", "description": "Use after free in Omnibox. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1278613, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Thu, 09 Dec 2021 18:42:41 GMT", "description": "internal security issue", "issue_id": 1278589, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0791", "date": "Thu, 09 Dec 2021 06:04:19 GMT", "description": "Use after free in Omnibox. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1278322, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2021-4102", "date": "Thu, 09 Dec 2021 00:00:00 GMT", "description": "Use after free in V8. Reported by Anonymous", "issue_id": 1278387, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0295", "date": "Wed, 08 Dec 2021 18:52:05 GMT", "description": "Use after free in Omnibox. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1278180, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High" }, { "cve": "none", "date": "Wed, 08 Dec 2021 03:39:52 GMT", "description": "internal security issue", "issue_id": 1277917, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Mon, 06 Dec 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1271302, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Mon, 06 Dec 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1262750, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0301", "date": "Fri, 03 Dec 2021 01:25:09 GMT", "description": "Heap buffer overflow in DevTools. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1276331, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2022-1493", "date": "Wed, 01 Dec 2021 00:00:00 GMT", "description": "Use after free in Dev Tools. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1275414, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2022-0300", "date": "Tue, 30 Nov 2021 23:06:03 GMT", "description": "Use after free in Text Input Method Editor. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1275438, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0096", "date": "Tue, 30 Nov 2021 00:42:10 GMT", "description": "Use after free in Storage. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1275020, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Critical" }, { "cve": "CVE-2021-4067", "date": "Mon, 29 Nov 2021 09:49:28 GMT", "description": "Use after free in window manager. Reported by @ginggilBesel", "issue_id": 1274641, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-4066", "date": "Mon, 29 Nov 2021 01:13:05 GMT", "description": "Integer underflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1274499, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0457", "date": "Sun, 28 Nov 2021 18:18:35 GMT", "description": "Type Confusion in V8. Reported by rax of the Group0x58", "issue_id": 1274445, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-0105", "date": "Sun, 28 Nov 2021 09:32:41 GMT", "description": "Use after free in PDF. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1274376, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0297", "date": "Sun, 28 Nov 2021 00:45:31 GMT", "description": "Use after free in Vulkan. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1274316, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "High" }, { "cve": "none", "date": "Fri, 26 Nov 2021 05:22:13 GMT", "description": "internal security issue", "issue_id": 1274113, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-4065", "date": "Wed, 24 Nov 2021 18:09:45 GMT", "description": "Use after free in autofill. Reported by 5n1p3r0010 from Topsec ChiXiao Lab", "issue_id": 1273674, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0104", "date": "Wed, 24 Nov 2021 17:04:01 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Abraruddin Khan and Omair", "issue_id": 1273661, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0098", "date": "Wed, 24 Nov 2021 13:14:29 GMT", "description": "Use after free in Screen Capture. Reported by @ginggilBesel", "issue_id": 1273609, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High" }, { "cve": "none", "date": "Wed, 24 Nov 2021 09:39:33 GMT", "description": "internal security issue", "issue_id": 1273537, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0604", "date": "Wed, 24 Nov 2021 03:35:45 GMT", "description": "Heap buffer overflow in Tab Groups. Reported by Krace", "issue_id": 1273397, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2021-4064", "date": "Tue, 23 Nov 2021 13:17:21 GMT", "description": "Use after free in screen capture. Reported by @ginggilBesel", "issue_id": 1273197, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-4063", "date": "Tue, 23 Nov 2021 11:52:21 GMT", "description": "Use after free in developer tools. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1273176, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0294", "date": "Tue, 23 Nov 2021 03:12:24 GMT", "description": "Inappropriate implementation in Push messaging. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1273017, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2022-0790", "date": "Tue, 23 Nov 2021 00:00:00 GMT", "description": "Use after free in Cast UI. Reported by Anonymous", "issue_id": 1274077, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High" }, { "cve": "CVE-2021-4062", "date": "Mon, 22 Nov 2021 01:18:53 GMT", "description": "Heap buffer overflow in BFCache. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1272403, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0103", "date": "Sat, 20 Nov 2021 18:29:06 GMT", "description": "Use after free in SwiftShader. Reported by Abraruddin Khan and Omair ", "issue_id": 1272266, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0116", "date": "Sat, 20 Nov 2021 14:36:42 GMT", "description": "Inappropriate implementation in Compositing. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1272250, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-4100", "date": "Fri, 19 Nov 2021 13:04:56 GMT", "description": "Object lifecycle issue in ANGLE. Reported by Aki Helin of Solita", "issue_id": 1272068, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$5000", "severity": "High" }, { "cve": "none", "date": "Thu, 18 Nov 2021 16:54:04 GMT", "description": "internal security issue", "issue_id": 1271747, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-4061", "date": "Wed, 17 Nov 2021 16:19:34 GMT", "description": "Type Confusion in V8. Reported by Paolo Severini", "issue_id": 1271456, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-4059", "date": "Tue, 16 Nov 2021 18:12:41 GMT", "description": "Insufficient data validation in loader. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1270990, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-4099", "date": "Tue, 16 Nov 2021 00:40:15 GMT", "description": "Use after free in Swiftshader. Reported by Aki Helin of Solita", "issue_id": 1270658, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-1313", "date": "Tue, 16 Nov 2021 00:00:00 GMT", "description": "Use after free in tab groups. Reported by Thomas Orlita ", "issue_id": 1270539, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-0455", "date": "Mon, 15 Nov 2021 19:02:57 GMT", "description": "Inappropriate implementation in Full Screen Mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1270593, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High" }, { "cve": "none", "date": "Mon, 15 Nov 2021 13:57:20 GMT", "description": "internal security issue", "issue_id": 1270498, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0462", "date": "Mon, 15 Nov 2021 12:45:43 GMT", "description": "Inappropriate implementation in Scroll. Reported by Youssef Sammouda", "issue_id": 1270470, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2022-0292", "date": "Mon, 15 Nov 2021 09:29:52 GMT", "description": "Inappropriate implementation in Fenced Frames. Reported by Brendon Tiszka ", "issue_id": 1270358, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$17000", "severity": "High" }, { "cve": "CVE-2022-0608", "date": "Mon, 15 Nov 2021 08:06:43 GMT", "description": "Integer overflow in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1270333, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$NA", "severity": "High" }, { "cve": "none", "date": "Mon, 15 Nov 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1267085, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Mon, 15 Nov 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1258223, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0464", "date": "Sat, 13 Nov 2021 23:08:57 GMT", "description": "Use after free in Accessibility. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1270095, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2022-0802", "date": "Sat, 13 Nov 2021 12:18:45 GMT", "description": "Inappropriate implementation in Full screen mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1270052, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium" }, { "cve": "none", "date": "Fri, 12 Nov 2021 22:20:06 GMT", "description": "internal security issue", "issue_id": 1270014, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Fri, 12 Nov 2021 22:19:48 GMT", "description": "internal security issue", "issue_id": 1269999, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0470", "date": "Thu, 11 Nov 2021 03:41:41 GMT", "description": "Out of bounds memory access in V8. Reported by Looben Yang", "issue_id": 1269225, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low" }, { "cve": "none", "date": "Wed, 10 Nov 2021 20:28:20 GMT", "description": "internal security issue", "issue_id": 1269151, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0115", "date": "Wed, 10 Nov 2021 08:52:31 GMT", "description": "Uninitialized Use in File API. Reported by Mark Brand of Google Project Zero", "issue_id": 1268903, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "Medium" }, { "cve": "CVE-2022-1139", "date": "Wed, 10 Nov 2021 00:00:00 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by Maurice Dauer ", "issue_id": 1268541, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-4078", "date": "Tue, 09 Nov 2021 22:37:34 GMT", "description": "Type confusion in V8. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab", "issue_id": 1268738, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "none", "date": "Tue, 09 Nov 2021 08:28:59 GMT", "description": "internal security issue", "issue_id": 1268448, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-38011", "date": "Mon, 08 Nov 2021 22:50:54 GMT", "description": "Use after free in storage foundation. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1268274, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0463", "date": "Mon, 08 Nov 2021 19:28:05 GMT", "description": "Use after free in Accessibility. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1268240, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2021-4053", "date": "Sun, 07 Nov 2021 22:52:56 GMT", "description": "Use after free in UI. Reported by Rox", "issue_id": 1267791, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2021-4052", "date": "Sat, 06 Nov 2021 23:55:33 GMT", "description": "Use after free in web apps. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1267661, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$15000", "severity": "High" }, { "cve": "CVE-2022-0114", "date": "Sat, 06 Nov 2021 15:57:35 GMT", "description": "Out of bounds memory access in Web Serial. Reported by Looben Yang", "issue_id": 1267627, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-4058", "date": "Fri, 05 Nov 2021 18:24:48 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Abraruddin Khan and Omair ", "issue_id": 1267496, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Fri, 05 Nov 2021 14:49:41 GMT", "description": "internal security issue", "issue_id": 1267426, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0458", "date": "Fri, 05 Nov 2021 00:00:00 GMT", "description": "Use after free in Thumbnail Tab Strip. Reported by Anonymous", "issue_id": 1267060, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "High" }, { "cve": "CVE-2021-4055", "date": "Wed, 03 Nov 2021 10:58:16 GMT", "description": "Heap buffer overflow in extensions. Reported by Chen Rong", "issue_id": 1266510, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "High" }, { "cve": "CVE-2021-4079", "date": "Mon, 01 Nov 2021 22:50:20 GMT", "description": "Out of bounds write in WebRTC. Reported by Brendon Tiszka", "issue_id": 1265806, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$8500", "severity": "High" }, { "cve": "none", "date": "Mon, 01 Nov 2021 10:29:17 GMT", "description": "internal security issue", "issue_id": 1265570, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-4068", "date": "Sat, 30 Oct 2021 20:30:35 GMT", "description": "Insufficient validation of untrusted input in new tab page. Reported by NDevTK", "issue_id": 1265197, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$500", "severity": "Low" }, { "cve": "CVE-2022-1497", "date": "Fri, 29 Oct 2021 00:00:00 GMT", "description": "Inappropriate implementation in Input. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1264543, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "Medium" }, { "cve": "CVE-2022-0804", "date": "Thu, 28 Oct 2021 13:32:13 GMT", "description": "Inappropriate implementation in Full screen mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1264561, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$2500", "severity": "Medium" }, { "cve": "CVE-2021-38010", "date": "Thu, 28 Oct 2021 09:51:57 GMT", "description": "Inappropriate implementation in service workers. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1264477, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Wed, 27 Oct 2021 17:12:07 GMT", "description": "internal security issue", "issue_id": 1264196, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-38008", "date": "Tue, 26 Oct 2021 12:21:11 GMT", "description": "Use after free in media. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1263620, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-38003", "date": "Tue, 26 Oct 2021 06:07:14 GMT", "description": "Inappropriate implementation in V8. Reported by Clément Lecigne from Google TAG and Samuel Groß from Google Project Zero", "issue_id": 1263462, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High" }, { "cve": "CVE-2021-4098", "date": "Tue, 26 Oct 2021 05:35:00 GMT", "description": "Insufficient data validation in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1263457, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$NA", "severity": "Critical" }, { "cve": "CVE-2022-0120", "date": "Mon, 25 Oct 2021 03:37:43 GMT", "description": "Inappropriate implementation in Passwords. Reported by CHAKRAVARTHI (Ruler96)", "issue_id": 1262953, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low" }, { "cve": "CVE-2021-38012", "date": "Sat, 23 Oct 2021 22:06:50 GMT", "description": "Type Confusion in V8. Reported by Yonghwi Jin (@jinmo123)", "issue_id": 1262791, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$15000", "severity": "Medium" }, { "cve": "CVE-2021-4057", "date": "Thu, 21 Oct 2021 09:57:29 GMT", "description": "Use after free in file API. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1262183, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-4101", "date": "Thu, 21 Oct 2021 02:59:02 GMT", "description": "Heap buffer overflow in Swiftshader. Reported by Abraruddin Khan and Omair ", "issue_id": 1262080, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0109", "date": "Tue, 19 Oct 2021 19:20:46 GMT", "description": "Inappropriate implementation in Autofill. Reported by Young Min Kim (@ylemkimon), CompSec Lab at Seoul National University", "issue_id": 1261689, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$4000", "severity": "Medium" }, { "cve": "none", "date": "Tue, 19 Oct 2021 03:09:58 GMT", "description": "internal security issue", "issue_id": 1261415, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-38002", "date": "Mon, 18 Oct 2021 09:17:29 GMT", "description": "Use after free in Web Transport. Reported by @__R0ng of 360 Alpha Lab, 漏洞研究院青训队 via Tianfu Cup", "issue_id": 1260940, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High" }, { "cve": "CVE-2021-4056", "date": "Mon, 18 Oct 2021 09:14:41 GMT", "description": "Type Confusion in loader. Reported by @__R0ng of 360 Alpha Lab", "issue_id": 1260939, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-38009", "date": "Sat, 16 Oct 2021 12:59:49 GMT", "description": "Inappropriate implementation in cache. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1260649, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$2000", "severity": "High" }, { "cve": "CVE-2021-38001", "date": "Fri, 15 Oct 2021 19:04:27 GMT", "description": "Type Confusion in V8. Reported by @s0rrymybad of Kunlun Lab via Tianfu Cup", "issue_id": 1260577, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High" }, { "cve": "none", "date": "Thu, 14 Oct 2021 09:37:51 GMT", "description": "internal security issue", "issue_id": 1260007, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Thu, 14 Oct 2021 02:45:54 GMT", "description": "internal security issue", "issue_id": 1259899, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0102", "date": "Thu, 14 Oct 2021 00:00:00 GMT", "description": "Type Confusion in V8 . Reported by Brendon Tiszka", "issue_id": 1260129, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-37997", "date": "Wed, 13 Oct 2021 23:28:33 GMT", "description": "Use after free in Sign-In. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1259864, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2021-38020", "date": "Wed, 13 Oct 2021 11:09:00 GMT", "description": "Insufficient policy enforcement in contacts picker. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1259694, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2021-37998", "date": "Wed, 13 Oct 2021 04:54:23 GMT", "description": "Use after free in Garbage Collection. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1259587, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$7500", "severity": "High" }, { "cve": "none", "date": "Wed, 13 Oct 2021 02:39:38 GMT", "description": "internal security issue", "issue_id": 1259557, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Mon, 11 Oct 2021 10:46:08 GMT", "description": "internal security issue", "issue_id": 1258809, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Mon, 11 Oct 2021 06:13:45 GMT", "description": "internal security issue", "issue_id": 1258603, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Tue, 05 Oct 2021 11:42:57 GMT", "description": "internal security issue", "issue_id": 1256885, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-38017", "date": "Tue, 05 Oct 2021 09:01:14 GMT", "description": "Insufficient policy enforcement in iframe sandbox. Reported by NDevTK", "issue_id": 1256822, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$2500", "severity": "Medium" }, { "cve": "CVE-2022-0461", "date": "Tue, 05 Oct 2021 00:00:00 GMT", "description": "Policy bypass in COOP. Reported by NDevTK", "issue_id": 1256823, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2022-0112", "date": "Mon, 04 Oct 2021 09:07:12 GMT", "description": "Incorrect security UI in Browser UI. Reported by Thomas Orlita ", "issue_id": 1255713, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium" }, { "cve": "none", "date": "Sat, 02 Oct 2021 09:42:57 GMT", "description": "internal security issue", "issue_id": 1255368, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37993", "date": "Fri, 01 Oct 2021 21:46:39 GMT", "description": "Use after free in PDF Accessibility. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1255332, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-37980", "date": "Thu, 30 Sep 2021 00:07:14 GMT", "description": "Inappropriate implementation in Sandbox. Reported by Yonghwi Jin (@jinmo123) of Theori", "issue_id": 1254631, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "High" }, { "cve": "none", "date": "Wed, 29 Sep 2021 10:04:16 GMT", "description": "internal security issue", "issue_id": 1254422, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-38007", "date": "Tue, 28 Sep 2021 20:23:44 GMT", "description": "Type Confusion in V8. Reported by Polaris Feng and SGFvamll at Singular Security Lab", "issue_id": 1254189, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-37992", "date": "Mon, 27 Sep 2021 22:33:44 GMT", "description": "Out of bounds read in WebAudio. Reported by sunburst@Ant Security Light-Year Lab", "issue_id": 1253746, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-37984", "date": "Mon, 27 Sep 2021 09:45:08 GMT", "description": "Heap buffer overflow in PDFium. Reported by Antti Levomäki, Joonas Pihlaja and Christian Jalio from Forcepoint", "issue_id": 1253399, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-37977", "date": "Fri, 24 Sep 2021 11:13:31 GMT", "description": "Use after free in Garbage Collection. Reported by Anonymous", "issue_id": 1252878, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High" }, { "cve": "none", "date": "Fri, 24 Sep 2021 10:18:07 GMT", "description": "internal security issue", "issue_id": 1252858, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0468", "date": "Fri, 24 Sep 2021 03:06:21 GMT", "description": "Use after free in Payments. Reported by Krace", "issue_id": 1252716, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-37975", "date": "Fri, 24 Sep 2021 00:00:00 GMT", "description": "Use after free in V8. Reported by Anonymous", "issue_id": 1252918, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Thu, 23 Sep 2021 15:32:10 GMT", "description": "internal security issue", "issue_id": 1252562, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37976", "date": "Tue, 21 Sep 2021 14:52:58 GMT", "description": "Information leak in core. Reported by Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero", "issue_id": 1251787, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$NA", "severity": "Medium" }, { "cve": "CVE-2021-37973", "date": "Tue, 21 Sep 2021 12:40:48 GMT", "description": "Use after free in Portals. Reported by Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero", "issue_id": 1251727, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2021-37999", "date": "Tue, 21 Sep 2021 02:15:59 GMT", "description": "Insufficient data validation in New Tab Page. Reported by Ashish Arun Dhone", "issue_id": 1251541, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$1000", "severity": "High" }, { "cve": "CVE-2022-1874", "date": "Tue, 21 Sep 2021 00:00:00 GMT", "description": "Insufficient policy enforcement in Safe Browsing. Reported by hjy79425575", "issue_id": 1251588, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$500", "severity": "Low" }, { "cve": "CVE-2021-38019", "date": "Mon, 20 Sep 2021 07:53:00 GMT", "description": "Insufficient policy enforcement in CORS. Reported by Maurice Dauer", "issue_id": 1251179, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2021-37991", "date": "Fri, 17 Sep 2021 03:11:15 GMT", "description": "Race in V8. Reported by Samuel Groß of Google Project Zero", "issue_id": 1250660, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-0607", "date": "Fri, 17 Sep 2021 02:26:40 GMT", "description": "Use after free in GPU. Reported by 0x74960", "issue_id": 1250655, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0460", "date": "Thu, 16 Sep 2021 01:29:05 GMT", "description": "Use after free in Window Dialog. Reported by 0x74960", "issue_id": 1250227, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "Medium" }, { "cve": "CVE-2021-38000", "date": "Wed, 15 Sep 2021 11:57:37 GMT", "description": "Insufficient validation of untrusted input in Intents. Reported by Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group", "issue_id": 1249962, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High" }, { "cve": "CVE-2021-37983", "date": "Wed, 15 Sep 2021 04:43:36 GMT", "description": "Use after free in Dev Tools. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1249810, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High" }, { "cve": "none", "date": "Tue, 14 Sep 2021 14:28:12 GMT", "description": "internal security issue", "issue_id": 1249626, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0101", "date": "Tue, 14 Sep 2021 04:55:54 GMT", "description": "Heap buffer overflow in Bookmarks. Reported by raven (@raid_akame) ", "issue_id": 1249426, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-38022", "date": "Mon, 13 Sep 2021 00:00:00 GMT", "description": "Inappropriate implementation in WebAuthentication. Reported by Michal Kepkowski", "issue_id": 1248862, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low" }, { "cve": "none", "date": "Fri, 10 Sep 2021 19:35:40 GMT", "description": "internal security issue", "issue_id": 1248665, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37982", "date": "Fri, 10 Sep 2021 19:14:16 GMT", "description": "Use after free in Incognito. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1248661, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2021-38014", "date": "Fri, 10 Sep 2021 14:03:36 GMT", "description": "Out of bounds write in Swiftshader. Reported by Atte Kettunen of OUSPG", "issue_id": 1248567, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2022-0108", "date": "Fri, 10 Sep 2021 09:06:34 GMT", "description": "Inappropriate implementation in Navigation. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1248444, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2022-0107", "date": "Fri, 10 Sep 2021 08:36:42 GMT", "description": "Use after free in File Manager API. Reported by raven (@raid_akame) ", "issue_id": 1248438, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "Medium" }, { "cve": "none", "date": "Thu, 09 Sep 2021 19:09:39 GMT", "description": "internal security issue", "issue_id": 1248289, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37970", "date": "Thu, 09 Sep 2021 05:21:28 GMT", "description": "Use after free in File System API. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1248030, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-30632", "date": "Wed, 08 Sep 2021 00:00:00 GMT", "description": "Out of bounds write in V8. Reported by Anonymous", "issue_id": 1247763, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30633", "date": "Wed, 08 Sep 2021 00:00:00 GMT", "description": "Use after free in Indexed DB API. Reported by Anonymous", "issue_id": 1247766, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-37990", "date": "Tue, 07 Sep 2021 13:50:53 GMT", "description": "Inappropriate implementation in WebView. Reported by Kareem Selim of CyShield", "issue_id": 1247395, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$N/A", "severity": "Medium" }, { "cve": "CVE-2022-0337", "date": "Tue, 07 Sep 2021 13:40:09 GMT", "description": "Inappropriate implementation in File System API. Reported by Maciej Pulikowski", "issue_id": 1247389, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2021-37979", "date": "Tue, 07 Sep 2021 06:54:56 GMT", "description": "Heap buffer overflow in WebRTC. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1247260, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-37981", "date": "Sat, 04 Sep 2021 08:25:35 GMT", "description": "Heap buffer overflow in Skia. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1246631, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2022-1138", "date": "Thu, 02 Sep 2021 16:32:20 GMT", "description": "Inappropriate implementation in Web Cursor. Reported by Alesandro Ortiz", "issue_id": 1246188, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2021-37969", "date": "Wed, 01 Sep 2021 20:39:01 GMT", "description": "Inappropriate implementation in Google Updater. Reported by Abdelhamid Naceri (halov)", "issue_id": 1245879, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "none", "date": "Wed, 01 Sep 2021 19:32:27 GMT", "description": "internal security issue", "issue_id": 1245870, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30627", "date": "Wed, 01 Sep 2021 14:24:51 GMT", "description": "Type Confusion in Blink layout. Reported by Aki Helin of OUSPG", "issue_id": 1245786, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-0099", "date": "Wed, 01 Sep 2021 06:41:03 GMT", "description": "Use after free in Sign-in. Reported by Rox", "issue_id": 1245629, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2021-37974", "date": "Wed, 01 Sep 2021 03:34:12 GMT", "description": "Use after free in Safe Browsing. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1245578, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$20000", "severity": "High" }, { "cve": "none", "date": "Tue, 31 Aug 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1221047, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37968", "date": "Mon, 30 Aug 2021 13:48:11 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by Maurice Dauer ", "issue_id": 1245053, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-30630", "date": "Mon, 30 Aug 2021 05:54:47 GMT", "description": "Inappropriate implementation in Blink . Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1244568, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-38016", "date": "Sat, 28 Aug 2021 04:14:13 GMT", "description": "Insufficient policy enforcement in background fetch. Reported by Maurice Dauer ", "issue_id": 1244289, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2022-0459", "date": "Fri, 27 Aug 2021 15:40:15 GMT", "description": "Use after free in Screen Capture. Reported by raven (@raid_akame)", "issue_id": 1244205, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30629", "date": "Thu, 26 Aug 2021 04:24:43 GMT", "description": "Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1243646, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-37967", "date": "Thu, 26 Aug 2021 02:31:48 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1243622, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-37956", "date": "Tue, 24 Aug 2021 16:59:35 GMT", "description": "Use after free in Offline use. Reported by Huyna at Viettel Cyber Security", "issue_id": 1243117, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$15000", "severity": "High" }, { "cve": "CVE-2022-0800", "date": "Tue, 24 Aug 2021 09:23:15 GMT", "description": "Heap buffer overflow in Cast UI. Reported by Khalil Zhani", "issue_id": 1242962, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "Medium" }, { "cve": "CVE-2021-37996", "date": "Tue, 24 Aug 2021 00:00:00 GMT", "description": "Insufficient validation of untrusted input in Downloads. Reported by Anonymous", "issue_id": 1243020, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-37986", "date": "Mon, 23 Aug 2021 07:32:05 GMT", "description": "Heap buffer overflow in Settings. Reported by raven (@raid_akame) ", "issue_id": 1242404, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$6000", "severity": "Medium" }, { "cve": "CVE-2021-38013", "date": "Mon, 23 Aug 2021 06:54:26 GMT", "description": "Heap buffer overflow in fingerprint recognition. Reported by raven (@raid_akame)", "issue_id": 1242392, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "Medium" }, { "cve": "none", "date": "Mon, 23 Aug 2021 03:56:12 GMT", "description": "internal security issue", "issue_id": 1242339, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37995", "date": "Mon, 23 Aug 2021 02:03:02 GMT", "description": "Inappropriate implementation in WebApp Installer. Reported by Terence Eden", "issue_id": 1242315, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$1000", "severity": "Low" }, { "cve": "CVE-2021-37957", "date": "Sun, 22 Aug 2021 21:24:53 GMT", "description": "Use after free in WebGPU. Reported by Looben Yang", "issue_id": 1242269, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$7500", "severity": "High" }, { "cve": "none", "date": "Sun, 22 Aug 2021 20:52:30 GMT", "description": "internal security issue", "issue_id": 1242257, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Fri, 20 Aug 2021 12:12:40 GMT", "description": "internal security issue", "issue_id": 1241912, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37985", "date": "Fri, 20 Aug 2021 08:32:10 GMT", "description": "Use after free in V8. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1241860, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "High" }, { "cve": "none", "date": "Thu, 19 Aug 2021 13:33:23 GMT", "description": "internal security issue", "issue_id": 1241585, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-0111", "date": "Wed, 18 Aug 2021 14:33:45 GMT", "description": "Inappropriate implementation in Navigation. Reported by garygreen", "issue_id": 1241188, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2021-30628", "date": "Wed, 18 Aug 2021 11:30:14 GMT", "description": "Stack buffer overflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1241123, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-38005", "date": "Wed, 18 Aug 2021 10:28:42 GMT", "description": "Use after free in loader. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1241091, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30626", "date": "Wed, 18 Aug 2021 07:40:08 GMT", "description": "Out of bounds memory access in ANGLE. Reported by Jeonghoon Shin of Theori", "issue_id": 1241036, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-38006", "date": "Tue, 17 Aug 2021 06:08:37 GMT", "description": "Use after free in storage foundation. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1240593, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2022-0309", "date": "Mon, 16 Aug 2021 21:15:04 GMT", "description": "Inappropriate implementation in Autofill. Reported by Alesandro Ortiz", "issue_id": 1240472, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-4054", "date": "Fri, 13 Aug 2021 15:07:48 GMT", "description": "Incorrect security UI in autofill. Reported by Alesandro Ortiz", "issue_id": 1239760, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2021-37965", "date": "Fri, 13 Aug 2021 12:58:45 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by Maurice Dauer ", "issue_id": 1239709, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2021-30609", "date": "Fri, 13 Aug 2021 05:00:57 GMT", "description": "Use after free in Sign-In. Reported by raven (@raid_akame) ", "issue_id": 1239595, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2022-0467", "date": "Thu, 12 Aug 2021 23:09:28 GMT", "description": "Inappropriate implementation in Pointer Lock. Reported by Alesandro Ortiz", "issue_id": 1239496, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "none", "date": "Wed, 11 Aug 2021 22:49:48 GMT", "description": "internal security issue", "issue_id": 1239116, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37966", "date": "Wed, 11 Aug 2021 12:41:31 GMT", "description": "Inappropriate implementation in Compositing. Reported by Mohit Raj (shadow2639) ", "issue_id": 1238944, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2022-0118", "date": "Tue, 10 Aug 2021 20:51:08 GMT", "description": "Inappropriate implementation in WebShare. Reported by Alesandro Ortiz", "issue_id": 1238631, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low" }, { "cve": "CVE-2022-0100", "date": "Mon, 09 Aug 2021 21:46:51 GMT", "description": "Heap buffer overflow in Media streams API. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1238209, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Mon, 09 Aug 2021 17:49:39 GMT", "description": "internal security issue", "issue_id": 1238178, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Mon, 09 Aug 2021 16:56:06 GMT", "description": "internal security issue", "issue_id": 1238158, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30625", "date": "Fri, 06 Aug 2021 12:04:12 GMT", "description": "Use after free in Selection API. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1237533, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2022-0110", "date": "Thu, 05 Aug 2021 19:41:25 GMT", "description": "Incorrect security UI in Autofill. Reported by Alesandro Ortiz", "issue_id": 1237310, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2022-1862", "date": "Wed, 04 Aug 2021 00:00:00 GMT", "description": "Inappropriate implementation in Extensions. Reported by Alesandro Ortiz", "issue_id": 1236325, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2021-37978", "date": "Tue, 03 Aug 2021 19:51:42 GMT", "description": "Heap buffer overflow in Blink. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1236318, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-30607", "date": "Mon, 02 Aug 2021 22:38:51 GMT", "description": "Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1235949, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2021-30619", "date": "Sun, 01 Aug 2021 23:15:57 GMT", "description": "UI Spoofing in Autofill. Reported by Alesandro Ortiz", "issue_id": 1235222, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2021-30604", "date": "Fri, 30 Jul 2021 10:30:29 GMT", "description": "Use after free in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1234829, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30599", "date": "Fri, 30 Jul 2021 06:49:10 GMT", "description": "Type Confusion in V8. Reported by Manfred Paul", "issue_id": 1234770, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$21000", "severity": "High" }, { "cve": "CVE-2021-30598", "date": "Fri, 30 Jul 2021 06:43:58 GMT", "description": "Type Confusion in V8. Reported by Manfred Paul", "issue_id": 1234764, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$21000", "severity": "High" }, { "cve": "CVE-2021-30612", "date": "Thu, 29 Jul 2021 00:18:44 GMT", "description": "Use after free in WebRTC. Reported by Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab", "issue_id": 1234284, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$20000", "severity": "Medium" }, { "cve": "CVE-2021-37972", "date": "Wed, 28 Jul 2021 22:55:37 GMT", "description": "Out of bounds read in libjpeg-turbo. Reported by Xu Hanyu and Lu Yutao from Panguite-Forensics-Lab of Qianxin", "issue_id": 1234259, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Low" }, { "cve": "CVE-2021-30601", "date": "Wed, 28 Jul 2021 08:59:49 GMT", "description": "Use after free in Extensions API. Reported by koocola(@alo_cook) and Nan Wang(@eternalsakura13) of 360 Alpha Lab", "issue_id": 1234009, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2021-30606", "date": "Wed, 28 Jul 2021 07:03:48 GMT", "description": "Use after free in Blink. Reported by Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab", "issue_id": 1233975, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2021-30611", "date": "Wed, 28 Jul 2021 05:38:11 GMT", "description": "Use after free in WebRTC. Reported by Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab", "issue_id": 1233942, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$20000", "severity": "Medium" }, { "cve": "CVE-2021-30603", "date": "Tue, 27 Jul 2021 09:42:26 GMT", "description": "Race in WebAudio. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1233564, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High" }, { "cve": "CVE-2021-38021", "date": "Mon, 26 Jul 2021 22:45:19 GMT", "description": "Inappropriate implementation in referrer. Reported by Prakash (@1lastBr3ath) and Jun Kokatsu", "issue_id": 1233375, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$500", "severity": "Medium" }, { "cve": "CVE-2021-37989", "date": "Mon, 26 Jul 2021 09:41:37 GMT", "description": "Inappropriate implementation in Blink. Reported by Matt Dyas, Ankur Sundara", "issue_id": 1233067, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$2000", "severity": "Medium" }, { "cve": "CVE-2021-30597", "date": "Fri, 23 Jul 2021 22:54:39 GMT", "description": "Use after free in Browser UI. Reported by raven (@raid_akame) ", "issue_id": 1232617, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-30618", "date": "Thu, 22 Jul 2021 20:30:45 GMT", "description": "Inappropriate implementation in DevTools. Reported by @DanAmodio and @mattaustin from Contrast Security", "issue_id": 1232279, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2021-37962", "date": "Thu, 22 Jul 2021 03:30:41 GMT", "description": "Use after free in Performance Manager. Reported by Sri", "issue_id": 1231933, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$10000", "severity": "Medium" }, { "cve": "CVE-2021-30616", "date": "Wed, 21 Jul 2021 00:35:05 GMT", "description": "Use after free in Media. Reported by Anonymous", "issue_id": 1231432, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2021-30600", "date": "Tue, 20 Jul 2021 08:12:04 GMT", "description": "Use after free in Printing. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1231134, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2022-0801", "date": "Tue, 20 Jul 2021 03:07:29 GMT", "description": "Inappropriate implementation in HTML parser. Reported by Michał Bentkowski of Securitum", "issue_id": 1231037, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "Medium" }, { "cve": "none", "date": "Tue, 20 Jul 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1082258, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30602", "date": "Mon, 19 Jul 2021 11:37:13 GMT", "description": "Use after free in WebRTC. Reported by Marcin Towalski of Cisco Talos ", "issue_id": 1230767, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30624", "date": "Mon, 19 Jul 2021 03:37:36 GMT", "description": "Use after free in Autofill. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1230513, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$TBD", "severity": "Low" }, { "cve": "CVE-2021-37959", "date": "Thu, 15 Jul 2021 07:42:53 GMT", "description": "Use after free in Task Manager. Reported by raven (@raid_akame) ", "issue_id": 1229625, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$1000", "severity": "High" }, { "cve": "CVE-2021-30591", "date": "Wed, 14 Jul 2021 11:50:10 GMT", "description": "Use after free in File System API. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1229298, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2022-1855", "date": "Tue, 13 Jul 2021 00:00:00 GMT", "description": "Use after free in Messaging. Reported by Anonymous", "issue_id": 1228661, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-37961", "date": "Mon, 12 Jul 2021 19:51:18 GMT", "description": "Use after free in Tab Strip. Reported by Khalil Zhani", "issue_id": 1228557, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$10000", "severity": "Medium" }, { "cve": "CVE-2021-37988", "date": "Mon, 12 Jul 2021 07:44:48 GMT", "description": "Use after free in Profiles. Reported by raven (@raid_akame) ", "issue_id": 1228248, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2021-30563", "date": "Mon, 12 Jul 2021 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Anonymous", "issue_id": 1228407, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Sun, 11 Jul 2021 00:55:17 GMT", "description": "internal security issue", "issue_id": 1228036, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2022-1857", "date": "Sun, 11 Jul 2021 00:00:00 GMT", "description": "Insufficient policy enforcement in File System API. Reported by Daniel Rhea", "issue_id": 1227995, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$2000", "severity": "High" }, { "cve": "CVE-2021-30590", "date": "Fri, 09 Jul 2021 11:10:19 GMT", "description": "Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1227777, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$20000", "severity": "High" }, { "cve": "CVE-2021-30574", "date": "Thu, 08 Jul 2021 01:00:27 GMT", "description": "Use after free in protocol handling. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1227315, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Wed, 07 Jul 2021 16:52:07 GMT", "description": "internal security issue", "issue_id": 1227228, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-38004", "date": "Wed, 07 Jul 2021 14:18:36 GMT", "description": "Insufficient policy enforcement in Autofill. Reported by Mark Amery", "issue_id": 1227170, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2021-30617", "date": "Tue, 06 Jul 2021 17:17:37 GMT", "description": "Policy bypass in Blink. Reported by NDevTK", "issue_id": 1226909, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$3000", "severity": "Medium" }, { "cve": "none", "date": "Fri, 02 Jul 2021 00:56:43 GMT", "description": "internal security issue", "issue_id": 1225929, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30622", "date": "Mon, 28 Jun 2021 09:12:32 GMT", "description": "Use after free in WebApp Installs. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research", "issue_id": 1224419, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$NA", "severity": "Medium" }, { "cve": "CVE-2022-1500", "date": "Fri, 25 Jun 2021 00:00:00 GMT", "description": "Insufficient data validation in Dev Tools. Reported by Hoang Nguyen", "issue_id": 1223475, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$TBD", "severity": "Low" }, { "cve": "CVE-2021-30623", "date": "Thu, 24 Jun 2021 21:17:56 GMT", "description": "Use after free in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1223667, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$10000", "severity": "Low" }, { "cve": "CVE-2021-37958", "date": "Thu, 24 Jun 2021 00:00:00 GMT", "description": "Inappropriate implementation in Navigation. Reported by James Lee (@Windowsrcer)", "issue_id": 1223290, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$3000", "severity": "High" }, { "cve": "none", "date": "Mon, 21 Jun 2021 18:37:59 GMT", "description": "internal security issue", "issue_id": 1222498, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30564", "date": "Thu, 17 Jun 2021 14:20:00 GMT", "description": "Heap buffer overflow in WebXR. Reported by Ali Merchant, iQ3Connect VR Platform", "issue_id": 1221309, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "none", "date": "Thu, 17 Jun 2021 01:11:53 GMT", "description": "internal security issue", "issue_id": 1221068, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30562", "date": "Tue, 15 Jun 2021 00:00:00 GMT", "description": "Use after free in WebSerial. Reported by Anonymous", "issue_id": 1220078, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30554", "date": "Tue, 15 Jun 2021 00:00:00 GMT", "description": "Use after free in WebGL. Reported by anonymous", "issue_id": 1219857, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30568", "date": "Mon, 14 Jun 2021 20:45:15 GMT", "description": "Heap buffer overflow in WebGL. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1219886, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$8500", "severity": "High" }, { "cve": "CVE-2021-30608", "date": "Mon, 14 Jun 2021 19:52:23 GMT", "description": "Use after free in Web Share. Reported by Huyna at Viettel Cyber Security", "issue_id": 1219870, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-30561", "date": "Mon, 14 Jun 2021 10:49:04 GMT", "description": "Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1219630, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-37971", "date": "Sun, 13 Jun 2021 15:36:46 GMT", "description": "Incorrect security UI in Web Browser UI. Reported by Rayyan Bijoora", "issue_id": 1219354, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$1000", "severity": "Low" }, { "cve": "CVE-2021-30560", "date": "Sat, 12 Jun 2021 10:44:36 GMT", "description": "Use after free in Blink XSLT. Reported by Nick Wellnhofer", "issue_id": 1219209, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$N/A", "severity": "High" }, { "cve": "CVE-2021-30559", "date": "Fri, 11 Jun 2021 16:20:36 GMT", "description": "Out of bounds write in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1219082, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-30569", "date": "Thu, 10 Jun 2021 21:23:48 GMT", "description": "Use after free in sqlite. Reported by Chris Salls (@salls) of Makai Security", "issue_id": 1218707, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$500", "severity": "High" }, { "cve": "CVE-2021-30594", "date": "Thu, 10 Jun 2021 09:45:54 GMT", "description": "Use after free in Page Info UI. Reported by raven (@raid_akame) ", "issue_id": 1218468, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$N/A", "severity": "High" }, { "cve": "none", "date": "Tue, 08 Jun 2021 05:03:23 GMT", "description": "internal security issue", "issue_id": 1217598, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Mon, 07 Jun 2021 04:21:22 GMT", "description": "internal security issue", "issue_id": 1217064, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$0", "severity": "unknown" }, { "cve": "none", "date": "Sun, 06 Jun 2021 11:30:45 GMT", "description": "internal security issue", "issue_id": 1216898, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30573", "date": "Sat, 05 Jun 2021 18:18:39 GMT", "description": "Use after free in GPU. Reported by Security For Everyone Team - https://securityforeveryone.com", "issue_id": 1216822, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Fri, 04 Jun 2021 14:00:40 GMT", "description": "internal security issue", "issue_id": 1216595, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30551", "date": "Fri, 04 Jun 2021 07:10:13 GMT", "description": "Type Confusion in V8. Reported by Clement Lecigne of Google's Threat Analysis Group and Sergei Glazunov of Google Project Zero", "issue_id": 1216437, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High" }, { "cve": "none", "date": "Wed, 02 Jun 2021 13:41:40 GMT", "description": "internal security issue", "issue_id": 1215711, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30555", "date": "Tue, 01 Jun 2021 00:22:50 GMT", "description": "Use after free in Sharing. Reported by David Erceg", "issue_id": 1215029, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$10000", "severity": "High" }, { "cve": "CVE-2021-30541", "date": "Mon, 31 May 2021 08:16:33 GMT", "description": "Use after free in V8. Reported by Richard Wheeldon", "issue_id": 1214842, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High" }, { "cve": "CVE-2021-30596", "date": "Sat, 29 May 2021 10:30:48 GMT", "description": "Incorrect security UI in Navigation. Reported by Mohit Raj (shadow2639) ", "issue_id": 1214481, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$1000", "severity": "Medium" }, { "cve": "CVE-2021-30572", "date": "Fri, 28 May 2021 03:29:20 GMT", "description": "Use after free in Autofill. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1214234, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30584", "date": "Wed, 26 May 2021 01:03:07 GMT", "description": "Incorrect security UI in Downloads. Reported by @retsew0x01", "issue_id": 1213350, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$3000", "severity": "Medium" }, { "cve": "CVE-2021-30575", "date": "Tue, 25 May 2021 20:34:14 GMT", "description": "Out of bounds read in Autofill. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1213313, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$15000", "severity": "Medium" }, { "cve": "CVE-2022-0298", "date": "Tue, 25 May 2021 00:33:40 GMT", "description": "Use after free in Scheduling. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1212957, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Tue, 25 May 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1150558, "post_url": "https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30544", "date": "Mon, 24 May 2021 04:16:04 GMT", "description": "Use after free in BFCache. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1212618, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$25000", "severity": "Critical" }, { "cve": "CVE-2021-30556", "date": "Mon, 24 May 2021 02:35:40 GMT", "description": "Use after free in WebAudio. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1212599, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$7500", "severity": "High" }, { "cve": "CVE-2021-30550", "date": "Sun, 23 May 2021 14:14:58 GMT", "description": "Use after free in Accessibility. Reported by David Erceg", "issue_id": 1212500, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30549", "date": "Sun, 23 May 2021 13:54:24 GMT", "description": "Use after free in Spell check. Reported by David Erceg", "issue_id": 1212498, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30567", "date": "Thu, 20 May 2021 05:14:26 GMT", "description": "Use after free in DevTools. Reported by DDV_UA", "issue_id": 1211326, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$10000", "severity": "High" }, { "cve": "none", "date": "Wed, 19 May 2021 21:17:41 GMT", "description": "internal security issue", "issue_id": 1211215, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30565", "date": "Wed, 19 May 2021 11:02:23 GMT", "description": "Out of bounds write in Tab Groups. Reported by David Erceg", "issue_id": 1210985, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$15000", "severity": "High" }, { "cve": "CVE-2021-30548", "date": "Tue, 18 May 2021 06:50:27 GMT", "description": "Use after free in Loader. Reported by Yangkang(@dnpushme) & Wanglu of Qihoo360 Qex Team", "issue_id": 1210487, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "CVE-2021-30547", "date": "Tue, 18 May 2021 01:42:33 GMT", "description": "Out of bounds write in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1210414, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High" }, { "cve": "none", "date": "Mon, 17 May 2021 02:47:58 GMT", "description": "internal security issue", "issue_id": 1209792, "post_url": "https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30553", "date": "Mon, 17 May 2021 01:01:14 GMT", "description": "Use after free in Network service. Reported by Anonymous", "issue_id": 1209769, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium" }, { "cve": "CVE-2021-30613", "date": "Sun, 16 May 2021 08:03:04 GMT", "description": "Use after free in Base internals. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1209622, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$15000", "severity": "Medium" }, { "cve": "CVE-2021-30593", "date": "Sun, 16 May 2021 06:45:08 GMT", "description": "Out of bounds read in Tab Strip. Reported by David Erceg", "issue_id": 1209616, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$5000", "severity": "High" }, { "cve": "none", "date": "Sat, 15 May 2021 18:15:05 GMT", "description": "internal security issue", "issue_id": 1209558, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30592", "date": "Sat, 15 May 2021 05:14:31 GMT", "description": "Out of bounds write in Tab Groups. Reported by David Erceg", "issue_id": 1209469, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$10000", "severity": "High" }, { "cve": "none", "date": "Fri, 14 May 2021 22:20:30 GMT", "description": "internal security issue", "issue_id": 1209444, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-30615", "date": "Wed, 12 May 2021 00:00:00 GMT", "description": "Cross-origin data leak in Navigation. Reported by NDevTK", "issue_id": 1208614, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2021-30614", "date": "Mon, 10 May 2021 03:50:38 GMT", "description": "Heap buffer overflow in TabStrip. Reported by Huinian Yang (@vmth6) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. ", "issue_id": 1207315, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$10000", "severity": "Medium" }, { "cve": "CVE-2021-30579", "date": "Mon, 10 May 2021 00:44:13 GMT", "description": "Use after free in UI framework. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1207277, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$7500", "severity": "Medium" }, { "cve": "none", "date": "Mon, 10 May 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1203667, "post_url": "https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown" }, { "cve": "CVE-2021-37987", "date": "Fri, 07 May 2021 21:04:19 GMT", "description": "Use after free in Network APIs. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1206928, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "Medium" }, { "cve": "CVE-2021-30546", "date": "Fri, 07 May 2021 19:59:30 GMT", "description": "Use after free in Autofill. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1206911, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High" } ] }