[ { "cve": "CVE-2022-1853", "date": "Thu, 12 May 2022 00:00:00 GMT", "description": "Use after free in Indexed DB. Reported by Anonymous", "issue_id": 1324864, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Critical", "commit": { "chromium": [ { "date": "Fri, 27 May 2022 14:51:55 GMT", "id": "64a9ef9bc2830a16429edcbc5f8f3571dcc4b4c0" }, { "date": "Sun, 15 May 2022 02:49:42 GMT", "id": "30be2a150c828d080679f0cbce5fc2a310375688" }, { "date": "Mon, 16 May 2022 20:15:46 GMT", "id": "5a3f3336d3c61f710b91a0e5955735d5f5bb1332" }, { "date": "Tue, 17 May 2022 18:26:17 GMT", "id": "dbe72c6ad41a655fc0993c80e280e403aabf7c1a" }, { "date": "Fri, 13 May 2022 22:25:19 GMT", "id": "c4289d209bb85bf8dccba87386b714f9414bbaea" }, { "date": "Fri, 13 May 2022 03:07:20 GMT", "id": "9d8104567e1ede06e86a7ffe40e5d5bf359ae6d1" }, { "date": "Tue, 17 May 2022 18:17:07 GMT", "id": "21139756239bdcc79779320bb7f950b240169f40" } ], "v8": [] } }, { "cve": "CVE-2022-1856", "date": "Fri, 06 May 2022 00:00:00 GMT", "description": "Use after free in User Education. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab\u00a0", "issue_id": 1323239, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 16 May 2022 18:31:45 GMT", "id": "a802d278c9bbfb5971eba79276bc1ff7296126c1" }, { "date": "Wed, 11 May 2022 08:37:28 GMT", "id": "f009a6ae002cb1e85720bd009cf3a711d3028139" } ], "v8": [] } }, { "cve": "CVE-2022-1859", "date": "Thu, 05 May 2022 00:00:00 GMT", "description": "Use after free in Performance Manager. Reported by Guannan Wang (@Keenan7310) of Tencent Security Xuanwu Lab", "issue_id": 1322744, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 09 May 2022 19:38:32 GMT", "id": "326bff8dab3c221e8b1aaf3856877e393ec6b995" }, { "date": "Fri, 06 May 2022 20:41:21 GMT", "id": "b883adeb89b526ca1a668596f9ca0f22c5fc010f" }, { "date": "Wed, 18 May 2022 10:17:32 GMT", "id": "312fbf4ee3c7a479644076d80ea3ecb73f1c102b" } ], "v8": [] } }, { "cve": "CVE-2022-1640", "date": "Thu, 28 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1320592, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 29 Apr 2022 17:19:06 GMT", "id": "da4e27e68b2b394a764fcbd7b1bb5cca120bb45f" }, { "date": "Thu, 05 May 2022 07:36:47 GMT", "id": "41e4d25b6943d3cc436d62369d87e30a39e113ba" }, { "date": "Thu, 05 May 2022 07:42:32 GMT", "id": "b74d01a7b3efa63382ee8f8d463d8ce2a34be62f" }, { "date": "Thu, 05 May 2022 07:31:51 GMT", "id": "bffe15fac553356274613aafe3c04c9dbe7e2cd3" } ], "v8": [] } }, { "cve": "CVE-2022-1854", "date": "Wed, 27 Apr 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1320024, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 03 May 2022 15:44:58 GMT", "id": "46a7889ae2811f0cbb9c61dbb3abbfdc12368bd4" } ], "v8": [] } }, { "cve": "CVE-2022-1635", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "Use after free in Permission Prompts. Reported by Anonymous", "issue_id": 1319797, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 03 May 2022 16:34:02 GMT", "id": "f7b42a885d5831f5c4d7bd5f71d1f4b833473d9f" }, { "date": "Tue, 03 May 2022 16:33:30 GMT", "id": "f5c8a150a47f6270ef58085a55992d6f67ca16a3" }, { "date": "Fri, 29 Apr 2022 20:28:25 GMT", "id": "4ee270c3650e0ac81be73dceb664e073e2c01ce0" }, { "date": "Tue, 03 May 2022 16:36:39 GMT", "id": "533df6600f4af1d7099117b0b69ee22ab24ffdc4" } ], "v8": [] } }, { "cve": "CVE-2022-1639", "date": "Tue, 19 Apr 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1317650, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 22 Apr 2022 22:00:20 GMT", "id": "c82d1e276ce17ad9c258e4dad0da07c21c623b70" } ], "v8": [] } }, { "cve": "CVE-2022-1633", "date": "Mon, 18 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharesheet. Reported by Khalil Zhani", "issue_id": 1316990, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 04 May 2022 01:04:19 GMT", "id": "b29b15d52a6ce00067ae1f9f0023cb29bcb434de" }, { "date": "Wed, 18 May 2022 15:19:38 GMT", "id": "11a03f802a665808f1b24a423291eee23d16c130" }, { "date": "Wed, 04 May 2022 01:01:52 GMT", "id": "f9ce1bb055878757c8d392c4c90a04d839657758" }, { "date": "Wed, 04 May 2022 01:03:51 GMT", "id": "010147928509b5bd85b45a9b91790f8db97c570e" }, { "date": "Thu, 28 Apr 2022 01:52:17 GMT", "id": "1757761db4bbfbc1e9bc31f007634b2200b63f82" } ], "v8": [] } }, { "cve": "CVE-2022-1638", "date": "Sun, 17 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in V8 Internationalization. Reported by DoHyun Lee (@l33d0hyun) of DNSLab, Korea University", "issue_id": 1316946, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 06 May 2022 20:26:39 GMT", "id": "0f880cb979c3b789d15ceea31c68056f86fcb279" }, { "date": "Fri, 06 May 2022 21:20:33 GMT", "id": "4d51399b74c279b84399dfb0bdae35e4e407f276" }, { "date": "Thu, 19 May 2022 08:55:19 GMT", "id": "fed7af680c379168fee93f697aef34146c427385" }, { "date": "Sat, 30 Apr 2022 09:18:25 GMT", "id": "761498bd132c3defe0482b752bc2058ce6141d0f" }, { "date": "Fri, 06 May 2022 20:17:41 GMT", "id": "0689fa8aa71ec6950d4c4eeb913c475e2794640c" } ], "v8": [] } }, { "cve": "CVE-2022-1861", "date": "Sat, 16 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Khalil Zhani", "issue_id": 1316846, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 17 May 2022 15:51:17 GMT", "id": "50d38261850ce63ade572cac5898f3e26ee9e2d5" }, { "date": "Tue, 17 May 2022 16:03:44 GMT", "id": "2254445512d7389d5c4377b67b5005e3f01ce8a8" }, { "date": "Fri, 22 Apr 2022 19:00:20 GMT", "id": "6b9fb62ad4bbf7a516e5cf99ccd367a6d4c19b82" }, { "date": "Fri, 13 May 2022 02:13:22 GMT", "id": "85d5e104eaa7f75f4bd905629381a5898f2f1f7f" }, { "date": "Thu, 28 Apr 2022 20:53:20 GMT", "id": "350c96ec8a5bf1494577c47cabf7325934ed12a8" }, { "date": "Thu, 26 May 2022 12:30:34 GMT", "id": "6cb7135bb27987a05aaba2ebb326589ed1745c87" } ], "v8": [] } }, { "cve": "CVE-2022-1364", "date": "Wed, 13 Apr 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Cl\u00e9ment Lecigne of Google's Threat Analysis Group", "issue_id": 1315901, "post_url": "https://chromereleases.googleblog.com/2022/04/chrome-for-android-update_01436352408.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 19 Apr 2022 07:16:08 GMT", "id": "1b752a59e5d37ba51ec2b89fb193b0339b1bcae3" }, { "date": "Wed, 13 Apr 2022 18:33:58 GMT", "id": "2c8d797fee04bc385c5a866235a88eb62c39ffb7" }, { "date": "Thu, 14 Apr 2022 08:44:24 GMT", "id": "b32605ee8d5137024d335e0fa2a5c0a2529f7881" }, { "date": "Tue, 19 Apr 2022 07:15:55 GMT", "id": "5bfe521a1c4165ae7afae68c32e105e945e6af35" }, { "date": "Wed, 27 Apr 2022 08:18:18 GMT", "id": "66c8de2cdac10cad9e622ecededda411b44ac5b3" }, { "date": "Wed, 13 Apr 2022 17:30:19 GMT", "id": "8081a5ffa7ebdb0e5b35cf63aa0490ad3578b940" }, { "date": "Wed, 13 Apr 2022 18:34:16 GMT", "id": "bc8f9a2d23d4622637fdb6d6095bf2061302e983" }, { "date": "Mon, 18 Apr 2022 13:56:17 GMT", "id": "b2d3ef69ef992d2dc2f1733e3c17c361357516dd" }, { "date": "Wed, 13 Apr 2022 17:36:43 GMT", "id": "1da81b4637cdb4d16bb7c13c5160a4e57debfe9c" } ] } }, { "cve": "CVE-2022-1634", "date": "Sat, 09 Apr 2022 00:00:00 GMT", "description": "Use after free in Browser UI. Reported by Khalil Zhani", "issue_id": 1314908, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 03 May 2022 16:43:02 GMT", "id": "e3df22f945cd065a8de597ebb8a8364b2b3b46d6" }, { "date": "Tue, 03 May 2022 16:42:39 GMT", "id": "e216e57e25c531c05ee223d78f190fb88009d669" }, { "date": "Tue, 03 May 2022 14:37:17 GMT", "id": "72b858db22e2353f2c59bb0dcd26aa22582e8dd0" }, { "date": "Tue, 26 Apr 2022 18:46:14 GMT", "id": "b84548853b4695104647f52228918561ca1e0a76" } ], "v8": [] } }, { "cve": "CVE-2022-1483", "date": "Fri, 08 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in WebGPU. Reported by Mark Brand of Google Project Zero", "issue_id": 1314754, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 20 Apr 2022 19:46:58 GMT", "id": "80fda5a57b7540dd972a4233bc20316d9a65754f" }, { "date": "Mon, 25 Apr 2022 21:01:40 GMT", "id": "5361d836aeb1bde7fb3ef333209a65b61e1911fe" }, { "date": "Mon, 18 Apr 2022 17:21:56 GMT", "id": "f935b27591ed2974f0a8471c85c0840b5ded5ce8" }, { "date": "Tue, 12 Apr 2022 14:31:00 GMT", "id": "bee4701c99cbbbb25c0bd6c5c79a40f63f1b1e47" } ], "v8": [] } }, { "cve": "CVE-2022-1858", "date": "Thu, 07 Apr 2022 00:00:00 GMT", "description": "Out of bounds read in DevTools. Reported by EllisVlad", "issue_id": 1314310, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 26 Apr 2022 05:53:56 GMT", "id": "919b1ffe1fe75aa7f77213c0291e6396a6a60e43" }, { "date": "Thu, 21 Apr 2022 20:03:06 GMT", "id": "2e0a0b83e1340e948a27cdc319bea8f32849d414" } ], "v8": [] } }, { "cve": "CVE-2022-1477", "date": "Wed, 06 Apr 2022 00:00:00 GMT", "description": "Use after free in Vulkan. Reported by SeongHwan Park (SeHwa)", "issue_id": 1313905, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [], "v8": [] } }, { "cve": "CVE-2022-1637", "date": "Thu, 31 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Web Contents. Reported by Alesandro Ortiz", "issue_id": 1311820, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 25 Apr 2022 06:18:19 GMT", "id": "2941a90229d258462afa72bb62e5cbe1691e57ea" }, { "date": "Tue, 05 Apr 2022 21:32:46 GMT", "id": "4eb716ef5cdbca4db3a9377ee6390964d0d4025f" }, { "date": "Mon, 25 Apr 2022 05:56:35 GMT", "id": "432027aab772952238842f73730f166aaaea1026" }, { "date": "Thu, 05 May 2022 03:39:56 GMT", "id": "3a48ae495c67e516af53ed92f079ef1dfe551833" } ], "v8": [] } }, { "cve": "CVE-2022-1312", "date": "Wed, 30 Mar 2022 00:00:00 GMT", "description": "Use after free in storage. Reported by Leecraso and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1311701, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 07 Apr 2022 18:07:37 GMT", "id": "b8d56fab5dde25c988f0ae7acdac37b1fbd26a91" }, { "date": "Mon, 04 Apr 2022 23:40:56 GMT", "id": "6405ab0150f1a98ea7a712cf79047770d54bd854" }, { "date": "Thu, 07 Apr 2022 18:35:05 GMT", "id": "0221dbed0ca96e011d38b117a04aeac320578f27" }, { "date": "Tue, 19 Apr 2022 17:21:58 GMT", "id": "794764e9dac65771375b3c3fc1bb73cc4f3a9efe" } ], "v8": [] } }, { "cve": "CVE-2022-1232", "date": "Wed, 30 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1311641, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 01 Apr 2022 15:18:07 GMT", "id": "9c9c8cc00c3f8e2531c532a4b37d178a477bbc5d" }, { "date": "Fri, 01 Apr 2022 10:36:01 GMT", "id": "c4e66b89b4ecd0e90b31e9e4ed08d38085a84c49" }, { "date": "Fri, 01 Apr 2022 16:33:27 GMT", "id": "07e7c60fdb533f6069ec1479bfa06b7333165d5d" }, { "date": "Fri, 01 Apr 2022 16:34:27 GMT", "id": "36b66b5cc99147edc594a69f4b94f7828fc94750" }, { "date": "Mon, 04 Apr 2022 12:55:36 GMT", "id": "f599381978f2f9463afdb154146ad210e89dad0a" } ] } }, { "cve": "CVE-2022-1311", "date": "Mon, 28 Mar 2022 00:00:00 GMT", "description": "Use after free in Chrome OS shell. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab", "issue_id": 1310717, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 08 Apr 2022 03:28:17 GMT", "id": "18c12392ffd2cd2a88e7f75d62c5f9364a4d0cef" }, { "date": "Fri, 08 Apr 2022 03:09:35 GMT", "id": "29a0add3cb1bf14cc3fadb7c9c55b9f3a0fc5eed" }, { "date": "Fri, 01 Apr 2022 06:32:55 GMT", "id": "19d06d3fb2d9824e06f3dcac492815d785910fd9" }, { "date": "Wed, 13 Apr 2022 16:37:30 GMT", "id": "5dd954d87a0c091a7874b40d39f27375fcea10fb" } ], "v8": [] } }, { "cve": "CVE-2022-1096", "date": "Wed, 23 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by anonymous", "issue_id": 1309225, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Thu, 24 Mar 2022 20:07:43 GMT", "id": "816573b76818db032f7f2091006bc8973a8b22b8" }, { "date": "Thu, 24 Mar 2022 17:50:12 GMT", "id": "0981e91a4f8692af337e2588562ad1504f4bffdc" }, { "date": "Fri, 25 Mar 2022 13:34:31 GMT", "id": "a2cae2180a7a6d64ccdede44d730c9fbba690fb7" }, { "date": "Thu, 24 Mar 2022 18:07:51 GMT", "id": "bacf506f6f7a187c7b08468fb559e4d6007d2a96" }, { "date": "Thu, 24 Mar 2022 20:15:42 GMT", "id": "f2f44331a14004af99f6508d2aed029b2b48cb3f" }, { "date": "Thu, 24 Mar 2022 18:09:24 GMT", "id": "f39f3c4fe999e9b23b340862b8db215e6518252a" }, { "date": "Thu, 24 Mar 2022 22:55:43 GMT", "id": "a7a1d14b14e222ec6af90764745ab8d3c420fc58" }, { "date": "Fri, 25 Mar 2022 11:25:04 GMT", "id": "26b7ad6967b1d192ffffafb91e8f42e74aa40e55" }, { "date": "Thu, 24 Mar 2022 19:58:53 GMT", "id": "8cfc3bfdcd22070664417dcb2de091bff55833e7" } ] } }, { "cve": "CVE-2022-1134", "date": "Mon, 21 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab", "issue_id": 1308360, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Wed, 30 Mar 2022 13:09:20 GMT", "id": "185d6116ae7d7771c590f38be8b08530f979d226" }, { "date": "Mon, 11 Apr 2022 13:06:24 GMT", "id": "f546ac11eec75a5f3db797a844a5b8e2322f345f" }, { "date": "Fri, 25 Mar 2022 16:12:59 GMT", "id": "32fe54204859f8d04e55c62718ed776a35dc14aa" }, { "date": "Thu, 24 Mar 2022 22:10:35 GMT", "id": "464987b1183c54d8c7039ffe8a8c464c69e43912" }, { "date": "Thu, 24 Mar 2022 13:23:42 GMT", "id": "96c5daaea685c72abbc20b8083f6e40c87cabccd" }, { "date": "Fri, 25 Mar 2022 16:15:53 GMT", "id": "6bdb9281a8d3cbe5771cdb0f42825050edd73384" }, { "date": "Wed, 23 Mar 2022 12:26:15 GMT", "id": "9c3d4b3556b2797fa9d9f4bee915e8502608312f" }, { "date": "Thu, 24 Mar 2022 17:59:52 GMT", "id": "c6b68cbfbd49a24bd9d343d718132125370da729" } ] } }, { "cve": "CVE-2022-1310", "date": "Fri, 18 Mar 2022 00:00:00 GMT", "description": "Use after free in regular expressions. Reported by Brendon Tiszka ", "issue_id": 1307610, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Thu, 24 Mar 2022 08:18:33 GMT", "id": "0799b27e6f56e5d9829748cddcbaba81bdef5342" }, { "date": "Tue, 19 Apr 2022 12:39:17 GMT", "id": "e4509f356228ddba8080792d35f566691513213c" }, { "date": "Mon, 21 Mar 2022 07:45:09 GMT", "id": "bdc4f54a50293507d9ef51573bab537883560cc8" }, { "date": "Mon, 04 Apr 2022 08:04:22 GMT", "id": "e42dbcdedb7a7fad504bb1979500cda05baddc1f" } ] } }, { "cve": "CVE-2022-1133", "date": "Sun, 13 Mar 2022 00:00:00 GMT", "description": "Use after free in WebRTC. Reported by Anonymous", "issue_id": 1305776, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 21 Mar 2022 23:35:04 GMT", "id": "140afbd23488af71aa535ce88e04c71ff772acf6" }, { "date": "Wed, 16 Mar 2022 23:21:55 GMT", "id": "7b04461342e737c2ff8d76bac719265bc84eda5a" } ], "v8": [] } }, { "cve": "CVE-2022-1479", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by Jeonghoon Shin of Theori", "issue_id": 1305190, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 00:45:04 GMT", "id": "9b1219a869bd9b469bac758bc9f8463b1361b52e" }, { "date": "Tue, 12 Apr 2022 04:42:05 GMT", "id": "12e39e60c7b15f677b8f6776d9922b52d4a98ca6" } ], "v8": [] } }, { "cve": "CVE-2022-1482", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in WebGL. Reported by Christoph Diehl, Microsoft", "issue_id": 1304987, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 29 Apr 2022 15:23:33 GMT", "id": "5be8e065f43e219d4ab71cefecdbbfd3e75ff426" }, { "date": "Tue, 29 Mar 2022 03:11:52 GMT", "id": "f3244fe50ba6c64ab6a75f1370d8dd983927fae6" }, { "date": "Wed, 20 Apr 2022 19:46:07 GMT", "id": "d9b0bc0dcd437407a2403c54e0639a9943a4dab6" }, { "date": "Tue, 19 Apr 2022 23:41:13 GMT", "id": "96feac616a9d6adeef1da1c533b080bb3b9d53cc" } ], "v8": [] } }, { "cve": "CVE-2022-1132", "date": "Mon, 07 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Virtual Keyboard. Reported by Andr.Ess", "issue_id": 1303410, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 02:59:13 GMT", "id": "9bc07cd2ae189cd433e497a09424fdc3c52d2178" }, { "date": "Mon, 14 Mar 2022 22:11:45 GMT", "id": "63bf63f82948b30112eb38f5f0d128141b88386f" }, { "date": "Mon, 14 Mar 2022 22:16:39 GMT", "id": "35e6332614f84ac4acf053e54b9378e92703bc36" } ], "v8": [] } }, { "cve": "CVE-2022-1481", "date": "Fri, 04 Mar 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1302949, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 19 Apr 2022 16:15:52 GMT", "id": "75362bbcdb231fd33c93f95c22edebe571122c61" }, { "date": "Fri, 08 Apr 2022 17:10:31 GMT", "id": "88d48019fa49b27478269aeff2068223b35b1e5d" }, { "date": "Tue, 19 Apr 2022 16:09:19 GMT", "id": "04091a4a6e8f4f35a1daa2d6a02e51a3ec28dd8f" } ], "v8": [] } }, { "cve": "CVE-2022-0979", "date": "Thu, 03 Mar 2022 00:00:00 GMT", "description": "Use after free in Safe Browsing. Reported by anonymous", "issue_id": 1302644, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 01:53:46 GMT", "id": "6e896d17286cb976555b0b672d32ffea2ab95562" }, { "date": "Tue, 08 Mar 2022 06:33:37 GMT", "id": "1e71a1fcad627e61585d023aa2102262c1dc35b7" }, { "date": "Thu, 10 Mar 2022 00:59:17 GMT", "id": "eb9f2c2099e901d4faacdbc9ce72fb5d5edbf8fc" }, { "date": "Thu, 10 Mar 2022 01:57:18 GMT", "id": "b756e611c62ef992a27d20a148dbcf63c7c7e6fa" } ], "v8": [] } }, { "cve": "CVE-2022-1307", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in full screen. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1301873, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 07 Apr 2022 00:02:50 GMT", "id": "c682acd05ebd33c6fb89ee409984559374f3e436" }, { "date": "Fri, 11 Mar 2022 04:00:06 GMT", "id": "5326b6967d000c677efa23b9f849145b0b06df07" } ], "v8": [] } }, { "cve": "CVE-2022-1128", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Web Share API. Reported by Abdel Adim (@smaury92) Oisfi of Shielder", "issue_id": 1301920, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 08 Mar 2022 21:55:02 GMT", "id": "fcb2ea2c4676f96921b067bf7da192a0692c2215" }, { "date": "Thu, 10 Mar 2022 21:29:07 GMT", "id": "4751620d00b41155bbfb791111583f6ae8bb19e8" }, { "date": "Tue, 08 Mar 2022 15:44:00 GMT", "id": "26f39eab6cefe74baef3b0451b63cadd6a7eb84c" }, { "date": "Thu, 10 Mar 2022 22:13:37 GMT", "id": "0c06be8f0f33fbdc856018b45e7d71bcb78385e4" } ], "v8": [] } }, { "cve": "CVE-2022-0972", "date": "Mon, 28 Feb 2022 00:00:00 GMT", "description": "Use after free in Extensions. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1301320, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 04 Mar 2022 19:43:47 GMT", "id": "5c4e043324b3afd1be673ae2c0a5c00845bb0e86" }, { "date": "Thu, 10 Mar 2022 00:45:56 GMT", "id": "f248f0755b5c2a7aa65c45aa33bb54bc69ad3845" }, { "date": "Tue, 08 Mar 2022 18:14:46 GMT", "id": "382ed1260b5eb60a8bfe9847ce6d2095f2f544ec" }, { "date": "Thu, 10 Mar 2022 02:35:27 GMT", "id": "b321ac924772586a874927cce2b04600efdf4d69" }, { "date": "Thu, 17 Mar 2022 10:19:43 GMT", "id": "80e73e605d32e57ae6020ec6fe03d07f9d3fffbd" } ], "v8": [] } }, { "cve": "CVE-2022-1129", "date": "Thu, 24 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in Full Screen Mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1300253, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 23:13:01 GMT", "id": "37d6456a8fcc12e8719f13470aabf71c7a8ac3cb" }, { "date": "Sat, 19 Mar 2022 00:51:29 GMT", "id": "56470daf4aa89711328c2476403b468ea8adcc17" } ], "v8": [] } }, { "cve": "CVE-2022-1306", "date": "Mon, 21 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in compositing. Reported by Sven Dysthe", "issue_id": 1299287, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 20:48:32 GMT", "id": "540e2ecde447b0757dd5bb079a59d8faef3183c1" }, { "date": "Sat, 02 Apr 2022 01:05:15 GMT", "id": "d88e959e018c8ec8107448c46879bd5537dfc0d1" } ], "v8": [] } }, { "cve": "CVE-2022-0971", "date": "Mon, 21 Feb 2022 00:00:00 GMT", "description": "Use after free in Blink Layout. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1299422, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$NA", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 01 Mar 2022 20:02:12 GMT", "id": "4d71d571302a75192f26d9e1122150ae5c600abb" }, { "date": "Tue, 08 Mar 2022 22:55:06 GMT", "id": "db880005f1f0b17ee1702629c225a8044ccc9d3b" }, { "date": "Mon, 07 Mar 2022 20:17:13 GMT", "id": "e3e7862718bce4eb785c59d96359a35ca64c6ac5" }, { "date": "Mon, 07 Mar 2022 20:13:16 GMT", "id": "cebad8ef22dc7b07430fed392518726a62bd25d4" } ], "v8": [] } }, { "cve": "CVE-2022-1478", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in SwiftShader. Reported by SeongHwan Park (SeHwa)", "issue_id": 1299261, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 00:45:04 GMT", "id": "9b1219a869bd9b469bac758bc9f8463b1361b52e" }, { "date": "Fri, 11 Mar 2022 03:59:00 GMT", "id": "5b016f4109f08a3a90ff860c49a68141db6e5d5e" } ], "v8": [] } }, { "cve": "CVE-2022-0977", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in Browser UI. Reported by Khalil Zhani", "issue_id": 1299225, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Mar 2022 15:57:31 GMT", "id": "f9beeea17c09e39c8187caa67b938a1688829d0b" }, { "date": "Wed, 02 Mar 2022 09:19:15 GMT", "id": "7c822d7f1e932fbc4a1220a6f1c5f69b88034f1c" }, { "date": "Thu, 17 Mar 2022 14:32:10 GMT", "id": "650d48c86955c9e7172612810022c2b1ff0129d5" }, { "date": "Fri, 04 Mar 2022 00:59:50 GMT", "id": "24747a485174e78bf8b2b8a6269c8ca8d0a529cb" }, { "date": "Tue, 08 Mar 2022 15:53:37 GMT", "id": "0358cfdcc41283e02a0d2d03450e0b4ff5198da2" }, { "date": "Thu, 17 Mar 2022 16:41:41 GMT", "id": "08e5c10085e2e87b8c3b901ffa11293550140140" }, { "date": "Tue, 08 Mar 2022 19:29:57 GMT", "id": "d0302488d12d1aa6b0ff3fc51d3641f632f89b4b" }, { "date": "Thu, 03 Mar 2022 19:17:49 GMT", "id": "616c160eb7ee8ab538f274b651e5ce67a5ea4f8d" } ], "v8": [] } }, { "cve": "CVE-2022-0978", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1299264, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 12 Apr 2019 03:47:33 GMT", "id": "a5e8f735bfef8be77b8050de46673e4054bc998c" }, { "date": "Mon, 07 Mar 2022 22:25:11 GMT", "id": "04d9d2bb8389539411d6216c1d4ff08d7b84d7a9" } ], "v8": [] } }, { "cve": "CVE-2022-1860", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in UI Foundations. Reported by @ginggilBesel", "issue_id": 1297209, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 12 May 2022 18:39:05 GMT", "id": "1717b8590d3196d9d0f915d2cc18c36f87d0c18e" }, { "date": "Tue, 17 May 2022 17:26:36 GMT", "id": "97030152ecf30fcad4b62e884460f5bf3dd91687" } ], "v8": [] } }, { "cve": "CVE-2022-1636", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Performance APIs. Reported by Seth Brenith, Microsoft\u00a0", "issue_id": 1297283, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 02 May 2022 07:58:17 GMT", "id": "1639db815d9c0e0c274c49a1204f377325fc28ad" }, { "date": "Wed, 20 Apr 2022 19:30:03 GMT", "id": "9f9d5fd2f3085414fc8776bf556fb5c4fa2dac2c" }, { "date": "Fri, 19 Apr 2019 01:15:41 GMT", "id": "1ceb102baa5f1d21076396de5a1fc27798563b5f" }, { "date": "Wed, 20 Apr 2022 19:22:23 GMT", "id": "0164af057c81452bcec61b484e8de5170a89758b" }, { "date": "Thu, 05 May 2022 10:03:12 GMT", "id": "7ceb0da2ef56d29fb463d2eca72696ed388de4fe" }, { "date": "Thu, 07 Apr 2022 10:30:57 GMT", "id": "f2834646594023a2293d91c4c79b84845d74f5b5" }, { "date": "Tue, 10 May 2022 14:05:53 GMT", "id": "ec0cce63f47df40f35e27e668f321c75ff26e670" } ], "v8": [ { "date": "Wed, 13 Apr 2022 21:19:29 GMT", "id": "ac2275b81b2a0e860025a04c1e54990ab96d251b" }, { "date": "Wed, 06 Apr 2022 19:29:14 GMT", "id": "ca51ae3ac8b468509603633adb6ee3b3be9306ec" } ] } }, { "cve": "CVE-2022-1131", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Cast UI. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1297404, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 15 Mar 2022 21:05:56 GMT", "id": "f3c85fc8e436069633e0082cb3de060a2ff8db46" }, { "date": "Thu, 03 Mar 2022 18:52:55 GMT", "id": "4b4ba391d5ab114f2a4f06fabb307be86bf65eeb" }, { "date": "Mon, 28 Mar 2022 01:10:10 GMT", "id": "f2fdce105c82fb6b860309d0f0d49d65b3a24979" } ], "v8": [] } }, { "cve": "CVE-2022-0973", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Safe Browsing. Reported by avaue and Buff3tts at S.S.L.", "issue_id": 1297498, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 08 Mar 2022 04:30:28 GMT", "id": "906da494a320cd54e56004fdb496648deb4e3ce6" }, { "date": "Wed, 23 Feb 2022 05:06:54 GMT", "id": "43bd823074abd33f430bbb94448107910680d85a" }, { "date": "Sat, 05 Mar 2022 00:35:12 GMT", "id": "99c2812f32825223c4f3f362296f1e1b85acaf8e" }, { "date": "Tue, 08 Mar 2022 06:03:58 GMT", "id": "d987062f10146d85be4e4ca6658a3e747f84c253" } ], "v8": [] } }, { "cve": "CVE-2022-0976", "date": "Sun, 13 Feb 2022 00:00:00 GMT", "description": "Heap buffer overflow in GPU. Reported by Omair", "issue_id": 1296866, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Sat, 02 Apr 2022 21:46:04 GMT", "id": "b2f7e89dcec58c0376af82d96688ab0c6f4173a1" }, { "date": "Mon, 04 Apr 2022 19:59:59 GMT", "id": "ce458109a6a93e8a085baff7e6af189b51aa9123" }, { "date": "Tue, 12 Apr 2022 10:12:16 GMT", "id": "15aaa5a53faa8d7d0378452d152915a8e7984b7e" }, { "date": "Fri, 04 Mar 2022 01:10:18 GMT", "id": "9a2188ee5238f9e9d4ddb8d0983179d55d544e54" } ], "v8": [] } }, { "cve": "CVE-2022-0609", "date": "Thu, 10 Feb 2022 06:30:28 GMT", "description": "Use after free in Animation. Reported by Adam Weidemann and Cl\u00e9ment Lecigne of Google's Threat Analysis Group", "issue_id": 1296150, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 18 Feb 2022 20:28:27 GMT", "id": "ae61862752353103f4b7f4d21ca7e948dd6c35eb" }, { "date": "Wed, 16 Feb 2022 19:25:28 GMT", "id": "5fe0a966e36174a933334d89fd0be003502c90d4" } ], "v8": [] } }, { "cve": "CVE-2022-0796", "date": "Wed, 09 Feb 2022 10:32:10 GMT", "description": "Use after free in Media. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1295786, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 24 Feb 2022 17:39:53 GMT", "id": "6b2643846ae3a2ea925a0d3d0773bbf5c9565917" }, { "date": "Mon, 14 Feb 2022 21:00:35 GMT", "id": "34526c3d0a857a22618e4d77c7f63b5ca6f8d3d2" }, { "date": "Wed, 23 Feb 2022 01:48:56 GMT", "id": "ae144d56941a36e2c4e40a58c3fc508a4566a283" }, { "date": "Wed, 23 Feb 2022 01:34:20 GMT", "id": "5ee033bd9c6f7fb73c0c3af2ef6cad52855f8f28" } ], "v8": [] } }, { "cve": "CVE-2022-0975", "date": "Wed, 09 Feb 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1295411, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 04 Mar 2022 14:34:30 GMT", "id": "91d805fceaf561052f3c943ff7f51fc057639138" } ], "v8": [] } }, { "cve": "CVE-2022-0794", "date": "Thu, 03 Feb 2022 19:31:47 GMT", "description": "Use after free in WebShare. Reported by Khalil Zhani", "issue_id": 1294097, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 24 Feb 2022 15:44:53 GMT", "id": "8649511cc77ce6dbe6194480e4afd10eab4a127c" }, { "date": "Tue, 22 Feb 2022 18:18:12 GMT", "id": "e30c255bcafdeb25ec1f634dba8540c8e93db5df" }, { "date": "Tue, 22 Feb 2022 17:56:05 GMT", "id": "a9824a8bff47b9699bf2df1d59cf30d1ef3b9201" }, { "date": "Wed, 09 Feb 2022 21:33:14 GMT", "id": "2d9e826b165b03da422727cc0905b05780b1a66d" } ], "v8": [] } }, { "cve": "CVE-2022-1125", "date": "Sat, 29 Jan 2022 00:00:00 GMT", "description": "Use after free in Portals. Reported by Khalil Zhani", "issue_id": 1292261, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 25 Feb 2022 18:28:35 GMT", "id": "2f06825c8a968f2c9b0e1391cfa9f4eef984f261" }, { "date": "Mon, 07 Mar 2022 20:12:02 GMT", "id": "327b900d80bdb717d697cc0766b88bdfe230a1e8" }, { "date": "Thu, 07 Apr 2022 17:15:05 GMT", "id": "591d198d2e38e017bcde793deb87c2e694cf282a" } ], "v8": [] } }, { "cve": "CVE-2022-1127", "date": "Fri, 28 Jan 2022 00:00:00 GMT", "description": "Use after free in QR Code Generator. Reported by anonymous", "issue_id": 1291891, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 28 Feb 2022 23:54:13 GMT", "id": "78be1c5b4615d380d1353df0d46d95068e848b18" }, { "date": "Thu, 24 Feb 2022 19:40:19 GMT", "id": "7a9d15519436b530d3fd219b53741be8530d2217" } ], "v8": [] } }, { "cve": "CVE-2022-0974", "date": "Fri, 28 Jan 2022 00:00:00 GMT", "description": "Use after free in Splitscreen. Reported by @ginggilBesel", "issue_id": 1291986, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 23 Feb 2022 19:25:05 GMT", "id": "b35a7847d73d0e0631229506095b817db25cf40a" }, { "date": "Fri, 04 Mar 2022 20:11:24 GMT", "id": "106b06e760b2c41af6d89a3f7e9634db72776f6c" }, { "date": "Fri, 25 Feb 2022 05:01:08 GMT", "id": "137f63c76b518c5e4bb81bfbd3b285cd4431527f" }, { "date": "Fri, 04 Mar 2022 20:41:45 GMT", "id": "dea3b599a82630f9535698d97187907462090676" }, { "date": "Mon, 28 Feb 2022 21:08:15 GMT", "id": "81faaaaf4f0efc219164933a5cce0c9a1820f25b" }, { "date": "Thu, 17 Mar 2022 11:30:41 GMT", "id": "ee261b6eb59a6d1498233e7c418678a204ea05dd" }, { "date": "Mon, 28 Feb 2022 21:22:24 GMT", "id": "f66d0f81d2f08b751b9784ca403172a2f9ab34c3" } ], "v8": [] } }, { "cve": "CVE-2022-0793", "date": "Thu, 27 Jan 2022 14:51:35 GMT", "description": "Use after free in Views. Reported by Thomas Orlita", "issue_id": 1291728, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 31 Jan 2022 23:58:23 GMT", "id": "4535fe2334d0713535adb52b641a8cb34e11333c" }, { "date": "Thu, 17 Feb 2022 16:23:29 GMT", "id": "1887414c016d19e48e18ac998684f7b2f90d8898" }, { "date": "Wed, 02 Feb 2022 18:57:48 GMT", "id": "d636ddca68f281417383bf26f7a2e6a35369c865" } ], "v8": [] } }, { "cve": "CVE-2022-0603", "date": "Sat, 22 Jan 2022 03:21:42 GMT", "description": "Use after free in File Manager. Reported by Chaoyuan Peng (@ret2happy)", "issue_id": 1290008, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 31 Jan 2022 05:15:24 GMT", "id": "0a4ede6c430df907937e910d0abd532d2a6c0e77" }, { "date": "Tue, 01 Feb 2022 00:53:47 GMT", "id": "0772f9d48f1211a8d32aac0c55d84d2159f6c70b" }, { "date": "Thu, 03 Feb 2022 12:22:50 GMT", "id": "516dfe32ba33fe61f410d3f75580109e27a26e15" }, { "date": "Mon, 31 Jan 2022 10:30:54 GMT", "id": "12172c1da521c9ff6faff8df5c6a512cb583eba1" }, { "date": "Tue, 01 Feb 2022 04:27:03 GMT", "id": "f32d3413b24bdce6605316c066b2225753f3b7de" } ], "v8": [] } }, { "cve": "CVE-2022-0456", "date": "Thu, 20 Jan 2022 22:06:47 GMT", "description": "Use after free in Web Search. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1289523, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 04 Feb 2022 12:21:07 GMT", "id": "77982678b1b4fb97b4bc2c3f75edcbbec4a282a7" }, { "date": "Wed, 26 Jan 2022 00:40:15 GMT", "id": "5b60f6559fee6a01a5d8a3ffd644369dc646ed88" }, { "date": "Thu, 27 Jan 2022 22:41:04 GMT", "id": "75d5730e0f71e85595580fcc0d83723e21878769" }, { "date": "Fri, 21 Jan 2022 23:15:42 GMT", "id": "65080d25a92a1a4fb45d052277702ae2aac19be4" } ], "v8": [] } }, { "cve": "CVE-2022-0789", "date": "Thu, 20 Jan 2022 13:43:36 GMT", "description": "Heap buffer overflow in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1289383, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 27 Jan 2022 04:36:15 GMT", "id": "fe5811a1e4ca6e7dc226adea186f7e67b53fabe5" } ], "v8": [] } }, { "cve": "CVE-2022-0606", "date": "Mon, 17 Jan 2022 06:45:57 GMT", "description": "Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1288020, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Feb 2022 02:15:22 GMT", "id": "7aa53b8bf162e8ce84a705c533af9039efa4ea6e" } ], "v8": [] } }, { "cve": "CVE-2022-0454", "date": "Mon, 17 Jan 2022 02:24:11 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Seong-Hwan Park (SeHwa)", "issue_id": 1287962, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$12000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 17 Jan 2022 22:20:32 GMT", "id": "f322782a9a8cb5b30737a73aea9b7be20e3cdc9c" } ], "v8": [] } }, { "cve": "CVE-2022-0605", "date": "Wed, 12 Jan 2022 16:40:44 GMT", "description": "Use after free in Webstore API. Reported by Thomas Orlita\u00a0", "issue_id": 1286940, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 01 Feb 2022 20:32:17 GMT", "id": "3da687e35069ff2ec44af3140923359ecb67005c" }, { "date": "Thu, 17 Feb 2022 12:08:22 GMT", "id": "17abdb65f470f7d150e1abd79d0812121e7095a8" }, { "date": "Fri, 11 Feb 2022 20:04:44 GMT", "id": "92513389e86c68a162574a74c55c0cf34cbab073" }, { "date": "Tue, 15 Feb 2022 18:27:21 GMT", "id": "8bccbf86d76c1ff282248c9f2e0c3092267a1f9b" } ], "v8": [] } }, { "cve": "CVE-2022-0792", "date": "Mon, 10 Jan 2022 08:41:17 GMT", "description": "Out of bounds read in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1285885, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 25 Jan 2022 20:04:11 GMT", "id": "79d1d335f7adaa4cedcd333b30395648d525a1ff" } ], "v8": [] } }, { "cve": "CVE-2022-1305", "date": "Fri, 07 Jan 2022 00:00:00 GMT", "description": "Use after free in storage. Reported by Anonymous", "issue_id": 1285234, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$6000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 29 Mar 2022 23:12:33 GMT", "id": "7187b41cd6201840c8c66f6ccb88c5907c5f11bc" }, { "date": "Tue, 05 Apr 2022 20:09:23 GMT", "id": "5cb934a23ddfccb7ce7ace36b5f0ec5036281e0f" }, { "date": "Mon, 28 Mar 2022 20:12:14 GMT", "id": "7222e9825fc02acc962e005c59885ee2f26df185" } ], "v8": [] } }, { "cve": "CVE-2022-0453", "date": "Thu, 06 Jan 2022 03:00:48 GMT", "description": "Use after free in Reader Mode. Reported by Rong Jian of VRI", "issue_id": 1284916, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 18 Jan 2022 19:03:59 GMT", "id": "ee3c9dfc50f9330c8205cd7eff97dd18774573c3" }, { "date": "Mon, 24 Jan 2022 17:34:23 GMT", "id": "32ddaf46fc3e232c360f691f01c9165c9a206fe4" }, { "date": "Mon, 07 Feb 2022 18:13:19 GMT", "id": "917f042f6707fac7c578254584689a62feaa695b" } ], "v8": [] } }, { "cve": "CVE-2022-0452", "date": "Wed, 05 Jan 2022 04:08:17 GMT", "description": "Use after free in Safe Browsing. Reported by avaue at S.S.L.", "issue_id": 1284584, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Sat, 22 Jan 2022 03:23:36 GMT", "id": "524b01441d1acbca385df54d82720fccbd48f168" }, { "date": "Fri, 14 Jan 2022 01:35:00 GMT", "id": "1d9300c6ec561931739e5e756a15b81c0e775139" }, { "date": "Mon, 21 Feb 2022 15:18:50 GMT", "id": "5491d2bacedc0eae10318b57675a1e98e230fb68" } ], "v8": [] } }, { "cve": "CVE-2022-0289", "date": "Tue, 04 Jan 2022 09:56:09 GMT", "description": "Use after free in Safe browsing. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1284367, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 02:50:37 GMT", "id": "3166b688a51b35859d6a1277ff10d9ae64e04bb0" }, { "date": "Thu, 06 Jan 2022 08:36:45 GMT", "id": "2481bf37971a89c20e033379e08d252345dd491c" }, { "date": "Wed, 12 Jan 2022 03:05:52 GMT", "id": "b9929424c37083c3056e54c142e19bbcc929480f" }, { "date": "Tue, 29 Mar 2022 16:40:38 GMT", "id": "99c840474019de6e09dbe895775199f46e3d688e" }, { "date": "Wed, 12 Jan 2022 02:50:21 GMT", "id": "51608cbd629d661789397eb66c893e21fd0ac539" } ], "v8": [] } }, { "cve": "CVE-2022-0296", "date": "Thu, 30 Dec 2021 01:57:23 GMT", "description": "Use after free in Printing. Reported by koocola(@alo_cook) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1283375, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 13 Jan 2022 02:32:03 GMT", "id": "047cc012ad2ced8d329ae8a3ead87a0b1b1ab0b9" }, { "date": "Thu, 13 Jan 2022 00:05:12 GMT", "id": "0387bda627b87c47e8d7d331fec7967b8dd59eca" }, { "date": "Tue, 11 Jan 2022 02:43:07 GMT", "id": "3ae14a78d724336edc0ad91858e38147523f68cf" }, { "date": "Fri, 07 Jan 2022 09:38:01 GMT", "id": "725a30e54d89e62744a78e019f49b0928d4d8230" } ], "v8": [] } }, { "cve": "CVE-2022-0293", "date": "Thu, 30 Dec 2021 01:28:13 GMT", "description": "Use after free in Web packaging. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1283371, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 13 Jan 2022 04:52:23 GMT", "id": "a1f95e4f705d6718fce869eaa9a0879dfd09ef89" }, { "date": "Thu, 13 Jan 2022 02:39:02 GMT", "id": "b70c72fb95dab9d262f37477a7657e7642f16849" }, { "date": "Mon, 10 Jan 2022 19:38:51 GMT", "id": "940e7df2de6847400f26f59080f4f2ed66535e00" }, { "date": "Thu, 06 Jan 2022 01:21:21 GMT", "id": "223e1a1752f3513c4b250bc6b8246256febfe121" } ], "v8": [] } }, { "cve": "CVE-2022-0306", "date": "Wed, 29 Dec 2021 04:35:13 GMT", "description": "Heap buffer overflow in PDFium. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1283198, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 05:51:17 GMT", "id": "a86cf734253725630faa47b53ad409c4f86d2505" }, { "date": "Tue, 11 Jan 2022 03:23:19 GMT", "id": "e90077887b7be746e96af18af0872bcc420f565e" }, { "date": "Thu, 30 Dec 2021 05:08:29 GMT", "id": "ac024e185d9b6cd3dd76e265441392d60b69b8ac" }, { "date": "Tue, 04 Jan 2022 20:29:42 GMT", "id": "bebc6cfb983ff110b940c05964f8bef008514457" } ], "v8": [] } }, { "cve": "CVE-2022-1308", "date": "Tue, 28 Dec 2021 00:00:00 GMT", "description": "Use after free in BFCache. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1283050, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 07 Apr 2022 05:44:20 GMT", "id": "80e8d7dbedced3e83a5a754aab69e89c9518ad9f" }, { "date": "Thu, 07 Apr 2022 02:16:11 GMT", "id": "57bdd90d8c81168e8f055e5663967854068b7f05" }, { "date": "Tue, 19 Apr 2022 15:25:29 GMT", "id": "38ab9c5b06a472fcb5105458b2b4037749c50766" }, { "date": "Tue, 19 Apr 2022 14:25:57 GMT", "id": "fc6dc3985f265602269e60c10916532140eb8a4f" }, { "date": "Tue, 19 Apr 2022 16:17:20 GMT", "id": "7728c580999231f9f8b3202179a293a6b6b65f35" }, { "date": "Tue, 29 Mar 2022 08:10:17 GMT", "id": "a69d2ffadf8420b2625c3337be34905c6c6f88ab" } ], "v8": [] } }, { "cve": "CVE-2022-0795", "date": "Sun, 26 Dec 2021 08:16:55 GMT", "description": "Type Confusion in Blink Layout. Reported by 0x74960", "issue_id": 1282782, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 06 Jan 2022 17:23:22 GMT", "id": "809b8358c1c2ba4971990e56b728203b36298bf2" } ], "v8": [] } }, { "cve": "CVE-2022-0305", "date": "Thu, 23 Dec 2021 00:00:00 GMT", "description": "Inappropriate implementation in Service Worker API. Reported by @uwu7586", "issue_id": 1282354, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 00:33:53 GMT", "id": "63bd2fd5c8e374dc08c94d960e6118001b8530d0" }, { "date": "Tue, 18 Jan 2022 17:20:31 GMT", "id": "90cec52fb4352d8946bd159007f45b918c1a8906" }, { "date": "Fri, 14 Jan 2022 18:54:00 GMT", "id": "8e5ac793d34e7d8b099159c381821afc4e74d026" }, { "date": "Fri, 14 Jan 2022 21:56:46 GMT", "id": "78cf343a785a70d3ee240b3af1fe12a6272cc63e" } ], "v8": [] } }, { "cve": "CVE-2022-0304", "date": "Wed, 22 Dec 2021 01:21:08 GMT", "description": "Use after free in Bookmarks. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1282118, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 14 Jan 2022 20:10:51 GMT", "id": "9109a3aa18a637f5ecb11abe81654415e8523ac8" }, { "date": "Fri, 14 Jan 2022 20:11:36 GMT", "id": "08d44f95a8a08ce0e702324589fab34ea7ebd581" }, { "date": "Mon, 10 Jan 2022 20:32:48 GMT", "id": "5eaba7cca73cbb6743cc76c7bf1e5935d94110cc" }, { "date": "Fri, 14 Jan 2022 20:07:41 GMT", "id": "2fa5a30cbee60a79a8f64fa054c31447c568071c" } ], "v8": [] } }, { "cve": "CVE-2022-0797", "date": "Tue, 21 Dec 2021 07:30:46 GMT", "description": "Out of bounds memory access in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1281908, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 24 Feb 2022 15:13:13 GMT", "id": "62142d222a80b14827ebc9317c7a3300a8af4259" }, { "date": "Tue, 15 Feb 2022 16:48:02 GMT", "id": "8d5bc69146505785ce299c490e35e3f3ef19f69c" }, { "date": "Tue, 22 Feb 2022 20:24:06 GMT", "id": "9247f3b959d638d15ee121581a29cf1a21332a77" }, { "date": "Tue, 22 Feb 2022 20:30:20 GMT", "id": "e558401fbf697d18476e9d64ee3eb193beaf5b44" } ], "v8": [] } }, { "cve": "CVE-2022-0291", "date": "Sun, 19 Dec 2021 00:00:00 GMT", "description": "Inappropriate implementation in Storage. Reported by Anonymous", "issue_id": 1281084, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 07 Jan 2022 09:39:46 GMT", "id": "2eb7fa85cc36271d2f9dd77047591b0b5d3d35ee" }, { "date": "Mon, 20 Dec 2021 21:43:14 GMT", "id": "0fa630e347c4910325210e903825e5c74ab1f6cb" }, { "date": "Fri, 07 Jan 2022 21:02:39 GMT", "id": "c349386033e236faad3b0d99a5cc60a62cde43f3" }, { "date": "Fri, 07 Jan 2022 08:00:05 GMT", "id": "f7bfc2c33d6ac4a0442786cec2b4ce2955871bfb" } ], "v8": [] } }, { "cve": "CVE-2022-0106", "date": "Fri, 10 Dec 2021 15:41:14 GMT", "description": "Use after free in Autofill. Reported by Khalil Zhani", "issue_id": 1278960, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 16 Dec 2021 20:45:47 GMT", "id": "a465e42d95183ea523e7d7190a40224dcc818a86" }, { "date": "Tue, 28 Dec 2021 18:55:39 GMT", "id": "e89aed2a562e2cdf797fe6e4ed4f35e2cfb05215" }, { "date": "Mon, 20 Dec 2021 10:28:23 GMT", "id": "40edf82fdf87b74dca867ea668ef64a7c4d28b13" } ], "v8": [] } }, { "cve": "CVE-2022-0302", "date": "Thu, 09 Dec 2021 20:49:39 GMT", "description": "Use after free in Omnibox. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1278613, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 04 Jan 2022 21:14:42 GMT", "id": "ecf38d17dba552c9802d4580e49e635340d20b72" }, { "date": "Tue, 04 Jan 2022 22:52:35 GMT", "id": "bd367fdccc0f9d19989f0c02312c27c60511acd7" }, { "date": "Tue, 04 Jan 2022 23:38:07 GMT", "id": "a6e660f31604746d334f0b3312da1557a27554c3" }, { "date": "Wed, 15 Dec 2021 20:20:30 GMT", "id": "a3393ce39586558f74b4fd57495bfdd66a6b564b" } ], "v8": [] } }, { "cve": "CVE-2022-0791", "date": "Thu, 09 Dec 2021 06:04:19 GMT", "description": "Use after free in Omnibox. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1278322, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 20 Jan 2022 18:33:14 GMT", "id": "24459ac6c72b2fd7c90f9e58bdbd6808c1a19be0" } ], "v8": [] } }, { "cve": "CVE-2021-4102", "date": "Thu, 09 Dec 2021 00:00:00 GMT", "description": "Use after free in V8. Reported by Anonymous", "issue_id": 1278387, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 10 Dec 2021 21:47:30 GMT", "id": "bc50756657604eafac3262283a00284081eed5fb" }, { "date": "Wed, 15 Dec 2021 10:42:08 GMT", "id": "418c276ef228163080a4aed7ea0f4bab3aeeb8a0" }, { "date": "Fri, 10 Dec 2021 21:47:46 GMT", "id": "f4f11c23ae2eaf9bb4525d0fac7ab842de9b0fe2" }, { "date": "Fri, 10 Dec 2021 16:35:50 GMT", "id": "51af8170aa83307f898343de499f6fe29e67ce2e" }, { "date": "Fri, 10 Dec 2021 21:44:14 GMT", "id": "1ec6d747227a365ddbda0228520603e44fa195c2" }, { "date": "Fri, 10 Dec 2021 15:36:42 GMT", "id": "4fae8b16802a416fe3aab0e7792fabe96cf1ecd8" } ] } }, { "cve": "CVE-2022-0295", "date": "Wed, 08 Dec 2021 18:52:05 GMT", "description": "Use after free in Omnibox. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1278180, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 04 Jan 2022 21:14:42 GMT", "id": "ecf38d17dba552c9802d4580e49e635340d20b72" }, { "date": "Tue, 04 Jan 2022 22:52:35 GMT", "id": "bd367fdccc0f9d19989f0c02312c27c60511acd7" }, { "date": "Tue, 04 Jan 2022 23:38:07 GMT", "id": "a6e660f31604746d334f0b3312da1557a27554c3" }, { "date": "Wed, 15 Dec 2021 20:20:30 GMT", "id": "a3393ce39586558f74b4fd57495bfdd66a6b564b" } ], "v8": [] } }, { "cve": "CVE-2022-0301", "date": "Fri, 03 Dec 2021 01:25:09 GMT", "description": "Heap buffer overflow in DevTools. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1276331, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 21 Feb 2022 12:59:21 GMT", "id": "8948a3646cb208b2f48e93226e56ad0f8df084ac" }, { "date": "Fri, 14 Jan 2022 06:03:52 GMT", "id": "1e49157f8e38eda42967aa817f5d7b8fbd734f39" }, { "date": "Thu, 13 Jan 2022 23:54:59 GMT", "id": "af938c7036f1384b26d82620fc4f1b06626b6836" }, { "date": "Tue, 21 Dec 2021 18:12:33 GMT", "id": "97fad0d96c874399a640f1a69b25e6e0d7bd95c6" } ], "v8": [] } }, { "cve": "CVE-2022-0300", "date": "Tue, 30 Nov 2021 23:06:03 GMT", "description": "Use after free in Text Input Method Editor. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1275438, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 14 Dec 2021 18:10:36 GMT", "id": "9404000e28b0bf7a673cbb174daab050bcf90b50" }, { "date": "Wed, 12 Jan 2022 01:05:51 GMT", "id": "b93f953035beb268c853e071805f142da558171a" }, { "date": "Wed, 12 Jan 2022 01:03:32 GMT", "id": "c0bcbc25a68d127feddab13260ad498555b7514a" }, { "date": "Wed, 05 Jan 2022 20:35:14 GMT", "id": "5c21c2f5dc7b8fbd9ff8732952be932edf6e5c14" } ], "v8": [] } }, { "cve": "CVE-2022-0096", "date": "Tue, 30 Nov 2021 00:42:10 GMT", "description": "Use after free in Storage. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1275020, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 28 Dec 2021 22:46:20 GMT", "id": "e531a38cf5fd45997b5f60b1d4a3c58126996b73" }, { "date": "Wed, 29 Dec 2021 19:49:22 GMT", "id": "c5571653d9323402e7ab316f97e675b8e7f2c6e1" }, { "date": "Wed, 22 Dec 2021 00:07:37 GMT", "id": "e304c0373f9cc4a65d39d7094e4897627e83390e" }, { "date": "Tue, 28 Dec 2021 23:20:39 GMT", "id": "6122b68dfd0437e5576889466f4c0c34158a14ef" } ], "v8": [] } }, { "cve": "CVE-2021-4067", "date": "Mon, 29 Nov 2021 09:49:28 GMT", "description": "Use after free in window manager. Reported by @ginggilBesel", "issue_id": 1274641, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 02:42:58 GMT", "id": "bab2d02a8b84177d86325c76800c8c903755c1b4" }, { "date": "Thu, 02 Dec 2021 18:45:35 GMT", "id": "67d4e10ebb7f4306f3e2831623f882857ec163f9" }, { "date": "Thu, 02 Dec 2021 17:31:58 GMT", "id": "f517d3f1375ce3a02a0fff280ee30e8319337ec0" } ], "v8": [] } }, { "cve": "CVE-2021-4066", "date": "Mon, 29 Nov 2021 01:13:05 GMT", "description": "Integer underflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1274499, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 01 Dec 2021 02:19:56 GMT", "id": "f14b5ca768b132469c21212227d597cdf11b75c7" } ], "v8": [] } }, { "cve": "CVE-2022-0457", "date": "Sun, 28 Nov 2021 18:18:35 GMT", "description": "Type Confusion in V8. Reported by rax of the Group0x58", "issue_id": 1274445, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 24 Jan 2022 10:15:15 GMT", "id": "27bc67f761e613adf5143cb2de3d86685b1f2519" }, { "date": "Thu, 13 Jan 2022 07:45:25 GMT", "id": "4b8d04897cba70cac45eea33d78fa2354dfe2bd7" } ] } }, { "cve": "CVE-2022-0105", "date": "Sun, 28 Nov 2021 09:32:41 GMT", "description": "Use after free in PDF. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1274376, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Dec 2021 19:38:47 GMT", "id": "6d9638366ae0f60f8d2db41857fcbc738c2514d4" }, { "date": "Wed, 08 Dec 2021 00:32:35 GMT", "id": "7fabaa4d4eea71886dd30962dc96aa0f59bd73e3" } ], "v8": [] } }, { "cve": "CVE-2022-0297", "date": "Sun, 28 Nov 2021 00:45:31 GMT", "description": "Use after free in Vulkan. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1274316, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 01 Dec 2021 16:59:25 GMT", "id": "531e47db7393b331895ae58d24b9e33c63671728" }, { "date": "Thu, 16 Dec 2021 02:06:35 GMT", "id": "e0282162cdf5021d1f4ec58addfd516fdc7e8bd1" } ], "v8": [] } }, { "cve": "CVE-2021-4065", "date": "Wed, 24 Nov 2021 18:09:45 GMT", "description": "Use after free in autofill. Reported by 5n1p3r0010 from Topsec ChiXiao Lab", "issue_id": 1273674, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Dec 2021 00:34:55 GMT", "id": "9b444926aa0bea35828f7e7de2d669d05262cb82" }, { "date": "Tue, 30 Nov 2021 21:14:25 GMT", "id": "f151ba1355794fc39e22cb3afec7e8c04acfc4ea" }, { "date": "Fri, 03 Dec 2021 08:24:15 GMT", "id": "28265d547872a64b3b6ef00249848fbbcff659f0" }, { "date": "Wed, 06 Apr 2022 18:08:33 GMT", "id": "b78464d0004934e143d74fe308d926dde5f3cf32" } ], "v8": [] } }, { "cve": "CVE-2022-0104", "date": "Wed, 24 Nov 2021 17:04:01 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Abraruddin Khan and Omair", "issue_id": 1273661, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 07 Dec 2021 00:57:11 GMT", "id": "0bc38ea16ec75040921620619a23233b0f8f4b36" } ], "v8": [] } }, { "cve": "CVE-2022-0098", "date": "Wed, 24 Nov 2021 13:14:29 GMT", "description": "Use after free in Screen Capture. Reported by @ginggilBesel", "issue_id": 1273609, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Dec 2021 17:38:20 GMT", "id": "cefa9f2fcb175fd6a21bd616bd5ce73bb90a9ee1" }, { "date": "Tue, 30 Nov 2021 17:36:38 GMT", "id": "fccc5919f3edb3b7e6edad4641d6479628976714" } ], "v8": [] } }, { "cve": "CVE-2022-0604", "date": "Wed, 24 Nov 2021 03:35:45 GMT", "description": "Heap buffer overflow in Tab Groups. Reported by Krace", "issue_id": 1273397, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 14 Feb 2022 18:18:38 GMT", "id": "b613ed5f67476cc532ebf9e2accd889283c1ebb6" }, { "date": "Wed, 09 Feb 2022 17:07:33 GMT", "id": "6921d04d0dadf9d3621cf0491a152f778ae27965" }, { "date": "Wed, 09 Feb 2022 19:14:19 GMT", "id": "2b608b95e2534312a86105be25578a20a5fac6e7" }, { "date": "Tue, 25 Jan 2022 02:58:21 GMT", "id": "8e276e73f8390fc4f88a2752527889467bf742bb" } ], "v8": [] } }, { "cve": "CVE-2021-4064", "date": "Tue, 23 Nov 2021 13:17:21 GMT", "description": "Use after free in screen capture. Reported by @ginggilBesel", "issue_id": 1273197, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 18:54:54 GMT", "id": "84d60042e8b182b055e91645ec94e7c7a08a2f93" }, { "date": "Thu, 02 Dec 2021 18:09:07 GMT", "id": "7bdbc8355f6e3290f517a9829d58c3b80b97c7af" }, { "date": "Thu, 02 Dec 2021 17:53:55 GMT", "id": "7fa981a9fedeb3247ff04f11becac83590d91c8b" } ], "v8": [] } }, { "cve": "CVE-2021-4063", "date": "Tue, 23 Nov 2021 11:52:21 GMT", "description": "Use after free in developer tools. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1273176, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 25 Nov 2021 09:55:39 GMT", "id": "82d52ba11ef24778fee951b8e3c78cb1b3cf35f2" }, { "date": "Tue, 30 Nov 2021 08:56:50 GMT", "id": "c1d56eafd19c8dd8629eb9434fa49e79184b65e8" }, { "date": "Tue, 30 Nov 2021 09:34:39 GMT", "id": "2acb20303dc00dcc1a167a1ff5b80724ea1ec791" } ], "v8": [] } }, { "cve": "CVE-2022-0294", "date": "Tue, 23 Nov 2021 03:12:24 GMT", "description": "Inappropriate implementation in Push messaging. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1273017, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 14 Jan 2022 08:49:50 GMT", "id": "c51812de4d7a8614b2e445dbcb62478edc4c4f37" }, { "date": "Tue, 21 Dec 2021 15:41:03 GMT", "id": "c941c1be502c0f84a12731007bc99952d5cc5063" }, { "date": "Wed, 22 Dec 2021 18:35:34 GMT", "id": "e4195bf41feace94152b62b8c0f443887e8ada6f" }, { "date": "Mon, 10 Jan 2022 18:30:27 GMT", "id": "55339e4207939a6fc7ffc9fb30e448fcfc462670" } ], "v8": [] } }, { "cve": "CVE-2022-0790", "date": "Tue, 23 Nov 2021 00:00:00 GMT", "description": "Use after free in Cast UI. Reported by Anonymous", "issue_id": 1274077, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Sat, 08 Jan 2022 05:28:27 GMT", "id": "823301b29d38ed1d393c1488c0f7069d229a2d74" } ], "v8": [] } }, { "cve": "CVE-2021-4062", "date": "Mon, 22 Nov 2021 01:18:53 GMT", "description": "Heap buffer overflow in BFCache. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1272403, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 06 Dec 2021 07:43:18 GMT", "id": "bd673db3b1d6b2eaccf3238d7711228a4aa522e3" }, { "date": "Fri, 03 Dec 2021 04:12:48 GMT", "id": "9dd8b9a39e64a3ab90e7957d1225a1955d8da43f" }, { "date": "Wed, 24 Nov 2021 15:26:07 GMT", "id": "1059bf191cc8c7a8a10fd667522b6949e8de0f35" } ], "v8": [] } }, { "cve": "CVE-2022-0103", "date": "Sat, 20 Nov 2021 18:29:06 GMT", "description": "Use after free in SwiftShader. Reported by Abraruddin Khan and Omair\u00a0", "issue_id": 1272266, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 09 Dec 2021 23:14:38 GMT", "id": "44b788a5992fca21ead0749fcfe39c294b5ca97c" } ], "v8": [] } }, { "cve": "CVE-2021-4100", "date": "Fri, 19 Nov 2021 13:04:56 GMT", "description": "Object lifecycle issue in ANGLE. Reported by Aki Helin of Solita", "issue_id": 1272068, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Dec 2021 22:43:32 GMT", "id": "9df08d0fb9551aa2f175ab7f7741228a5279d70d" } ], "v8": [] } }, { "cve": "CVE-2021-4061", "date": "Wed, 17 Nov 2021 16:19:34 GMT", "description": "Type Confusion in V8. Reported by Paolo Severini", "issue_id": 1271456, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 23 Nov 2021 00:47:59 GMT", "id": "9324d7fd21278d382dbfe1892f4fbb64241fb9f0" }, { "date": "Tue, 23 Nov 2021 01:32:13 GMT", "id": "daf8df62aca44279d7c44a475ccf57fdbad3969b" }, { "date": "Fri, 19 Nov 2021 11:42:25 GMT", "id": "6c62b55fc2ddccc3825e91eb1baebc9ed17cbc5c" }, { "date": "Thu, 18 Nov 2021 10:38:26 GMT", "id": "9c8741567d29c09133f305e521c076a0b7205d8a" }, { "date": "Fri, 19 Nov 2021 11:43:28 GMT", "id": "be835718714cddfcc832e7cf93a2d15b396014d7" } ] } }, { "cve": "CVE-2021-4059", "date": "Tue, 16 Nov 2021 18:12:41 GMT", "description": "Insufficient data validation in loader. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1270990, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 29 Nov 2021 19:10:38 GMT", "id": "a5f630e5f94da28a926d60da7dde194acd8697f0" }, { "date": "Wed, 08 Dec 2021 00:55:25 GMT", "id": "3244f616e74119cc190a90db8af746f7de98dc96" }, { "date": "Fri, 03 Dec 2021 18:15:17 GMT", "id": "dbde8795233ac77de05b9309210bcf6a137f8959" } ], "v8": [] } }, { "cve": "CVE-2021-4099", "date": "Tue, 16 Nov 2021 00:40:15 GMT", "description": "Use after free in Swiftshader. Reported by Aki Helin of Solita", "issue_id": 1270658, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 01 Dec 2021 19:46:35 GMT", "id": "a1bfeb949fd02f2f73ab62b4d20a1493cbc6189a" } ], "v8": [] } }, { "cve": "CVE-2022-0455", "date": "Mon, 15 Nov 2021 19:02:57 GMT", "description": "Inappropriate implementation in Full Screen Mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1270593, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 12 Jan 2022 01:42:41 GMT", "id": "708b1652778fffdb76a2e54a9cd6ffa3809f622f" }, { "date": "Wed, 22 Dec 2021 18:11:10 GMT", "id": "5826dba7f25f6915bebf2711f8258f8f56b81439" }, { "date": "Tue, 11 Jan 2022 21:00:01 GMT", "id": "5342e92ac42713522f09dd71292bd8fd62181a29" }, { "date": "Fri, 07 Jan 2022 02:13:46 GMT", "id": "57192a3615a7aae0e4ace6558965f355c2e0ec27" }, { "date": "Wed, 05 Jan 2022 03:51:42 GMT", "id": "928a8265d3000206a8b11073e983010bb64cb8f4" }, { "date": "Fri, 21 Jan 2022 00:34:04 GMT", "id": "e2d4274e25bc2d642f99c6cee97b5015ff67c9af" } ], "v8": [] } }, { "cve": "CVE-2022-0292", "date": "Mon, 15 Nov 2021 09:29:52 GMT", "description": "Inappropriate implementation in Fenced Frames. Reported by Brendon Tiszka\u00a0", "issue_id": 1270358, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$17000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 07 Jan 2022 23:00:30 GMT", "id": "556ad8e9dc252b6ffb5924ce0a20d3217f96bde5" }, { "date": "Wed, 12 Jan 2022 03:49:51 GMT", "id": "3d6a86ed0b1f97357e3840a74c85a5471de47ad3" }, { "date": "Wed, 08 Dec 2021 00:26:10 GMT", "id": "4f6e84a9e911b9e22ff36770e8ceb5e1d09dd851" }, { "date": "Fri, 10 Dec 2021 19:51:49 GMT", "id": "2b3304ff64a1103b87b1c760fdc0eaa3c4465df5" }, { "date": "Fri, 07 Jan 2022 20:19:30 GMT", "id": "3c964808805d55dae3b1a56b2761895dc4dc392d" }, { "date": "Sat, 08 Jan 2022 13:50:10 GMT", "id": "6e5abb702af92d5ab91c33994b2cd288f4f22beb" }, { "date": "Tue, 07 Dec 2021 20:53:49 GMT", "id": "874303093082ebf6c83ca7f650b41de1af6615bb" }, { "date": "Mon, 20 Dec 2021 08:50:18 GMT", "id": "9b740966ebb4f42f8de032fa0d42f843d1d4845a" } ], "v8": [] } }, { "cve": "CVE-2022-0608", "date": "Mon, 15 Nov 2021 08:06:43 GMT", "description": "Integer overflow in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1270333, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 27 Jan 2022 21:00:04 GMT", "id": "e1432faf5e101b3a516037a26818c03c759d2fdd" }, { "date": "Wed, 02 Feb 2022 05:59:56 GMT", "id": "89328d6207e18eaa53316fe8b2f7fb94a1511304" }, { "date": "Tue, 25 Jan 2022 12:16:14 GMT", "id": "76eca90d0e9c09bfbb8c3e8999f36e6da6842a39" }, { "date": "Sat, 05 Feb 2022 13:41:47 GMT", "id": "ebc188ad769e7a91739cdd443aa0e427b4f205d7" } ], "v8": [] } }, { "cve": "CVE-2021-4078", "date": "Tue, 09 Nov 2021 22:37:34 GMT", "description": "Type confusion in V8. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab", "issue_id": 1268738, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 16 Nov 2021 13:58:29 GMT", "id": "6ffcdddbc2d9109dfab0caf7e3e428728e830090" }, { "date": "Thu, 19 May 2022 14:59:44 GMT", "id": "1da4b373a72137fb386927c0e4984520d46b0448" }, { "date": "Wed, 17 Nov 2021 12:03:32 GMT", "id": "85ab0ad7789a7188b4c0b2be3cd3d758134c7de6" }, { "date": "Tue, 16 Nov 2021 13:22:04 GMT", "id": "9b5f39855448c9dc283832063c4e9e1c4dd07246" } ] } }, { "cve": "CVE-2021-38011", "date": "Mon, 08 Nov 2021 22:50:54 GMT", "description": "Use after free in storage foundation. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1268274, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 10 Nov 2021 21:14:03 GMT", "id": "a5f54612590dc58fbe1dc283eef89269c23fa3b7" }, { "date": "Wed, 10 Nov 2021 02:19:17 GMT", "id": "e7bae3f4b45d22ea3fdc15878b238d81a10785ae" }, { "date": "Wed, 10 Nov 2021 21:09:27 GMT", "id": "f071d5efa653a4dd308f8b44f8e0761aeb4fc824" }, { "date": "Wed, 10 Nov 2021 00:07:45 GMT", "id": "5200793c2aea5979cc79f3350a4e3d6c0795d6f2" } ], "v8": [] } }, { "cve": "CVE-2021-4053", "date": "Sun, 07 Nov 2021 22:52:56 GMT", "description": "Use after free in UI. Reported by Rox", "issue_id": 1267791, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 25 Nov 2021 17:00:28 GMT", "id": "7280aa30a74b434c714190479cd02c31a064c4e5" }, { "date": "Mon, 29 Nov 2021 22:49:30 GMT", "id": "0d29c13044025b2a05aa09c67fe847a77899e7c3" }, { "date": "Tue, 30 Nov 2021 00:18:35 GMT", "id": "94ca87ec7c634157e3e9815ad87d8f5fdd7319bb" } ], "v8": [] } }, { "cve": "CVE-2021-4052", "date": "Sat, 06 Nov 2021 23:55:33 GMT", "description": "Use after free in web apps. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1267661, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 12 Nov 2021 18:54:23 GMT", "id": "25030ef24ece304403cc88cb4fc8c5e8936e0098" }, { "date": "Mon, 15 Nov 2021 23:18:04 GMT", "id": "fc26857104f0bc5ec024941ae39a8236d73057a6" }, { "date": "Tue, 30 Nov 2021 01:51:48 GMT", "id": "e1ed13a08e46f5703705f298edd9e6059c3e87a4" }, { "date": "Tue, 30 Nov 2021 02:08:27 GMT", "id": "30835f861d5cd78b309225a4faab70cd011c8be6" }, { "date": "Tue, 30 Nov 2021 01:26:16 GMT", "id": "62fd7d67b813b1bbb9253408558df7c2d0f75fc3" }, { "date": "Tue, 30 Nov 2021 02:09:48 GMT", "id": "3adb8f7e7dc78e4aa23544b312328647e618643b" } ], "v8": [] } }, { "cve": "CVE-2021-4058", "date": "Fri, 05 Nov 2021 18:24:48 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Abraruddin Khan and Omair\u00a0", "issue_id": 1267496, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 25 Nov 2021 21:32:20 GMT", "id": "70c2cd5a59993d30d0c9f36df12ffacfc4cedb45" }, { "date": "Thu, 02 Dec 2021 00:20:32 GMT", "id": "65ec75ce44893103382bc91e5d5d0fb143261fb3" } ], "v8": [] } }, { "cve": "CVE-2022-0458", "date": "Fri, 05 Nov 2021 00:00:00 GMT", "description": "Use after free in Thumbnail Tab Strip. Reported by Anonymous", "issue_id": 1267060, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Dec 2021 23:05:41 GMT", "id": "276a8bd1ca3292472b84199be83357f94e434c2a" } ], "v8": [] } }, { "cve": "CVE-2021-4055", "date": "Wed, 03 Nov 2021 10:58:16 GMT", "description": "Heap buffer overflow in extensions. Reported by Chen Rong", "issue_id": 1266510, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 00:53:37 GMT", "id": "9da7f37785eb871a24ec9d68cb61ccef87f60644" }, { "date": "Mon, 08 Nov 2021 18:47:23 GMT", "id": "92cf863b4197ec51ed3d0be9aa9abd33a78165c7" }, { "date": "Wed, 01 Dec 2021 23:50:18 GMT", "id": "cf1c0bd0cef311392254af8bc60ed9040c457aa7" } ], "v8": [] } }, { "cve": "CVE-2021-4079", "date": "Mon, 01 Nov 2021 22:50:20 GMT", "description": "Out of bounds write in WebRTC. Reported by Brendon Tiszka", "issue_id": 1265806, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$8500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 17 Nov 2021 00:05:36 GMT", "id": "1716b97db65bb88a0babc8c3f568e99ad4182e20" }, { "date": "Wed, 24 Nov 2021 15:43:42 GMT", "id": "91f7a656fe28a6fe286ce0d3fa613b09c097b348" }, { "date": "Fri, 26 Nov 2021 13:08:02 GMT", "id": "ab7ab73dcfbf83caa4d0a63a5ee3ed580bb71252" }, { "date": "Tue, 30 Nov 2021 16:05:42 GMT", "id": "e29115c06f518667454262c4ec6d3f47505b0e41" }, { "date": "Thu, 02 Dec 2021 15:19:51 GMT", "id": "cc853f9f44892e8808993c724d30d0ef5f4ba804" }, { "date": "Wed, 17 Nov 2021 11:14:40 GMT", "id": "55248ea9aaf1f6f4c67cf3ae4004f3d424a50f1f" } ], "v8": [] } }, { "cve": "CVE-2021-38010", "date": "Thu, 28 Oct 2021 09:51:57 GMT", "description": "Inappropriate implementation in service workers. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1264477, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 10 Dec 2021 20:14:19 GMT", "id": "ae9f97b05fbb5a22e201fbd0253822444ce47dd0" }, { "date": "Mon, 08 Nov 2021 15:05:30 GMT", "id": "1a8af2da50e40331f5b0fb9b39a22a78084caa23" }, { "date": "Wed, 03 Nov 2021 15:30:38 GMT", "id": "dbe67ccde52e30acf6a66b1b9cc83768a067fa6a" } ], "v8": [] } }, { "cve": "CVE-2021-38008", "date": "Tue, 26 Oct 2021 12:21:11 GMT", "description": "Use after free in media. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1263620, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 28 Oct 2021 12:31:03 GMT", "id": "d1055cb23b15e42381bc815eeabb207ce18394d9" }, { "date": "Wed, 03 Nov 2021 12:42:52 GMT", "id": "562a2931f4f6a7de6655d369b64139820b850283" }, { "date": "Tue, 02 Nov 2021 21:21:27 GMT", "id": "109fde1088bef0ad849f0c5dc74d905ff739a05e" }, { "date": "Tue, 02 Nov 2021 19:21:42 GMT", "id": "aa14e55c2bec861e1b32aa43a07175d62ee9f01b" } ], "v8": [] } }, { "cve": "CVE-2021-38003", "date": "Tue, 26 Oct 2021 06:07:14 GMT", "description": "Inappropriate implementation in V8. Reported by Cl\u00e9ment Lecigne from Google TAG and Samuel Gro\u00df from Google Project Zero", "issue_id": 1263462, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Wed, 27 Oct 2021 09:01:33 GMT", "id": "7849ead949e2fb76478bd439d085eb6d8d4bed0d" }, { "date": "Wed, 10 Nov 2021 13:38:28 GMT", "id": "7ada005dde022748902728896f5daafc861faea0" }, { "date": "Wed, 27 Oct 2021 08:57:16 GMT", "id": "62a557e5172f220461b4dd593975ffc5f85f76b7" }, { "date": "Tue, 26 Oct 2021 16:52:31 GMT", "id": "be55c16e50e714475034b00ed2682f0813794d15" }, { "date": "Tue, 26 Oct 2021 20:57:24 GMT", "id": "2f010ece66a39592a790d1a37eee08bc0c65f549" }, { "date": "Wed, 27 Oct 2021 09:03:38 GMT", "id": "feef10137b16a4105f12ea88d7a850a8250b3c4a" } ] } }, { "cve": "CVE-2021-4098", "date": "Tue, 26 Oct 2021 05:35:00 GMT", "description": "Insufficient data validation in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1263457, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$NA", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 07 Dec 2021 20:51:59 GMT", "id": "0747c9405e1098c0bbbc5593183696eafb45b72c" }, { "date": "Mon, 13 Dec 2021 23:42:31 GMT", "id": "fe1826f6ef396e437058254ac7652a28c15bd572" }, { "date": "Fri, 10 Dec 2021 01:03:53 GMT", "id": "da11d71a02276cccc64f6ead66a85ad55aeff45c" }, { "date": "Thu, 09 Dec 2021 19:50:42 GMT", "id": "22ba6ba3413e0c653ee6a4bfa58f8efcc8cf8493" } ], "v8": [] } }, { "cve": "CVE-2021-4057", "date": "Thu, 21 Oct 2021 09:57:29 GMT", "description": "Use after free in file API. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1262183, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 09 Nov 2021 21:39:27 GMT", "id": "15cfa2bed3ce9dcdd0a06d3cd3b8330e3591acdc" }, { "date": "Tue, 16 Nov 2021 22:16:15 GMT", "id": "2b978fb48263ae35112518323b5ee6b8e1e42078" }, { "date": "Thu, 11 Nov 2021 00:13:47 GMT", "id": "8826fb26d8e7b6604e653afa7b6ff632cf5668de" } ], "v8": [] } }, { "cve": "CVE-2021-4101", "date": "Thu, 21 Oct 2021 02:59:02 GMT", "description": "Heap buffer overflow in Swiftshader. Reported by Abraruddin Khan and Omair\u00a0", "issue_id": 1262080, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 06 Dec 2021 20:16:02 GMT", "id": "675b9e6b0c2fe42d4f0f95b64d1742a3cf44a66d" } ], "v8": [] } }, { "cve": "CVE-2021-38002", "date": "Mon, 18 Oct 2021 09:17:29 GMT", "description": "Use after free in Web Transport. Reported by @__R0ng of 360 Alpha Lab, \u6f0f\u6d1e\u7814\u7a76\u9662\u9752\u8bad\u961f via Tianfu Cup", "issue_id": 1260940, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 26 Oct 2021 00:40:40 GMT", "id": "143027cf096c64f73b963c280d7d5a0e2482de0f" }, { "date": "Wed, 20 Oct 2021 01:39:59 GMT", "id": "b1997bdadcda9738a19773f82605f65832acedac" }, { "date": "Tue, 26 Oct 2021 04:50:35 GMT", "id": "45f9dcf5021da2f53812c769ec67f033a636b9cc" } ], "v8": [] } }, { "cve": "CVE-2021-4056", "date": "Mon, 18 Oct 2021 09:14:41 GMT", "description": "Type Confusion in loader. Reported by @__R0ng of 360 Alpha Lab", "issue_id": 1260939, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 24 Nov 2021 07:16:06 GMT", "id": "7077e03a4e02c198ac9fdb0814d195df7a75c229" }, { "date": "Thu, 02 Dec 2021 19:23:45 GMT", "id": "731871eeabb6a9c78669292a44e927c5f42b1f7d" }, { "date": "Thu, 02 Dec 2021 15:23:47 GMT", "id": "b991003092e22cc46b93a78127f802e09f7962fa" } ], "v8": [ { "date": "Tue, 23 Nov 2021 16:05:34 GMT", "id": "b0c6dd86bd563672dba6256f482dc5e145f094ae" }, { "date": "Wed, 01 Dec 2021 14:24:09 GMT", "id": "417dee4d1b0f967e3cac360a0b012decbc9f6908" }, { "date": "Wed, 01 Dec 2021 14:25:11 GMT", "id": "04a58fedd57dbf9d96b3ed3351ddef1eea1d1578" } ] } }, { "cve": "CVE-2021-38009", "date": "Sat, 16 Oct 2021 12:59:49 GMT", "description": "Inappropriate implementation in cache. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1260649, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$2000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 05 Nov 2021 19:47:08 GMT", "id": "1fcfb942bd8a1def685cc1da09bfb26aaf2eac4b" }, { "date": "Tue, 02 Nov 2021 16:49:07 GMT", "id": "802faa035409ac7cbb58ad1a385bb8507fe99077" } ], "v8": [] } }, { "cve": "CVE-2021-38001", "date": "Fri, 15 Oct 2021 19:04:27 GMT", "description": "Type Confusion in V8. Reported by @s0rrymybad of Kunlun Lab via Tianfu Cup", "issue_id": 1260577, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 25 Oct 2021 10:07:30 GMT", "id": "a30807d002d19830c52dbe3276e0facc5e9f6d20" }, { "date": "Tue, 19 Oct 2021 15:02:49 GMT", "id": "643bde32a94f0842b54431614e03ca37701a6bfc" }, { "date": "Mon, 18 Oct 2021 10:13:19 GMT", "id": "e4dba97006ca20337deafb85ac00524a94a62fe9" }, { "date": "Fri, 19 Nov 2021 09:57:37 GMT", "id": "b52afb1e2b6a3af4fb9c5d89818c21f50bc68225" }, { "date": "Mon, 25 Oct 2021 10:31:21 GMT", "id": "014e1f857c335ce403447b4aca84f21243ad091b" } ] } }, { "cve": "CVE-2022-0102", "date": "Thu, 14 Oct 2021 00:00:00 GMT", "description": "Type Confusion in V8 . Reported by Brendon Tiszka", "issue_id": 1260129, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 15 Oct 2021 15:47:21 GMT", "id": "a1427aad7cefbe952c9db37a4a46d9b0af672943" } ] } }, { "cve": "CVE-2021-37997", "date": "Wed, 13 Oct 2021 23:28:33 GMT", "description": "Use after free in Sign-In. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1259864, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 04 Nov 2021 17:32:28 GMT", "id": "18dfa590d29525cb6294399ec0c46c398dca9418" }, { "date": "Thu, 04 Nov 2021 11:18:26 GMT", "id": "fd22c9fd6f15b982160d41839b9af9046697c52f" }, { "date": "Wed, 20 Oct 2021 23:36:54 GMT", "id": "2dc6b4aa93063bd0c3283e605b59a26f60b13a01" }, { "date": "Mon, 18 Oct 2021 10:06:54 GMT", "id": "9f9874f3fdb261ab56899ac68fb9e9caa858c250" }, { "date": "Fri, 15 Oct 2021 17:02:37 GMT", "id": "79772972a0d41572db52073e310711b5b2cac23f" }, { "date": "Wed, 20 Oct 2021 23:45:15 GMT", "id": "4dc66405bae74b709ce69d507aa2fb062b7e7d57" } ], "v8": [] } }, { "cve": "CVE-2021-37998", "date": "Wed, 13 Oct 2021 04:54:23 GMT", "description": "Use after free in Garbage Collection. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1259587, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Sat, 16 Oct 2021 09:26:26 GMT", "id": "4feccb9b4e4ac2accc92dd24b17f6b2f12611354" }, { "date": "Wed, 20 Oct 2021 07:27:19 GMT", "id": "2e9b90efde2faeb80211eaf0b0077d160b33817a" }, { "date": "Mon, 20 Dec 2021 13:20:34 GMT", "id": "7d79acbd12d59e54be23c5b17245d797a7f19bde" }, { "date": "Wed, 20 Oct 2021 08:12:59 GMT", "id": "656c2769c5803f19c238590154d05114b2f3a04c" }, { "date": "Wed, 13 Oct 2021 19:05:13 GMT", "id": "32a09a6bce6cc75806dee5ec748bb1d081048fd0" } ] } }, { "cve": "CVE-2021-37980", "date": "Thu, 30 Sep 2021 00:07:14 GMT", "description": "Inappropriate implementation in Sandbox. Reported by Yonghwi Jin (@jinmo123) of Theori", "issue_id": 1254631, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 30 Sep 2021 21:23:47 GMT", "id": "19d2be5d47e0edc406ef7d93096f54009e47937f" }, { "date": "Fri, 01 Oct 2021 23:30:09 GMT", "id": "3a5bafa35defbaf3fd82bd2220034bd403e76243" }, { "date": "Fri, 01 Oct 2021 23:26:35 GMT", "id": "466e04a85740c20faa126afc6120d098f503c96e" } ], "v8": [] } }, { "cve": "CVE-2021-38007", "date": "Tue, 28 Sep 2021 20:23:44 GMT", "description": "Type Confusion in V8. Reported by Polaris Feng and SGFvamll at Singular Security Lab", "issue_id": 1254189, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 09 Nov 2021 09:36:52 GMT", "id": "5d2b5e7c006c8af13b2d467ce2a38877bad300dc" }, { "date": "Mon, 04 Oct 2021 09:04:56 GMT", "id": "131c0055c9a5e039185d19584b3c95edc3164bee" }, { "date": "Fri, 01 Oct 2021 09:39:57 GMT", "id": "b65e72c68eaf48640679dc1e7b379e81f999a8f1" }, { "date": "Mon, 25 Oct 2021 10:03:33 GMT", "id": "bdf31d5883607db4377b519d7308fb1e639a0448" }, { "date": "Fri, 10 Dec 2021 21:51:17 GMT", "id": "8212f0fb2878e9ec16422eb609a65891606bca91" } ] } }, { "cve": "CVE-2021-37984", "date": "Mon, 27 Sep 2021 09:45:08 GMT", "description": "Heap buffer overflow in PDFium. Reported by Antti Levom\u00e4ki, Joonas Pihlaja and Christian Jalio from Forcepoint", "issue_id": 1253399, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 28 Sep 2021 23:27:23 GMT", "id": "d54a58a34f3e3466d821f992859c5d7ff118093a" } ], "v8": [] } }, { "cve": "CVE-2021-37977", "date": "Fri, 24 Sep 2021 11:13:31 GMT", "description": "Use after free in Garbage Collection. Reported by Anonymous", "issue_id": 1252878, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 01 Oct 2021 14:00:27 GMT", "id": "e677a6f6b257e992094b9183a958b67ecc68aa85" }, { "date": "Tue, 05 Oct 2021 08:36:27 GMT", "id": "53d43b00a7bad10750226eebc29f846beca5e157" }, { "date": "Tue, 05 Oct 2021 08:34:36 GMT", "id": "ad55ae0b84beeb29f9ca5c7b5096632dce0ecd17" } ] } }, { "cve": "CVE-2021-37975", "date": "Fri, 24 Sep 2021 00:00:00 GMT", "description": "Use after free in V8. Reported by Anonymous", "issue_id": 1252918, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 28 Sep 2021 19:02:41 GMT", "id": "1054ee7f349d6be22e9518cf9b794b206d0e5818" }, { "date": "Wed, 29 Sep 2021 22:44:00 GMT", "id": "5c4acf2ae64ad4698c0a880c72c8eee9e8c335d1" }, { "date": "Fri, 01 Oct 2021 18:11:22 GMT", "id": "ef8c804a4d3b7b4f85fb848d32727851c13646c8" }, { "date": "Mon, 04 Oct 2021 07:29:56 GMT", "id": "02fe7beaf04c51b3e7902900f1e648c7a9f4cd8d" }, { "date": "Wed, 29 Sep 2021 22:44:12 GMT", "id": "e1dc181c2badd91a2e20ffcd8edf5a0c4131211a" }, { "date": "Tue, 28 Sep 2021 19:55:59 GMT", "id": "5f79f478b5bdd9efabfeafac12ee7181b4b1d0ea" } ] } }, { "cve": "CVE-2021-37973", "date": "Tue, 21 Sep 2021 12:40:48 GMT", "description": "Use after free in Portals. Reported by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero", "issue_id": 1251727, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 04 Oct 2021 22:59:41 GMT", "id": "43fe829f33b37af88cd277826f13d7dab128d419" }, { "date": "Wed, 22 Sep 2021 20:27:54 GMT", "id": "85123ea32b9d6c7c64e941285bff237b01f424b2" }, { "date": "Thu, 23 Sep 2021 01:34:10 GMT", "id": "f679b50bba1aa1089a6988f2cf85ec37b319ce2b" }, { "date": "Tue, 21 Sep 2021 23:43:51 GMT", "id": "beebc8aec0f8f9e627e69ad67ef311903924b384" }, { "date": "Fri, 01 Oct 2021 14:08:44 GMT", "id": "91cc00d28d4e8c58b2c9c9b8a4f72a7908a28b73" }, { "date": "Thu, 23 Sep 2021 00:36:06 GMT", "id": "608da38a6a38618e9ef78ca29ea965b4812de2df" }, { "date": "Tue, 21 Sep 2021 23:52:37 GMT", "id": "0b696b8ba22e35fcc6463a39be7ac3239d593099" } ], "v8": [] } }, { "cve": "CVE-2021-37999", "date": "Tue, 21 Sep 2021 02:15:59 GMT", "description": "Insufficient data validation in New Tab Page. Reported by Ashish Arun Dhone", "issue_id": 1251541, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 19 Oct 2021 18:10:43 GMT", "id": "60ce07072e343e9dcef5e3ee244bc13b641dcc9f" }, { "date": "Wed, 20 Oct 2021 00:34:33 GMT", "id": "0acea24516305427f2dcad85b98e6faf6f3e8908" }, { "date": "Wed, 20 Oct 2021 00:41:16 GMT", "id": "7095119c76ff55ed7e1706f6728cd98476e69f98" }, { "date": "Wed, 13 Oct 2021 00:51:56 GMT", "id": "10939d3c6653ef2cc8105bb4145db6a876c22e61" } ], "v8": [] } }, { "cve": "CVE-2022-0607", "date": "Fri, 17 Sep 2021 02:26:40 GMT", "description": "Use after free in GPU. Reported by 0x74960", "issue_id": 1250655, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Feb 2022 05:45:44 GMT", "id": "be50c60b422563e672ed59324b79b8863e336739" }, { "date": "Tue, 25 Jan 2022 16:18:37 GMT", "id": "98d246cabe677e1d8287e4d42ce02825417be9e2" }, { "date": "Thu, 27 Jan 2022 21:37:53 GMT", "id": "1f67cc8f7fc671b3cfc571f2b52bf8fbf09cfa97" } ], "v8": [] } }, { "cve": "CVE-2021-38000", "date": "Wed, 15 Sep 2021 11:57:37 GMT", "description": "Insufficient validation of untrusted input in Intents. Reported by Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group", "issue_id": 1249962, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 05 Oct 2021 20:46:01 GMT", "id": "098319b6e1eff1888fc2a682273ee2d98df27a25" }, { "date": "Wed, 20 Oct 2021 15:16:45 GMT", "id": "36aa9d15d1283d8d9758b044b7a9a20349f507de" }, { "date": "Tue, 12 Oct 2021 20:23:17 GMT", "id": "1c91d8448876e2c8f4824b100ad2d1ef9a53c333" }, { "date": "Sat, 09 Oct 2021 01:31:45 GMT", "id": "4e439fc7e82ba76e4be0dc5c33ddb916a6ecade2" }, { "date": "Fri, 15 Oct 2021 14:46:23 GMT", "id": "ecc68ebbf012d1a9cf88d32c7586292fa9717401" }, { "date": "Tue, 28 Sep 2021 01:08:54 GMT", "id": "9a942dc24e1f865515cacb40255ff53f707a8aa1" }, { "date": "Fri, 24 Sep 2021 15:35:09 GMT", "id": "acfd4fedd424dd0bec80eae44580bb999a283251" }, { "date": "Fri, 14 Jan 2022 17:59:58 GMT", "id": "7daf603a4a5236ab52fb99649fe438ffe9fb4d5c" }, { "date": "Mon, 18 Oct 2021 15:36:57 GMT", "id": "876983b5b4ad3beb5227d1ba8119b587631aaf18" }, { "date": "Thu, 14 Oct 2021 17:34:13 GMT", "id": "bec9c601c0d7973feac2d2751256d98195f74180" } ], "v8": [] } }, { "cve": "CVE-2021-37983", "date": "Wed, 15 Sep 2021 04:43:36 GMT", "description": "Use after free in Dev Tools. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1249810, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 26 Oct 2021 13:46:25 GMT", "id": "4c926456a81365cdd8e0a4fa67c02e812bd1b909" }, { "date": "Wed, 13 Oct 2021 08:34:20 GMT", "id": "a0af9229eb1625e28ede99a374c830b0e9dec09a" }, { "date": "Wed, 06 Oct 2021 06:17:22 GMT", "id": "6bda8ff54af25de4feeae563ea8a040886bdb769" }, { "date": "Tue, 12 Oct 2021 13:59:34 GMT", "id": "01d6e2d93012480225e150c1ae73bc270a7d7a92" } ], "v8": [] } }, { "cve": "CVE-2022-0101", "date": "Tue, 14 Sep 2021 04:55:54 GMT", "description": "Heap buffer overflow in Bookmarks. Reported by raven (@raid_akame)\u00a0", "issue_id": 1249426, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 14 Dec 2021 19:49:55 GMT", "id": "875cf9db390cfab678180aa3719d8a14ec519199" }, { "date": "Fri, 10 Dec 2021 02:10:34 GMT", "id": "7c66fad9cd7633ed04890e84cc0c13b26b5cce1c" }, { "date": "Tue, 14 Dec 2021 20:26:46 GMT", "id": "8f92f216b788253fb0d2b06929129209d01ed233" }, { "date": "Tue, 14 Dec 2021 20:18:26 GMT", "id": "a61ca664b411b5d78a39f7038b4037e80ce4faa1" } ], "v8": [] } }, { "cve": "CVE-2021-37982", "date": "Fri, 10 Sep 2021 19:14:16 GMT", "description": "Use after free in Incognito. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1248661, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 16 Sep 2021 13:42:33 GMT", "id": "bc872c1dbed0bfddf48b4a58b1399121eec4fd16" }, { "date": "Fri, 17 Sep 2021 18:58:13 GMT", "id": "45d44b48832dcee034def070e1a4f35e7b2c51b4" } ], "v8": [] } }, { "cve": "CVE-2021-30632", "date": "Wed, 08 Sep 2021 00:00:00 GMT", "description": "Out of bounds write in V8. Reported by Anonymous", "issue_id": 1247763, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 10 Sep 2021 15:53:41 GMT", "id": "ce925698c1af985bb559c194eb6a09aab02c6be7" }, { "date": "Thu, 16 Sep 2021 11:10:35 GMT", "id": "2d3128a5b6fa1ca04b4ebe4aa37d5f616b8d0518" }, { "date": "Thu, 09 Sep 2021 14:10:44 GMT", "id": "6391d7a58d0c58cd5d096d22453b954b3ecc6fec" }, { "date": "Fri, 10 Sep 2021 15:52:22 GMT", "id": "034c2003be31e50e7beb6a9f113e68142b7f4122" }, { "date": "Tue, 14 Sep 2021 08:19:44 GMT", "id": "fdec800c5d7088ddd66e321e4bcf2f844b5e328f" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" } ] } }, { "cve": "CVE-2021-30633", "date": "Wed, 08 Sep 2021 00:00:00 GMT", "description": "Use after free in Indexed DB API. Reported by Anonymous", "issue_id": 1247766, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 15 Sep 2021 18:20:40 GMT", "id": "d8a607f299fb70dac7f3421f39a8c29dec717001" }, { "date": "Thu, 16 Sep 2021 22:27:54 GMT", "id": "58d1fb68915af2a22a15e9c3d5f31e7716d5f59b" }, { "date": "Thu, 09 Sep 2021 18:44:21 GMT", "id": "ec3ddd67bae4c491ec1faba7be7cc988c425506c" }, { "date": "Thu, 16 Sep 2021 20:36:52 GMT", "id": "77bff77decf5181ee2719111787f3c597228dd76" }, { "date": "Fri, 17 Sep 2021 17:39:44 GMT", "id": "2e5c4e4706cf569ce46cdd68313fbeab1b376bbb" }, { "date": "Fri, 10 Sep 2021 22:37:26 GMT", "id": "2f5740f50f1a94c9baf90903553a4c5af1d09b9a" }, { "date": "Sat, 11 Sep 2021 09:03:33 GMT", "id": "49eeb9a2812d1c8ec5925d3c1b167e349146f668" }, { "date": "Sat, 11 Sep 2021 00:11:25 GMT", "id": "188d539dd53c0364fea623e0473be66da1647e42" }, { "date": "Fri, 10 Sep 2021 21:31:17 GMT", "id": "7699615c0d3ca4b6231c426ad51710e5f2fc51aa" }, { "date": "Fri, 10 Sep 2021 18:53:33 GMT", "id": "f9bf7be854ed80a792953e94dd56e1269a5bbe98" }, { "date": "Thu, 16 Sep 2021 11:00:12 GMT", "id": "1996efe1f9cfaf44afa2536d6d342e5282c90866" }, { "date": "Fri, 10 Sep 2021 19:48:01 GMT", "id": "5245fed81abc0cf0dae79c64b7392317cc953116" }, { "date": "Fri, 17 Sep 2021 08:55:00 GMT", "id": "37b2acf7cef4163c83573d5c6d0a3905b69477bc" } ], "v8": [] } }, { "cve": "CVE-2022-0337", "date": "Tue, 07 Sep 2021 13:40:09 GMT", "description": "Inappropriate implementation in File System API. Reported by Maciej Pulikowski", "issue_id": 1247389, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [], "v8": [] } }, { "cve": "CVE-2021-37979", "date": "Tue, 07 Sep 2021 06:54:56 GMT", "description": "Heap buffer overflow in WebRTC. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1247260, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 29 Nov 2021 14:58:54 GMT", "id": "24c201444aee8a545e8daa9c8fa3a703f1876565" }, { "date": "Fri, 01 Oct 2021 19:18:45 GMT", "id": "36e370cf4db9aee828ca327245d51ab042e8d3ae" }, { "date": "Tue, 28 Sep 2021 00:02:06 GMT", "id": "3ede49de5e3416d33e9c87e0ee08b9c2441b0513" } ], "v8": [] } }, { "cve": "CVE-2021-37981", "date": "Sat, 04 Sep 2021 08:25:35 GMT", "description": "Heap buffer overflow in Skia. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1246631, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 27 Oct 2021 08:18:46 GMT", "id": "2674b3f6170ca4c3d60594cb70a4d2f57fe5b2d7" }, { "date": "Wed, 15 Sep 2021 18:16:16 GMT", "id": "2e7c9b33453b999317c410730c8290ddf869648a" }, { "date": "Mon, 13 Sep 2021 17:33:46 GMT", "id": "a656373ae7212e0d88474bdec4691a4152452748" } ], "v8": [] } }, { "cve": "CVE-2021-30627", "date": "Wed, 01 Sep 2021 14:24:51 GMT", "description": "Type Confusion in Blink layout. Reported by Aki Helin of OUSPG", "issue_id": 1245786, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 23:02:44 GMT", "id": "d760d2ae1d51c0b4fda87a0a3af4e7ed30d2ff4c" }, { "date": "Thu, 02 Sep 2021 19:04:20 GMT", "id": "bbd315efb49a4ae257509dd0f0d85c6b5906e0e4" }, { "date": "Thu, 09 Sep 2021 23:20:48 GMT", "id": "8623d711677dcda77a54e84955c96c71040573d6" }, { "date": "Thu, 16 Sep 2021 11:29:42 GMT", "id": "eaed84eec02939de6b18a7dedd224bee31ddde48" } ], "v8": [] } }, { "cve": "CVE-2022-0099", "date": "Wed, 01 Sep 2021 06:41:03 GMT", "description": "Use after free in Sign-in. Reported by Rox", "issue_id": 1245629, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 11:15:00 GMT", "id": "98d542e27f9c87cf0fce0cbd8615594ca8e4d2b9" }, { "date": "Sat, 05 Feb 2022 13:29:57 GMT", "id": "5440642a53181a716e6018ec6c8b79e4ac8ded77" }, { "date": "Thu, 18 Nov 2021 13:01:38 GMT", "id": "c5e30ea5d1bcd339715df71b364b8b6243c36f2c" } ], "v8": [] } }, { "cve": "CVE-2021-37974", "date": "Wed, 01 Sep 2021 03:34:12 GMT", "description": "Use after free in Safe Browsing. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1245578, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 22:25:30 GMT", "id": "e7d560979f89705ea2844f9f64b5c7a598a03f2b" }, { "date": "Tue, 28 Sep 2021 19:16:15 GMT", "id": "edbb462a3b0c5f9528cf8d7cb982bb5ddc0b5cc1" }, { "date": "Wed, 06 Oct 2021 15:25:10 GMT", "id": "65e7f7c5442eb4860ddd647d98936cacfeec2d1b" } ], "v8": [] } }, { "cve": "CVE-2021-30630", "date": "Mon, 30 Aug 2021 05:54:47 GMT", "description": "Inappropriate implementation in Blink . Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1244568, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 09 Sep 2021 12:50:45 GMT", "id": "3fabcee42cb83e42f86263f8c7b4be9cd0ef6275" }, { "date": "Thu, 09 Sep 2021 11:16:13 GMT", "id": "3907d1140b44cac8f2eb71bcc9ec88d4d3e5b2af" }, { "date": "Thu, 16 Sep 2021 10:42:52 GMT", "id": "dcad2b2a1a2656654a73486499c4c461bd6387c8" }, { "date": "Mon, 06 Sep 2021 16:09:15 GMT", "id": "6ef569fd764a8e5f8fba4dcff830d460e406362b" } ], "v8": [] } }, { "cve": "CVE-2022-0459", "date": "Fri, 27 Aug 2021 15:40:15 GMT", "description": "Use after free in Screen Capture. Reported by raven (@raid_akame)", "issue_id": 1244205, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 13 Jan 2022 19:47:07 GMT", "id": "5853e2baadfb4d13a6c62b7187d5cf12b3ce9f18" }, { "date": "Fri, 21 Jan 2022 23:19:46 GMT", "id": "769587ca2c8b060dad88264e16c0a42442041411" } ], "v8": [] } }, { "cve": "CVE-2021-30629", "date": "Thu, 26 Aug 2021 04:24:43 GMT", "description": "Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1243646, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Sep 2021 11:57:02 GMT", "id": "58d05cfd21cd936120711f0337949eb6bc47e1c2" }, { "date": "Wed, 08 Sep 2021 08:25:24 GMT", "id": "af1bad5fb8d2c020c77a27f81244b690103bad67" }, { "date": "Wed, 08 Sep 2021 08:25:28 GMT", "id": "3617086618ea350a7b181ae349264b6b5f9007ef" }, { "date": "Sat, 04 Sep 2021 11:49:22 GMT", "id": "23ccfc423283b80da0f0beaa77f11d43ad4f7648" } ], "v8": [] } }, { "cve": "CVE-2021-37956", "date": "Tue, 24 Aug 2021 16:59:35 GMT", "description": "Use after free in Offline use. Reported by Huyna at Viettel Cyber Security", "issue_id": 1243117, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 07 Sep 2021 21:25:59 GMT", "id": "31d14e25dc829f25a039a1c963ef0ad43157fff4" }, { "date": "Thu, 02 Sep 2021 21:26:00 GMT", "id": "3b3c8c1619e1f6d0323bd613128bfe7e003c3044" } ], "v8": [] } }, { "cve": "CVE-2021-37957", "date": "Sun, 22 Aug 2021 21:24:53 GMT", "description": "Use after free in WebGPU. Reported by Looben Yang", "issue_id": 1242269, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 27 Aug 2021 22:15:12 GMT", "id": "412b407353a9801468abd04ff43be6e3783a9e0d" }, { "date": "Thu, 07 Oct 2021 16:33:12 GMT", "id": "f93276bd4ef5280180d4b342fb40c1d0b1adef89" }, { "date": "Tue, 31 Aug 2021 14:57:06 GMT", "id": "2f591523e5db5010b06b52cc1cdc72c1c233aec1" }, { "date": "Mon, 30 Aug 2021 18:11:13 GMT", "id": "db180784a4d3a704ca12f4475b35149d6af5174c" } ], "v8": [] } }, { "cve": "CVE-2021-37985", "date": "Fri, 20 Aug 2021 08:32:10 GMT", "description": "Use after free in V8. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1241860, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 22 Nov 2021 12:05:43 GMT", "id": "d3001a648110af5b6816c53498f20e73b0532723" }, { "date": "Wed, 20 Apr 2022 18:36:13 GMT", "id": "5c69380bb74de237634211a133393fff9aa9caa0" }, { "date": "Wed, 15 Sep 2021 15:02:36 GMT", "id": "fe81bbc71b9893a4333a92fc82026d90a3b6c5de" }, { "date": "Thu, 09 Sep 2021 13:49:36 GMT", "id": "c8abd833c7f03877ae9082afe91db5862558625f" } ], "v8": [ { "date": "Tue, 12 Oct 2021 17:02:27 GMT", "id": "29be6884cb8ac974de67691e35951a827a4bb186" }, { "date": "Thu, 09 Sep 2021 15:29:54 GMT", "id": "25d5e5081280115348a237add544adfa0f43bc02" }, { "date": "Thu, 16 Sep 2021 08:45:11 GMT", "id": "7994004493df2c9a24372587312ef6c458c7ed2b" } ] } }, { "cve": "CVE-2021-30628", "date": "Wed, 18 Aug 2021 11:30:14 GMT", "description": "Stack buffer overflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1241123, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 16 Sep 2021 12:38:23 GMT", "id": "d272bf701fe2a448f58d6bcaecb0134a2acb9a7c" }, { "date": "Tue, 01 Feb 2022 03:31:37 GMT", "id": "0c51b54c2ff10a9e35144e4359825abd7246510f" }, { "date": "Fri, 03 Sep 2021 22:51:47 GMT", "id": "8ef1e4544ed5214608039d969940347d8f98e543" }, { "date": "Thu, 09 Sep 2021 19:57:17 GMT", "id": "5e71bf44897b6741994978e25315f7936ba848d5" }, { "date": "Thu, 09 Sep 2021 20:00:43 GMT", "id": "13842c96c2926db7b11c6851d959bc88d76956f3" }, { "date": "Thu, 09 Sep 2021 20:00:08 GMT", "id": "d5be352cb121d3836b075f500ae7977ad0d9b8fa" }, { "date": "Sat, 04 Sep 2021 05:17:14 GMT", "id": "13813150f6d357dea403b16b8162a1e813f782ab" } ], "v8": [] } }, { "cve": "CVE-2021-38005", "date": "Wed, 18 Aug 2021 10:28:42 GMT", "description": "Use after free in loader. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1241091, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 09 Nov 2021 09:03:17 GMT", "id": "bbca3704f97e10e0d8e44be4dee4ec7ad9cc0683" }, { "date": "Fri, 29 Oct 2021 16:54:36 GMT", "id": "fd794ad56432870e462aab9d62e4f059169c1a5f" }, { "date": "Tue, 09 Nov 2021 14:10:59 GMT", "id": "f2b0985ac3b197b4a74e2d334558130df6022029" }, { "date": "Tue, 09 Nov 2021 05:02:50 GMT", "id": "56de3b20046891a5c2ec1e68964bd482d841d1cf" }, { "date": "Tue, 02 Nov 2021 17:25:59 GMT", "id": "f0375e38d259b3651fd9f305ca2e723ca9c02c64" }, { "date": "Mon, 01 Nov 2021 13:03:19 GMT", "id": "dad0c0e5162bcc49b8f60354d3bca92224d8381b" } ], "v8": [] } }, { "cve": "CVE-2021-30626", "date": "Wed, 18 Aug 2021 07:40:08 GMT", "description": "Out of bounds memory access in ANGLE. Reported by Jeonghoon Shin of Theori", "issue_id": 1241036, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Sep 2021 21:59:24 GMT", "id": "aa6d266ecd709a83d707a2212fa52135f7d02de4" } ], "v8": [] } }, { "cve": "CVE-2021-38006", "date": "Tue, 17 Aug 2021 06:08:37 GMT", "description": "Use after free in storage foundation. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1240593, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 10 Nov 2021 02:21:35 GMT", "id": "46205bfbeead3e4739a68ce1520f590fd2e07e5d" }, { "date": "Wed, 10 Nov 2021 02:05:50 GMT", "id": "7dc02206707362f3f92cea93f8eb2fa4af0d375f" }, { "date": "Thu, 11 Nov 2021 00:22:30 GMT", "id": "6bb320d134b18f992966d853d5b4a272d9bfd745" }, { "date": "Wed, 10 Nov 2021 22:38:27 GMT", "id": "db5702e2ef113053792fd617c70c6242f198c8f6" }, { "date": "Wed, 10 Nov 2021 04:12:11 GMT", "id": "ef1bddb45b72ec0cb9a9e513671d3b539ee10543" } ], "v8": [] } }, { "cve": "CVE-2021-4054", "date": "Fri, 13 Aug 2021 15:07:48 GMT", "description": "Incorrect security UI in autofill. Reported by Alesandro Ortiz", "issue_id": 1239760, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 21:31:46 GMT", "id": "92860f86a38c3b10fe142ff2beabfb559b97cf8a" }, { "date": "Tue, 30 Nov 2021 19:59:03 GMT", "id": "f601a5c8b59f1a4a78329c7ccce42096f9b73c53" }, { "date": "Thu, 02 Dec 2021 23:32:07 GMT", "id": "b0e7d9dceedcd003910d4cb7ea5b28f446d38620" }, { "date": "Wed, 24 Nov 2021 20:16:32 GMT", "id": "3fb0945de5e50b8e6d2f9b0dd8a65e3f7a767b14" } ], "v8": [] } }, { "cve": "CVE-2021-30609", "date": "Fri, 13 Aug 2021 05:00:57 GMT", "description": "Use after free in Sign-In. Reported by raven (@raid_akame)\u00a0", "issue_id": 1239595, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 10 Sep 2021 12:42:19 GMT", "id": "f0c435c669c0ec2536b6ffa432d2c26179bbc051" }, { "date": "Fri, 20 Aug 2021 10:14:24 GMT", "id": "47aafec6a63fb33855fc044a963ea1d98582b4d4" }, { "date": "Mon, 16 Aug 2021 19:20:01 GMT", "id": "d710b5cdbb18ac8e880afd3c9340106006a9f744" }, { "date": "Fri, 20 Aug 2021 14:20:31 GMT", "id": "e6287018f202c1f29533c04fe2acef8682969c43" }, { "date": "Fri, 27 Aug 2021 07:01:15 GMT", "id": "b9aac92988ade33b262ab46bbf7727cc2f7207da" } ], "v8": [] } }, { "cve": "CVE-2022-0100", "date": "Mon, 09 Aug 2021 21:46:51 GMT", "description": "Heap buffer overflow in Media streams API. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1238209, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 10 Dec 2021 11:58:29 GMT", "id": "fb6232ffb1fec14d64ec8815f7dfc2cea0887588" }, { "date": "Tue, 14 Dec 2021 21:17:06 GMT", "id": "d2bdf6fe2f821da478728b219b38cfb81843e63d" }, { "date": "Tue, 14 Dec 2021 16:35:05 GMT", "id": "5c41beab69428d8c3967cb12d31f921761b85fb4" }, { "date": "Tue, 14 Dec 2021 14:15:35 GMT", "id": "b54b3361b4b89e711e11f2053d7387a236090253" } ], "v8": [] } }, { "cve": "CVE-2021-30625", "date": "Fri, 06 Aug 2021 12:04:12 GMT", "description": "Use after free in Selection API. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1237533, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 07 Sep 2021 21:21:46 GMT", "id": "6bf424362b615b227edf1d564555663b24bbccaf" }, { "date": "Wed, 29 Sep 2021 08:26:47 GMT", "id": "11ff9feda46c2d569bbf84f0e0614ed31e7a1df9" }, { "date": "Wed, 25 Aug 2021 20:50:40 GMT", "id": "2e2f1a09b9ea955912194c4dd4610b00b873efa4" }, { "date": "Tue, 24 Aug 2021 05:19:07 GMT", "id": "484bc1abffcdee33648695244c86daca15ab6539" }, { "date": "Tue, 07 Sep 2021 21:32:03 GMT", "id": "9723e3c13c8c3e72e0dfeacef00abc97e4a9e3b7" } ], "v8": [] } }, { "cve": "CVE-2021-37978", "date": "Tue, 03 Aug 2021 19:51:42 GMT", "description": "Heap buffer overflow in Blink. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1236318, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Sep 2021 00:49:59 GMT", "id": "588cb74f661269a5b2b69f52619c0f7a09867d6f" }, { "date": "Mon, 04 Oct 2021 23:02:19 GMT", "id": "b2c4e4dc21e509207bfa4cfc6a32bd24fa3423d9" }, { "date": "Tue, 19 Oct 2021 08:35:51 GMT", "id": "7f0f370265cbf03329c7a2e22a12be0b3157047c" } ], "v8": [] } }, { "cve": "CVE-2021-30607", "date": "Mon, 02 Aug 2021 22:38:51 GMT", "description": "Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1235949, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 27 Aug 2021 16:02:01 GMT", "id": "0f8fb0ed80ec63dfe5969e0dd45499fba7aa8494" }, { "date": "Thu, 19 Aug 2021 11:10:45 GMT", "id": "c490819db1ce602f12bda83f55e12ba332fb57ff" }, { "date": "Mon, 23 Aug 2021 12:58:27 GMT", "id": "b0700526df65969f911e9cb8a8d3be70cb4badc4" }, { "date": "Fri, 27 Aug 2021 15:55:17 GMT", "id": "455b63779c76f8f171bf0d9b2909f7f962292a4e" } ], "v8": [] } }, { "cve": "CVE-2021-30604", "date": "Fri, 30 Jul 2021 10:30:29 GMT", "description": "Use after free in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1234829, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 06 Aug 2021 21:52:13 GMT", "id": "e24e07aa7710da5a8b523fddf9d672ced8023113" }, { "date": "Sat, 14 Aug 2021 05:15:53 GMT", "id": "4b9a038fa410e5f4f03327451dafe545ad449702" } ], "v8": [] } }, { "cve": "CVE-2021-30599", "date": "Fri, 30 Jul 2021 06:49:10 GMT", "description": "Type Confusion in V8. Reported by Manfred Paul", "issue_id": 1234770, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$21000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 20 Aug 2021 15:47:44 GMT", "id": "a88e1f06e4fb5a3ef3a7c3d4166abd12e6718371" }, { "date": "Mon, 09 Aug 2021 08:42:15 GMT", "id": "2aee50cba1472d397f994760e46ecc7022359a37" }, { "date": "Tue, 03 Aug 2021 14:26:54 GMT", "id": "574ca6b71c6160d38b5fcf4b8e133bc7f6ba2387" }, { "date": "Mon, 09 Aug 2021 08:40:04 GMT", "id": "9418a915d91fc28f7b7dded0b460c111b28fb679" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" } ] } }, { "cve": "CVE-2021-30598", "date": "Fri, 30 Jul 2021 06:43:58 GMT", "description": "Type Confusion in V8. Reported by Manfred Paul", "issue_id": 1234764, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$21000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 10 Aug 2021 08:31:23 GMT", "id": "fc6818160b390034c249b7329f6c0be8e4f5b11b" }, { "date": "Mon, 09 Aug 2021 08:43:17 GMT", "id": "452d41efdf7107bd17e9b9887657a6e1018bccd8" }, { "date": "Tue, 03 Aug 2021 08:14:20 GMT", "id": "ca386a4b383165ccaed628c19a1366a273fa371e" }, { "date": "Mon, 23 Aug 2021 11:15:19 GMT", "id": "de534edddbe8e06ba060746375d296956cb40d5d" }, { "date": "Fri, 20 Aug 2021 15:48:46 GMT", "id": "fe05610f4425d1d79c79c16c68cfd308a115e56c" }, { "date": "Mon, 09 Aug 2021 08:41:13 GMT", "id": "e298903b7b05cb111b6ac2c02af1668097190af9" }, { "date": "Tue, 10 Aug 2021 08:30:20 GMT", "id": "85fcc01d0bfbf4de666cbb3a6ea3147b479a5a20" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" }, { "date": "Tue, 03 Aug 2021 08:27:21 GMT", "id": "65b20a0e65e1078f5dd230a5203e231bec790ab4" } ] } }, { "cve": "CVE-2021-30601", "date": "Wed, 28 Jul 2021 08:59:49 GMT", "description": "Use after free in Extensions API. Reported by koocola(@alo_cook) and Nan Wang(@eternalsakura13) of 360 Alpha Lab", "issue_id": 1234009, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 02 Aug 2021 07:10:35 GMT", "id": "18236a0db8341302120c60781ae3129e94fbaf1c" }, { "date": "Fri, 20 Aug 2021 17:21:48 GMT", "id": "d8f7a221d014da2d7b5a055c98a1e9acf418af32" }, { "date": "Tue, 10 Aug 2021 02:14:43 GMT", "id": "85c16cd71b8e2ea1de3c95c3b76caf86ac8d6474" }, { "date": "Tue, 21 Sep 2021 01:59:41 GMT", "id": "c5f9c40e9b106704130ffb8789ac68693152aedd" }, { "date": "Tue, 10 Aug 2021 01:37:34 GMT", "id": "c06871d5065b20777ab7e962f61e1d29f70cc3bc" } ], "v8": [] } }, { "cve": "CVE-2021-30606", "date": "Wed, 28 Jul 2021 07:03:48 GMT", "description": "Use after free in Blink. Reported by Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab", "issue_id": 1233975, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 17:32:58 GMT", "id": "2520b380018fbcf315bdc76b9b20f894def52f9e" }, { "date": "Wed, 28 Jul 2021 23:10:06 GMT", "id": "e5d028192c1491fd190e5b8366bccbcfd967ade2" }, { "date": "Mon, 02 Aug 2021 22:04:32 GMT", "id": "e35d2fb18347daba5191e3f98c3aeb087f4f2c3c" } ], "v8": [] } }, { "cve": "CVE-2021-30603", "date": "Tue, 27 Jul 2021 09:42:26 GMT", "description": "Race in WebAudio. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1233564, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 04 Aug 2021 01:25:36 GMT", "id": "6811e850ee10847da16c4d5fdc0f845494586b65" }, { "date": "Tue, 21 Sep 2021 14:22:12 GMT", "id": "6f9d0f0e2c86440bdcfde5e41917634834aebd47" }, { "date": "Mon, 09 Aug 2021 18:43:22 GMT", "id": "033f0bdcbe538c61f532e97b03cb9c092a94b413" }, { "date": "Fri, 20 Aug 2021 17:19:58 GMT", "id": "ba7a4d0217412c58477362c5eb8e11b277ae961f" }, { "date": "Mon, 09 Aug 2021 18:25:50 GMT", "id": "e837bee8d83686969a3a1bcc300817e2cc21b90c" } ], "v8": [] } }, { "cve": "CVE-2021-30600", "date": "Tue, 20 Jul 2021 08:12:04 GMT", "description": "Use after free in Printing. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1231134, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 10 Aug 2021 21:38:36 GMT", "id": "774dea8b445cb51cd2dccc560e4514369e197de6" }, { "date": "Mon, 23 Aug 2021 13:42:51 GMT", "id": "f4db5691eed7a664249639ed4f0b4c93c254a7a8" }, { "date": "Wed, 22 Sep 2021 22:41:35 GMT", "id": "d2758e3fc7e0b51b4b6e172aca312e499b0b7d4b" } ], "v8": [] } }, { "cve": "CVE-2021-30602", "date": "Mon, 19 Jul 2021 11:37:13 GMT", "description": "Use after free in WebRTC. Reported by Marcin Towalski of Cisco Talos\u00a0", "issue_id": 1230767, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 20 Aug 2021 17:27:48 GMT", "id": "010a318d585ca40546c29263579999aebaf92ee7" }, { "date": "Tue, 10 Aug 2021 10:49:27 GMT", "id": "654536e793760b23679131e9f8db45620e5636c7" }, { "date": "Fri, 13 Aug 2021 10:02:27 GMT", "id": "4e02776661c73ce26d04b70ca969063c9e7050e7" }, { "date": "Fri, 13 Aug 2021 10:03:33 GMT", "id": "19fd0487f0d178112985b5bc1572c5cf71fda890" }, { "date": "Tue, 21 Sep 2021 21:41:04 GMT", "id": "43c8a5a2bddd7c1bcb3e0ae1d1bb7ad23ee4395b" } ], "v8": [] } }, { "cve": "CVE-2021-37959", "date": "Thu, 15 Jul 2021 07:42:53 GMT", "description": "Use after free in Task Manager. Reported by raven (@raid_akame)\u00a0", "issue_id": 1229625, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 06 Oct 2021 14:38:13 GMT", "id": "4a4f2093bba6131f6e856ba7da253cad2e5ea115" }, { "date": "Wed, 21 Jul 2021 23:02:27 GMT", "id": "51ab2b4b4702040ee12288d03fbc073d766c071f" } ], "v8": [] } }, { "cve": "CVE-2021-30591", "date": "Wed, 14 Jul 2021 11:50:10 GMT", "description": "Use after free in File System API. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1229298, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 10 Aug 2021 06:36:26 GMT", "id": "995064c730323afab2ab92fd1fef50f7d41b19f4" }, { "date": "Wed, 28 Jul 2021 03:01:32 GMT", "id": "f024e59f574ee3ca4297d35810e4c96ebd223173" }, { "date": "Wed, 28 Jul 2021 03:00:15 GMT", "id": "0f1eaba52798718df865c9cafd7fdafb880343df" }, { "date": "Tue, 27 Jul 2021 03:05:48 GMT", "id": "a498cfe6a2294c5e8023a31000605d62538b5c29" }, { "date": "Wed, 21 Jul 2021 09:11:13 GMT", "id": "e2123a8e0943b4399814bd530df401ed071b6d0f" } ], "v8": [] } }, { "cve": "CVE-2022-1855", "date": "Tue, 13 Jul 2021 00:00:00 GMT", "description": "Use after free in Messaging. Reported by Anonymous", "issue_id": 1228661, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 27 Apr 2022 20:51:50 GMT", "id": "2782c7bc5bbe0829ad39907866f59bad65777df5" }, { "date": "Tue, 05 Apr 2022 07:00:37 GMT", "id": "068f13cc5aa5f7a6e9faf28d8731275e64cb657b" }, { "date": "Tue, 05 Apr 2022 08:39:15 GMT", "id": "f9bba74f9a4c8e50af2f6ba4e447fd6bb43edc7d" } ], "v8": [] } }, { "cve": "CVE-2021-30563", "date": "Mon, 12 Jul 2021 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Anonymous", "issue_id": 1228407, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Thu, 05 Aug 2021 11:49:01 GMT", "id": "40b87a2997685dd1162838e4304ce23a10bd5d92" }, { "date": "Tue, 13 Jul 2021 18:14:25 GMT", "id": "374354bfe4a30740b96936b33e522d6fcd1cda67" }, { "date": "Tue, 13 Jul 2021 18:48:24 GMT", "id": "99bc5881846d01f853e0e70124de408f00d932f3" }, { "date": "Wed, 14 Jul 2021 16:23:03 GMT", "id": "0e7f91956cecd8918ba4e8f721a59bae9f339b59" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" }, { "date": "Wed, 14 Jul 2021 16:42:52 GMT", "id": "66d208afeaf10cd8b1dd0fabcc2cc1501a0a40de" } ] } }, { "cve": "CVE-2022-1857", "date": "Sun, 11 Jul 2021 00:00:00 GMT", "description": "Insufficient policy enforcement in File System API. Reported by Daniel Rhea", "issue_id": 1227995, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$2000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 11 May 2022 17:12:45 GMT", "id": "988164c6c4a563c3d4c0dedba295d09472dfc15f" }, { "date": "Mon, 16 May 2022 18:20:27 GMT", "id": "f1dd785e021eee989af8fbe7570f424e96cb0b16" } ], "v8": [] } }, { "cve": "CVE-2021-30590", "date": "Fri, 09 Jul 2021 11:10:19 GMT", "description": "Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1227777, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 10 Aug 2021 05:43:55 GMT", "id": "440b019fa3a718d146e30c50eff441de9d42c491" }, { "date": "Tue, 27 Jul 2021 23:31:44 GMT", "id": "dd7b6f26e4768664d743d3c7dd793b82bd814998" }, { "date": "Fri, 23 Jul 2021 00:01:38 GMT", "id": "d2e1d6871cf7ca9dbbc82a400be49234d20f98cf" }, { "date": "Mon, 26 Jul 2021 18:34:57 GMT", "id": "cb19602196e186a7d2ee5525ddb5d63a416fe9fd" }, { "date": "Tue, 27 Jul 2021 22:29:24 GMT", "id": "5c37324fc1f3e53a9f4c5fc2f3d17bd2b64c5730" } ], "v8": [] } }, { "cve": "CVE-2021-30574", "date": "Thu, 08 Jul 2021 01:00:27 GMT", "description": "Use after free in protocol handling. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1227315, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 13 Jul 2021 19:46:21 GMT", "id": "42a7279960cc97a1916daeffd7f1683db0e00db2" }, { "date": "Wed, 28 Jul 2021 08:57:56 GMT", "id": "c722a52c34e805e68671dc43a47dbf3980beb6da" }, { "date": "Fri, 09 Jul 2021 19:44:02 GMT", "id": "2738faaac807b46e8df16ddff8b60489aa816c40" }, { "date": "Wed, 28 Jul 2021 15:43:22 GMT", "id": "27e1ef2dedcc28b167e1c283829d4d55935628ed" } ], "v8": [] } }, { "cve": "CVE-2021-37958", "date": "Thu, 24 Jun 2021 00:00:00 GMT", "description": "Inappropriate implementation in Navigation. Reported by James Lee (@Windowsrcer)", "issue_id": 1223290, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 18 Aug 2021 19:47:41 GMT", "id": "5576e533a0da56df93242e2b361a306df2b6c1ec" }, { "date": "Thu, 26 Aug 2021 00:32:40 GMT", "id": "991fdfe396718b849fae45fb6419146327e4cc33" } ], "v8": [] } }, { "cve": "CVE-2021-30562", "date": "Tue, 15 Jun 2021 00:00:00 GMT", "description": "Use after free in WebSerial. Reported by Anonymous", "issue_id": 1220078, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 28 Jun 2021 21:55:24 GMT", "id": "3feda02444909f1c713264a5740ae43c0258815c" }, { "date": "Sat, 19 Jun 2021 00:22:34 GMT", "id": "1d6359ea08c66fd0df2548aaf472a47a29b58a28" }, { "date": "Tue, 27 Jul 2021 16:05:11 GMT", "id": "62ba4b5a6541c3539fd0cc7b4272c4ead0a6f6f3" }, { "date": "Wed, 16 Jun 2021 16:43:45 GMT", "id": "4059ecc3a5352601a4d79196f90c8ca19262afe1" } ], "v8": [] } }, { "cve": "CVE-2021-30554", "date": "Tue, 15 Jun 2021 00:00:00 GMT", "description": "Use after free in WebGL. Reported by anonymous", "issue_id": 1219857, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 16 Jun 2021 21:47:09 GMT", "id": "b77b38a3380c7a5aa2a898cbf4b714e34d9baf70" }, { "date": "Thu, 17 Jun 2021 01:57:32 GMT", "id": "1057df9bef3674a3ccf232f77534ea6d98f7d7ae" }, { "date": "Tue, 22 Jun 2021 13:42:55 GMT", "id": "3a34580b063370b68e7f71c3fb06f108d1a45e4d" }, { "date": "Tue, 15 Jun 2021 18:25:57 GMT", "id": "01b6f7e0a70648d7c7302454993f0bf86d5a0241" }, { "date": "Tue, 22 Jun 2021 13:43:53 GMT", "id": "4105a1437e4fd2c462d72354aea5d05bb397b1fa" } ], "v8": [] } }, { "cve": "CVE-2021-30568", "date": "Mon, 14 Jun 2021 20:45:15 GMT", "description": "Heap buffer overflow in WebGL. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1219886, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$8500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 29 Jun 2021 01:17:03 GMT", "id": "e60cc80ff744a88da6076297dbb2b3ff3047d29f" }, { "date": "Tue, 27 Jul 2021 17:02:00 GMT", "id": "0cd64b399cc0321e6c6a996a50e22bc760647be7" }, { "date": "Thu, 24 Jun 2021 01:57:08 GMT", "id": "7d0a12ce19fed024d56b95a692d888fe3ef14e2f" } ], "v8": [] } }, { "cve": "CVE-2021-30608", "date": "Mon, 14 Jun 2021 19:52:23 GMT", "description": "Use after free in Web Share. Reported by Huyna at Viettel Cyber Security", "issue_id": 1219870, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 16 Jun 2021 06:30:24 GMT", "id": "b11d329df72b61188f8d7d35a7b7fcbf3421b899" } ], "v8": [] } }, { "cve": "CVE-2021-30561", "date": "Mon, 14 Jun 2021 10:49:04 GMT", "description": "Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1219630, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 21 Jun 2021 09:48:45 GMT", "id": "6b5984783028c775dccf4f4a99a17c29fb2ca09d" }, { "date": "Wed, 16 Jun 2021 11:37:37 GMT", "id": "c0614e9bcef7266d2e4544602d668c01b5dcaa37" }, { "date": "Tue, 29 Jun 2021 06:16:49 GMT", "id": "0aa83644d478834b6657242c2360391e17c80571" } ] } }, { "cve": "CVE-2021-30560", "date": "Sat, 12 Jun 2021 10:44:36 GMT", "description": "Use after free in Blink XSLT. Reported by Nick Wellnhofer", "issue_id": 1219209, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 16 Jun 2021 02:41:13 GMT", "id": "79fc7bcbc940a66f4edfd2c49a5e63106074836a" }, { "date": "Tue, 29 Jun 2021 00:39:04 GMT", "id": "d8558e4bbec758766c982b27386180e5fd76ce93" }, { "date": "Fri, 18 Jun 2021 15:52:33 GMT", "id": "137da3f36a0bd3fb9b7e0cc85032369dfa3a3789" }, { "date": "Wed, 28 Jul 2021 09:34:36 GMT", "id": "7741771f84bcc8ddbd2d568c65612af18e2e33fa" } ], "v8": [] } }, { "cve": "CVE-2021-30559", "date": "Fri, 11 Jun 2021 16:20:36 GMT", "description": "Out of bounds write in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1219082, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 25 Jun 2021 20:17:33 GMT", "id": "bb367dfcce5f2ff950bf1fc6ce5a7219f27579d6" } ], "v8": [] } }, { "cve": "CVE-2021-30569", "date": "Thu, 10 Jun 2021 21:23:48 GMT", "description": "Use after free in sqlite. Reported by Chris Salls (@salls) of Makai Security", "issue_id": 1218707, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 18 Jun 2021 22:51:26 GMT", "id": "009cada961a9a313aa208ffb9e2666457b275637" }, { "date": "Wed, 28 Jul 2021 11:05:46 GMT", "id": "c22f18b50b825f594cb1a9a429d9a6c5837f3ba8" }, { "date": "Tue, 22 Jun 2021 23:12:25 GMT", "id": "45278d955b0bfb186a9cfb8caaa8c3605d32e43b" } ], "v8": [] } }, { "cve": "CVE-2021-30594", "date": "Thu, 10 Jun 2021 09:45:54 GMT", "description": "Use after free in Page Info UI. Reported by raven (@raid_akame)\u00a0", "issue_id": 1218468, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 09 Jul 2021 09:39:02 GMT", "id": "1079ace4a2f90b600e639a64c692922cac3d03da" }, { "date": "Mon, 26 Jul 2021 12:07:22 GMT", "id": "b316d13bcc94ebf775a9196cea6832844c6266d2" }, { "date": "Tue, 27 Jul 2021 14:10:56 GMT", "id": "252df1b2c738e7da6dedc3a6749ac70f1008c884" }, { "date": "Tue, 10 Aug 2021 06:31:06 GMT", "id": "a9eab50a4301957424a651ae15dff7ed0f058535" } ], "v8": [] } }, { "cve": "CVE-2021-30573", "date": "Sat, 05 Jun 2021 18:18:39 GMT", "description": "Use after free in GPU. Reported by Security For Everyone Team - https://securityforeveryone.com", "issue_id": 1216822, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 07 Jul 2021 20:50:53 GMT", "id": "cd98d7c0dae974428f2b7692b010dd62aba3d3c4" }, { "date": "Tue, 22 Jun 2021 00:02:35 GMT", "id": "8d16f621fa982e656664077cdaa80d09a44de9ce" }, { "date": "Fri, 18 Jun 2021 21:20:09 GMT", "id": "38b4905f8d877b27bc2d4ccd4cfc0f82b636deea" }, { "date": "Tue, 17 Aug 2021 15:59:40 GMT", "id": "186264aa996c8ab8747824e30e1b43d7bb936b4e" } ], "v8": [] } }, { "cve": "CVE-2021-30551", "date": "Fri, 04 Jun 2021 07:10:13 GMT", "description": "Type Confusion in V8. Reported by Clement Lecigne of Google's Threat Analysis Group and Sergei Glazunov of Google Project Zero", "issue_id": 1216437, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 07 Jun 2021 16:06:23 GMT", "id": "dcfea97b692303536ab52eb250ee82f5b1a0759c" }, { "date": "Tue, 08 Jun 2021 15:35:12 GMT", "id": "1936d568193b37d50d99218724ebbb76785a30d2" }, { "date": "Wed, 09 Jun 2021 09:16:42 GMT", "id": "368a20bcd75b5444aa50e387ccdbf3842ae38844" }, { "date": "Thu, 10 Jun 2021 11:32:49 GMT", "id": "9a9c936879c2c04c5ccd557c669d12846a698c6c" }, { "date": "Mon, 07 Jun 2021 19:21:37 GMT", "id": "8f273dedf10011a71964ae8778522de99798e086" }, { "date": "Thu, 10 Jun 2021 11:31:46 GMT", "id": "951a47c530b39fc01d97764a971d4fe3faea5f9a" }, { "date": "Tue, 08 Jun 2021 15:28:29 GMT", "id": "5d8866d5fa8d14daabe9b6ce3610fb9fb46dbd51" }, { "date": "Mon, 07 Jun 2021 19:20:34 GMT", "id": "1f5113816c514b45084e0c2f66ca06f030ae09c6" }, { "date": "Mon, 07 Jun 2021 16:00:34 GMT", "id": "f9857fdf743eeb263aec3944259ad811f564291b" } ] } }, { "cve": "CVE-2021-30555", "date": "Tue, 01 Jun 2021 00:22:50 GMT", "description": "Use after free in Sharing. Reported by David Erceg", "issue_id": 1215029, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 09 Jun 2021 09:00:01 GMT", "id": "4261abbb1403732528d36de5645abb788fea2ae5" }, { "date": "Fri, 04 Jun 2021 13:49:34 GMT", "id": "4b16a8bea2017486654aca28a361bbb5a0b5ae60" }, { "date": "Wed, 09 Jun 2021 09:09:49 GMT", "id": "eb6ddec9b4b448ef79c393860fdabfcf59386c57" }, { "date": "Tue, 22 Jun 2021 13:45:15 GMT", "id": "6f74d0a094fa6a758b323f3392cd1b4d7240e991" }, { "date": "Tue, 22 Jun 2021 13:48:53 GMT", "id": "61c58cf2c1558a429daae9624d683ae2468bf386" } ], "v8": [] } }, { "cve": "CVE-2021-30541", "date": "Mon, 31 May 2021 08:16:33 GMT", "description": "Use after free in V8. Reported by Richard Wheeldon", "issue_id": 1214842, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 29 Jun 2021 14:34:28 GMT", "id": "e76178b896f2f51252c259123e3ec5eb9e81b753" }, { "date": "Thu, 05 Aug 2021 14:42:38 GMT", "id": "19bc8e73914d5b95fad302405f108d1c7ed78edd" } ] } }, { "cve": "CVE-2021-30572", "date": "Fri, 28 May 2021 03:29:20 GMT", "description": "Use after free in Autofill. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1214234, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 28 Jul 2021 09:18:06 GMT", "id": "090bb29f567ec34aeff85878f92025b9fd976bba" }, { "date": "Wed, 07 Jul 2021 20:02:45 GMT", "id": "24293de1553b49f74d0846d2c93fde07eec2d151" }, { "date": "Fri, 02 Jul 2021 17:36:12 GMT", "id": "48cf01e4039fecbe119d8223d1f6072aaf44f258" }, { "date": "Tue, 27 Jul 2021 20:09:16 GMT", "id": "84b97683080071a1d526b7c5d3727eb9db5681f3" } ], "v8": [] } }, { "cve": "CVE-2022-0298", "date": "Tue, 25 May 2021 00:33:40 GMT", "description": "Use after free in Scheduling. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1212957, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 12 Jan 2022 04:28:13 GMT", "id": "3c60616245d4928ee89ad842e1031bd8d3a6121d" }, { "date": "Tue, 18 Jan 2022 18:11:43 GMT", "id": "f779b38a3fd3ef532075081dd918b4be398c8c1f" }, { "date": "Tue, 18 Jan 2022 19:36:05 GMT", "id": "b0cb408e775cb022a90f2632c4d6f3e1ea46e0de" }, { "date": "Tue, 18 Jan 2022 19:36:11 GMT", "id": "c05d486542abfa0def40dbdcf2ba79e19fb964f3" } ], "v8": [] } }, { "cve": "CVE-2021-30544", "date": "Mon, 24 May 2021 04:16:04 GMT", "description": "Use after free in BFCache. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1212618, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$25000", "severity": "Critical", "commit": { "chromium": [ { "date": "Thu, 10 Jun 2021 07:07:44 GMT", "id": "0e36d324d6ef42ddedf67bdd82001f31a47c994e" }, { "date": "Tue, 01 Jun 2021 06:51:57 GMT", "id": "be8d69148374f5f315b39e69d04cfe58946cc9a4" }, { "date": "Thu, 10 Jun 2021 07:03:17 GMT", "id": "34d5af37f9ac64b3d838facf975065a2d6ebd471" }, { "date": "Thu, 27 May 2021 11:19:58 GMT", "id": "a2414a05a486ca0ad18ba4caf78e883a668a0555" }, { "date": "Tue, 01 Jun 2021 17:45:57 GMT", "id": "7cd7f6741fc4491c2f7ef21052a370ee23887e37" } ], "v8": [] } }, { "cve": "CVE-2021-30556", "date": "Mon, 24 May 2021 02:35:40 GMT", "description": "Use after free in WebAudio. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1212599, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 22 Jun 2021 12:52:03 GMT", "id": "2a4354a12021affe58c951fa6a1d3679677dfa59" }, { "date": "Wed, 16 Jun 2021 02:27:08 GMT", "id": "0d0066a85064140025c868cff05a4cf61aebb8c3" }, { "date": "Wed, 02 Jun 2021 23:14:16 GMT", "id": "e34e28f6afc6844c95df347a19bca40496823979" }, { "date": "Tue, 08 Jun 2021 22:20:15 GMT", "id": "d2e1eeb7abe8011d78fc2eed2ca55d8ef54edccc" }, { "date": "Tue, 22 Jun 2021 12:46:05 GMT", "id": "87dfa1af321f6ac7b9c6cd61534f82be455be9d9" } ], "v8": [] } }, { "cve": "CVE-2021-30550", "date": "Sun, 23 May 2021 14:14:58 GMT", "description": "Use after free in Accessibility. Reported by David Erceg", "issue_id": 1212500, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 03 Jun 2021 23:25:28 GMT", "id": "ac8ca2ab03c64ac1bb06860d9a4d649c043680ad" }, { "date": "Wed, 26 May 2021 19:47:15 GMT", "id": "427728383657e6ccb06dbfcce0c5118bb557c0af" }, { "date": "Thu, 10 Jun 2021 07:43:04 GMT", "id": "2835c871c02585bba204806b7d5fbe2003d0515e" }, { "date": "Thu, 27 May 2021 21:59:00 GMT", "id": "2d3f7840d4e01d00b354187834595fdc442fcac9" }, { "date": "Thu, 10 Jun 2021 07:45:07 GMT", "id": "cc4e89eb5a743f24cdc2e4d4b667924ee8323402" } ], "v8": [] } }, { "cve": "CVE-2021-30549", "date": "Sun, 23 May 2021 13:54:24 GMT", "description": "Use after free in Spell check. Reported by David Erceg", "issue_id": 1212498, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 27 May 2021 22:29:20 GMT", "id": "fb043604930d22d5fb2e88045fd980523c7b5257" }, { "date": "Thu, 27 May 2021 18:15:43 GMT", "id": "b427418352dc5a2e095aaa3f3dcd3c55d91dfbd4" }, { "date": "Thu, 10 Jun 2021 07:20:34 GMT", "id": "536bcb2d708f12decb47d0454da0b95995145974" }, { "date": "Thu, 10 Jun 2021 07:06:47 GMT", "id": "90e0022e33af99c4e7320774c888af92c876d11b" }, { "date": "Thu, 03 Jun 2021 23:33:28 GMT", "id": "9f8ca0e35834223cb58ce777c9ccd49e903e7434" } ], "v8": [] } }, { "cve": "CVE-2021-30567", "date": "Thu, 20 May 2021 05:14:26 GMT", "description": "Use after free in DevTools. Reported by DDV_UA", "issue_id": 1211326, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Jun 2021 19:34:31 GMT", "id": "5a63c928d01e2f4de4ff431ff594f2ee0aeae392" }, { "date": "Fri, 28 May 2021 05:22:20 GMT", "id": "3ee01e4fd442a1d6563e79be86d66c83a087cfb0" } ], "v8": [] } }, { "cve": "CVE-2021-30565", "date": "Wed, 19 May 2021 11:02:23 GMT", "description": "Out of bounds write in Tab Groups. Reported by David Erceg", "issue_id": 1210985, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Jun 2021 22:15:34 GMT", "id": "05198700faf344500e765218ca96b161b010fc45" }, { "date": "Tue, 27 Jul 2021 19:50:03 GMT", "id": "eac37c18783def1328257489f633e3f562e30cc0" }, { "date": "Tue, 17 Aug 2021 15:53:41 GMT", "id": "3b96593da9517623119e4c5d501f4abd2d12acb6" }, { "date": "Wed, 23 Jun 2021 21:18:19 GMT", "id": "4e8d756caa45baf0465a69cbd4f49ceaf6628e45" } ], "v8": [] } }, { "cve": "CVE-2021-30548", "date": "Tue, 18 May 2021 06:50:27 GMT", "description": "Use after free in Loader. Reported by Yangkang(@dnpushme) & Wanglu of Qihoo360 Qex Team", "issue_id": 1210487, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 01 Jun 2021 06:17:17 GMT", "id": "d5c4282bc577aad7490407a1f15cc79f3ac24492" }, { "date": "Fri, 04 Jun 2021 16:50:25 GMT", "id": "e88c656a9fb4a7bb1c66ddcedae8049a448ebef4" }, { "date": "Tue, 25 May 2021 09:45:50 GMT", "id": "8097e73295a88e64d8318d982847a5e4f2bcc4d2" }, { "date": "Tue, 08 Jun 2021 07:29:38 GMT", "id": "7be6a34fe2f01af881bb074bc616bf5b6b5f7c31" }, { "date": "Fri, 11 Jun 2021 08:42:15 GMT", "id": "fad297a48aceb4efa1b43ea1e0fdfdbe25ecf515" }, { "date": "Fri, 11 Jun 2021 08:05:05 GMT", "id": "b7a1f498f17ef4a617ff7c1133c4b1d8785f9434" }, { "date": "Fri, 11 Jun 2021 08:07:55 GMT", "id": "1856470e257006c9a770d01ceb216f706683dcfd" }, { "date": "Thu, 20 May 2021 15:21:39 GMT", "id": "702f4d4ddb963cafb0d133972282dfc803510b75" }, { "date": "Fri, 11 Jun 2021 08:42:36 GMT", "id": "9037876f53217bb229b0998e5110bc5d30b59e37" } ], "v8": [] } }, { "cve": "CVE-2021-30547", "date": "Tue, 18 May 2021 01:42:33 GMT", "description": "Out of bounds write in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1210414, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 21 May 2021 06:17:55 GMT", "id": "97c16fd4f4df507444e586ff6f9b1bd0b5fcddc7" } ], "v8": [] } }, { "cve": "CVE-2021-30593", "date": "Sun, 16 May 2021 06:45:08 GMT", "description": "Out of bounds read in Tab Strip. Reported by David Erceg", "issue_id": 1209616, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 30 Jul 2021 18:01:28 GMT", "id": "f1e13ea0f18645899c534d15ed88c9ddf40b23d3" }, { "date": "Mon, 23 Aug 2021 11:57:31 GMT", "id": "916bf13dd983af62491c68ea1b6a39f8de6f65a6" }, { "date": "Tue, 13 Jul 2021 00:20:43 GMT", "id": "8c956ce0d96372940ec1702bbacec4b37cfa5357" }, { "date": "Thu, 29 Jul 2021 22:14:33 GMT", "id": "0bff00317ed3ada8009d62e0ce3c39eb144b8589" } ], "v8": [] } }, { "cve": "CVE-2021-30592", "date": "Sat, 15 May 2021 05:14:31 GMT", "description": "Out of bounds write in Tab Groups. Reported by David Erceg", "issue_id": 1209469, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 30 Jul 2021 18:33:48 GMT", "id": "35c7ba7daee91b9cbcdc5e805edb1f96336d2a59" }, { "date": "Thu, 29 Jul 2021 22:01:52 GMT", "id": "6411996ec3d8211269c1e3e4beabcecdc18dba68" }, { "date": "Tue, 13 Jul 2021 04:05:10 GMT", "id": "e06d6c59ec36066fa8ff9b9874b63c7e189fc1da" }, { "date": "Fri, 20 Aug 2021 17:37:48 GMT", "id": "4a94360783033db3b52d8a03f408e6839a25b660" } ], "v8": [] } }, { "cve": "CVE-2021-30546", "date": "Fri, 07 May 2021 19:59:30 GMT", "description": "Use after free in Autofill. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1206911, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Jun 2021 07:34:37 GMT", "id": "19f847255af25e7e697f8421862bf025a5267a01" }, { "date": "Thu, 10 Jun 2021 07:34:24 GMT", "id": "0662717d698648a4a4becd8d23acb8ac3659eb6b" }, { "date": "Thu, 20 May 2021 13:50:51 GMT", "id": "46bed19e49ab2d941e6728c28a9b6fcb095a8da3" }, { "date": "Fri, 04 Jun 2021 13:43:45 GMT", "id": "331767c3797eb380295c41cbbbc553b3934d19f9" } ], "v8": [] } } ]