[ { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1320854, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 18 May 2022 01:55:42 GMT", "id": "e3fdf1ae9f30a3fa768e76bfe55f7f19310a6d51" }, { "date": "Thu, 05 May 2022 08:20:06 GMT", "id": "d8a433833c87fbc530b2ba3d7d8df3bc59d8715d" }, { "date": "Tue, 10 May 2022 16:27:33 GMT", "id": "f5bd7c7c60eab49c9666a3822818c30ae72332c7" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1318610, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 28 Apr 2022 00:44:28 GMT", "id": "f3d01ff794dc29fe74ef9893edb768d35ba1b1ab" }, { "date": "Fri, 22 Apr 2022 23:40:38 GMT", "id": "2582158fc555edee390a050a64c1b89994a6b349" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1310597, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 29 Mar 2022 15:25:25 GMT", "id": "b8159b0dfee89e9f038f0e04a491b35c915e675a" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1306751, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 06 May 2022 21:13:09 GMT", "id": "e8ffcfb42c3167026088af19df5e68084d5f9bb4" }, { "date": "Tue, 03 May 2022 23:35:35 GMT", "id": "c5218f1f0a059e193445b892331d2fdd856b3d57" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1310038, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 04 Apr 2022 21:19:29 GMT", "id": "28f765b456ded769288e405330a3902256316b6f" }, { "date": "Fri, 01 Apr 2022 21:05:01 GMT", "id": "bcdb42ce5c4ed832d1a7370a760ba372ff3651d0" }, { "date": "Fri, 01 Apr 2022 18:29:48 GMT", "id": "9d7c5d649de1e513df19784f6912a682f3f3fb21" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1306968, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 25 Mar 2022 09:53:11 GMT", "id": "dd578a7ab87b69230dc02c10cfc55a07fc7b58da" }, { "date": "Fri, 25 Mar 2022 12:28:35 GMT", "id": "3f5002220a4e2c72699eb2eaaafb3253da66aea2" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1303552, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 11 Apr 2022 11:23:18 GMT", "id": "46ea5057059e84f5116567dfa46b2c0cea288b86" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 24 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1266953, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 05 Nov 2021 21:36:41 GMT", "id": "0767cb7db2786261f2693cf333cca6b91976478c" }, { "date": "Fri, 18 Mar 2022 22:53:11 GMT", "id": "2d48c4da80c5e5402e9228a433a4dca0bbea0ab1" }, { "date": "Fri, 18 Mar 2022 21:34:23 GMT", "id": "80fb7252b99d4478d1c2e940d3ccba81fcc14995" } ], "v8": [] } }, { "cve": "CVE-2022-1853", "date": "Thu, 12 May 2022 00:00:00 GMT", "description": "Use after free in Indexed DB. Reported by Anonymous", "issue_id": 1324864, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Critical", "commit": { "chromium": [ { "date": "Fri, 27 May 2022 14:51:55 GMT", "id": "64a9ef9bc2830a16429edcbc5f8f3571dcc4b4c0" }, { "date": "Sun, 15 May 2022 02:49:42 GMT", "id": "30be2a150c828d080679f0cbce5fc2a310375688" }, { "date": "Mon, 16 May 2022 20:15:46 GMT", "id": "5a3f3336d3c61f710b91a0e5955735d5f5bb1332" }, { "date": "Tue, 17 May 2022 18:26:17 GMT", "id": "dbe72c6ad41a655fc0993c80e280e403aabf7c1a" }, { "date": "Fri, 13 May 2022 22:25:19 GMT", "id": "c4289d209bb85bf8dccba87386b714f9414bbaea" }, { "date": "Fri, 13 May 2022 03:07:20 GMT", "id": "9d8104567e1ede06e86a7ffe40e5d5bf359ae6d1" }, { "date": "Tue, 17 May 2022 18:17:07 GMT", "id": "21139756239bdcc79779320bb7f950b240169f40" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1320614, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Fri, 06 May 2022 18:23:21 GMT", "id": "30475a5a27d67031d935056abf5517508fba61de" }, { "date": "Fri, 06 May 2022 18:31:51 GMT", "id": "723ed8a9cfffede007ae3d675a961d3cabe67e30" }, { "date": "Tue, 03 May 2022 09:02:37 GMT", "id": "8062598f26127d833c237acb3da154c91c1ec7e7" } ] } }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1312563, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 26 Apr 2022 05:54:40 GMT", "id": "f020795789f755b53abb5ff4c7fa9d2ad5dd0ff4" }, { "date": "Fri, 08 Apr 2022 23:28:35 GMT", "id": "99c3f3bfd507090070bc5ae5f9396528fbe03d0f" }, { "date": "Tue, 26 Apr 2022 05:09:36 GMT", "id": "79f1ba521f94b7d060bb43a51bdb302931a4187d" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1298867, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 11 Apr 2022 23:27:39 GMT", "id": "8f687cea366fdd30bbc80aae546554a1b917abea" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 10 May 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1309583, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 06 May 2022 16:35:00 GMT", "id": "d43e84b4565a4f476c0e7df8df494f9db4891ff8" }, { "date": "Tue, 12 Apr 2022 03:05:46 GMT", "id": "0a6b0333df2cf87955f751ab254775d052db659a" }, { "date": "Tue, 26 Apr 2022 16:13:11 GMT", "id": "0f6c9878641be05f3b126bff2da53f68def8af1a" }, { "date": "Tue, 05 Apr 2022 02:36:39 GMT", "id": "e663fe4aa86cb6afce7080d11042e89862598313" }, { "date": "Tue, 26 Apr 2022 04:25:16 GMT", "id": "3d71de3f14db75d88cacb219c98620947444df09" }, { "date": "Fri, 06 May 2022 19:54:30 GMT", "id": "dd0cd121c69c97c28bf8c10f5cdaa4271cc0f7be" }, { "date": "Tue, 26 Apr 2022 04:38:16 GMT", "id": "b6b8982aff1d72f4cbbe8250aa693dde17032d0f" }, { "date": "Thu, 14 Apr 2022 04:54:40 GMT", "id": "f446a9071b573aec32eaf3302a54aa358e3d93cd" }, { "date": "Tue, 26 Apr 2022 04:38:40 GMT", "id": "6350f5e5231fcd9fb73d974721d6ef57ca9c42c9" }, { "date": "Tue, 26 Apr 2022 04:26:36 GMT", "id": "8895251cd6d666674144ddeabf238df31ff48651" }, { "date": "Wed, 06 Apr 2022 10:38:35 GMT", "id": "fdba2ff7323a543ef7a2a229ea5ff2ea9b4c79d8" }, { "date": "Tue, 26 Apr 2022 04:36:36 GMT", "id": "4ffea64feac6d45e150e158830540b09b342b708" }, { "date": "Mon, 09 May 2022 16:54:33 GMT", "id": "df5d0fc660beb133edb7000a22eef17a645af2ec" }, { "date": "Thu, 05 May 2022 18:36:22 GMT", "id": "c69fb71055a198cdaa5885ca345be038e04c1052" }, { "date": "Tue, 05 Apr 2022 00:43:16 GMT", "id": "c3962c4d9842f6f577b826d85210d6b641ab67ef" }, { "date": "Tue, 05 Apr 2022 06:30:24 GMT", "id": "5d50a2dc16c935df5f44223d98fab893f2372383" }, { "date": "Wed, 06 Apr 2022 02:55:56 GMT", "id": "2396213c6d55dfad52a49362206ab354bcad9e0c" }, { "date": "Tue, 26 Apr 2022 08:08:01 GMT", "id": "ef09bdf4051b66851f32c133c35a65249b253642" }, { "date": "Wed, 06 Apr 2022 12:27:38 GMT", "id": "72706a05c4b23808a426b1bd2f7db337735ad7ac" }, { "date": "Thu, 05 May 2022 20:05:52 GMT", "id": "b5268bccd9faf83bee362b3abe1f01b79952b6f6" }, { "date": "Tue, 03 May 2022 13:29:56 GMT", "id": "4f7c037528941f9f3cb1052f912990440aa8c207" }, { "date": "Mon, 11 Apr 2022 02:00:41 GMT", "id": "037da02691fa241fc6a2805f29371a0e28504ed3" }, { "date": "Wed, 27 Apr 2022 09:15:51 GMT", "id": "1aeee5246eefa22c3648f7fab42f003582c13b46" }, { "date": "Tue, 26 Apr 2022 07:57:17 GMT", "id": "eb17c47ed41d8e81394dc6855c6866d24375c73b" }, { "date": "Mon, 09 May 2022 19:21:43 GMT", "id": "6c346d2ede29ee36b16838eb12a00b823d361b79" }, { "date": "Wed, 13 Apr 2022 19:48:59 GMT", "id": "3f07c7263118ed2a0a9be7bd1e866354444699c7" }, { "date": "Mon, 09 May 2022 13:48:22 GMT", "id": "e39e345c0c313c899d76db6395ce3f9f2a75422d" }, { "date": "Tue, 26 Apr 2022 12:47:18 GMT", "id": "9b22f8d37a772c59d0e9c6e85c2eccc615498617" }, { "date": "Tue, 26 Apr 2022 04:35:56 GMT", "id": "ec78aae1ce08da6e442d6e14f52c238da5e97cb8" }, { "date": "Tue, 26 Apr 2022 04:37:36 GMT", "id": "49d53b421125c5b1e4fec7a5feda4d9ce12e57c5" }, { "date": "Tue, 26 Apr 2022 17:32:25 GMT", "id": "07964e06d991374d8dfac10f7e88d1d614b19e9a" } ], "v8": [] } }, { "cve": "CVE-2022-1856", "date": "Fri, 06 May 2022 00:00:00 GMT", "description": "Use after free in User Education. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab\u00a0", "issue_id": 1323239, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 16 May 2022 18:31:45 GMT", "id": "a802d278c9bbfb5971eba79276bc1ff7296126c1" }, { "date": "Wed, 11 May 2022 08:37:28 GMT", "id": "f009a6ae002cb1e85720bd009cf3a711d3028139" } ], "v8": [] } }, { "cve": "CVE-2022-1870", "date": "Fri, 06 May 2022 00:00:00 GMT", "description": "Use after free in App Service. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab\u00a0", "issue_id": 1323236, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 16 May 2022 18:27:55 GMT", "id": "f888819e26999631fee77e51d76c260c9b957610" }, { "date": "Tue, 10 May 2022 07:00:10 GMT", "id": "8524364b1de916c404a66e100bb752cffcff9053" } ], "v8": [] } }, { "cve": "CVE-2022-1859", "date": "Thu, 05 May 2022 00:00:00 GMT", "description": "Use after free in Performance Manager. Reported by Guannan Wang (@Keenan7310) of Tencent Security Xuanwu Lab", "issue_id": 1322744, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 09 May 2022 19:38:32 GMT", "id": "326bff8dab3c221e8b1aaf3856877e393ec6b995" }, { "date": "Fri, 06 May 2022 20:41:21 GMT", "id": "b883adeb89b526ca1a668596f9ca0f22c5fc010f" }, { "date": "Wed, 18 May 2022 10:17:32 GMT", "id": "312fbf4ee3c7a479644076d80ea3ecb73f1c102b" } ], "v8": [] } }, { "cve": "CVE-2022-1864", "date": "Thu, 28 Apr 2022 00:00:00 GMT", "description": "Use after free in WebApp Installs. Reported by Yuntao You (@GraVity0) of Bytedance Wuheng Lab", "issue_id": 1320624, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 16 May 2022 18:26:10 GMT", "id": "5c2ca1e929c7b33f152b28b42ddb9b40fe69ba05" }, { "date": "Thu, 05 May 2022 20:09:17 GMT", "id": "a325c6cb4b612611239143f80067782589632676" } ], "v8": [] } }, { "cve": "CVE-2022-1640", "date": "Thu, 28 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1320592, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 29 Apr 2022 17:19:06 GMT", "id": "da4e27e68b2b394a764fcbd7b1bb5cca120bb45f" }, { "date": "Thu, 05 May 2022 07:36:47 GMT", "id": "41e4d25b6943d3cc436d62369d87e30a39e113ba" }, { "date": "Thu, 05 May 2022 07:42:32 GMT", "id": "b74d01a7b3efa63382ee8f8d463d8ce2a34be62f" }, { "date": "Thu, 05 May 2022 07:31:51 GMT", "id": "bffe15fac553356274613aafe3c04c9dbe7e2cd3" } ], "v8": [] } }, { "cve": "CVE-2022-1854", "date": "Wed, 27 Apr 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1320024, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 03 May 2022 15:44:58 GMT", "id": "46a7889ae2811f0cbb9c61dbb3abbfdc12368bd4" } ], "v8": [] } }, { "cve": "CVE-2022-1635", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "Use after free in Permission Prompts. Reported by Anonymous", "issue_id": 1319797, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 03 May 2022 16:34:02 GMT", "id": "f7b42a885d5831f5c4d7bd5f71d1f4b833473d9f" }, { "date": "Tue, 03 May 2022 16:33:30 GMT", "id": "f5c8a150a47f6270ef58085a55992d6f67ca16a3" }, { "date": "Fri, 29 Apr 2022 20:28:25 GMT", "id": "4ee270c3650e0ac81be73dceb664e073e2c01ce0" }, { "date": "Tue, 03 May 2022 16:36:39 GMT", "id": "533df6600f4af1d7099117b0b69ee22ab24ffdc4" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1313709, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 12 Apr 2022 03:13:35 GMT", "id": "6ae5d9a404378d1cb56eab83a98e29cf3ca7bac4" }, { "date": "Mon, 25 Apr 2022 21:01:46 GMT", "id": "72a5f014ca446488a4d1433aeeab4432b9256f2c" }, { "date": "Tue, 26 Apr 2022 16:15:33 GMT", "id": "e160c1e25c8e9f5ed8598d7c99993a81bb833c74" }, { "date": "Tue, 19 Apr 2022 00:23:21 GMT", "id": "d09442e253701b4fe770f92980009d00564921db" }, { "date": "Tue, 19 Apr 2022 00:23:36 GMT", "id": "811469ddc0dd6b315077c98d9693e24b485341bb" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1312016, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 12 Apr 2022 21:24:23 GMT", "id": "3d135f41c0a029a54d6107b875ef42a40911e782" }, { "date": "Thu, 07 Apr 2022 17:43:46 GMT", "id": "a320a74f9fa1a3d5704018055dabf9572ae765f0" }, { "date": "Tue, 12 Apr 2022 20:49:46 GMT", "id": "cf3e7bff3a8f62b06c0222d321b321c1566b76d1" }, { "date": "Tue, 19 Apr 2022 17:55:48 GMT", "id": "cfc42783d4b7689f68c6fca57be0726ee73b94b7" }, { "date": "Tue, 19 Apr 2022 15:50:09 GMT", "id": "310ced9fe4c4bc4cc2d662628d7dd9f533f5f334" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1301117, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 09:42:45 GMT", "id": "f05932319eeebc490c0e7cb055d4503d1048da80" }, { "date": "Tue, 19 Apr 2022 09:54:02 GMT", "id": "2111f79e3c151b4f6b0c1b98418261fb8e627330" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1300995, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 06 Apr 2022 00:56:48 GMT", "id": "ca5972c8575402e4021757d1a2288e6bb4021efb" }, { "date": "Tue, 19 Apr 2022 15:08:18 GMT", "id": "7bb0c7c04f9e17b8ce90811c2c6ef3912227107e" }, { "date": "Fri, 08 Apr 2022 18:53:00 GMT", "id": "76363db3fc7f1bc38bdcc9ba944319ddb30b4bdf" }, { "date": "Fri, 08 Apr 2022 18:52:56 GMT", "id": "7ad32f1d7e546575cb5c65ddeb351e14e639fdde" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 26 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1296334, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 24 Feb 2022 21:23:26 GMT", "id": "6d210422e05840999b1e12c763d0a1c2133e2776" } ], "v8": [] } }, { "cve": "CVE-2022-1639", "date": "Tue, 19 Apr 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1317650, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 22 Apr 2022 22:00:20 GMT", "id": "c82d1e276ce17ad9c258e4dad0da07c21c623b70" } ], "v8": [] } }, { "cve": "CVE-2022-1633", "date": "Mon, 18 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharesheet. Reported by Khalil Zhani", "issue_id": 1316990, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 04 May 2022 01:04:19 GMT", "id": "b29b15d52a6ce00067ae1f9f0023cb29bcb434de" }, { "date": "Wed, 18 May 2022 15:19:38 GMT", "id": "11a03f802a665808f1b24a423291eee23d16c130" }, { "date": "Wed, 04 May 2022 01:01:52 GMT", "id": "f9ce1bb055878757c8d392c4c90a04d839657758" }, { "date": "Wed, 04 May 2022 01:03:51 GMT", "id": "010147928509b5bd85b45a9b91790f8db97c570e" }, { "date": "Thu, 28 Apr 2022 01:52:17 GMT", "id": "1757761db4bbfbc1e9bc31f007634b2200b63f82" } ], "v8": [] } }, { "cve": "CVE-2022-1638", "date": "Sun, 17 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in V8 Internationalization. Reported by DoHyun Lee (@l33d0hyun) of DNSLab, Korea University", "issue_id": 1316946, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 06 May 2022 20:26:39 GMT", "id": "0f880cb979c3b789d15ceea31c68056f86fcb279" }, { "date": "Fri, 06 May 2022 21:20:33 GMT", "id": "4d51399b74c279b84399dfb0bdae35e4e407f276" }, { "date": "Thu, 19 May 2022 08:55:19 GMT", "id": "fed7af680c379168fee93f697aef34146c427385" }, { "date": "Sat, 30 Apr 2022 09:18:25 GMT", "id": "761498bd132c3defe0482b752bc2058ce6141d0f" }, { "date": "Fri, 06 May 2022 20:17:41 GMT", "id": "0689fa8aa71ec6950d4c4eeb913c475e2794640c" } ], "v8": [] } }, { "cve": "CVE-2022-1861", "date": "Sat, 16 Apr 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Khalil Zhani", "issue_id": 1316846, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 17 May 2022 15:51:17 GMT", "id": "50d38261850ce63ade572cac5898f3e26ee9e2d5" }, { "date": "Tue, 17 May 2022 16:03:44 GMT", "id": "2254445512d7389d5c4377b67b5005e3f01ce8a8" }, { "date": "Fri, 22 Apr 2022 19:00:20 GMT", "id": "6b9fb62ad4bbf7a516e5cf99ccd367a6d4c19b82" }, { "date": "Fri, 13 May 2022 02:13:22 GMT", "id": "85d5e104eaa7f75f4bd905629381a5898f2f1f7f" }, { "date": "Thu, 28 Apr 2022 20:53:20 GMT", "id": "350c96ec8a5bf1494577c47cabf7325934ed12a8" }, { "date": "Thu, 26 May 2022 12:30:34 GMT", "id": "6cb7135bb27987a05aaba2ebb326589ed1745c87" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 14 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1314184, "post_url": "https://chromereleases.googleblog.com/2022/04/chrome-for-android-update_01436352408.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Fri, 08 Apr 2022 16:13:02 GMT", "id": "8072d31ab6f0c3b9f0becca58fb225dfc6dd7100" }, { "date": "Wed, 13 Apr 2022 11:29:30 GMT", "id": "28fb5f8961b13335ccf839f5aafc2e198c66a060" }, { "date": "Wed, 13 Apr 2022 11:31:03 GMT", "id": "c9e95f88e432a91d0bd078dc36caa51de71d1a6c" }, { "date": "Wed, 20 Apr 2022 11:40:19 GMT", "id": "71ed79beb31f5874a0f111f7cbc84312d7d0ddcb" } ] } }, { "cve": "CVE-2022-1364", "date": "Wed, 13 Apr 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Cl\u00e9ment Lecigne of Google's Threat Analysis Group", "issue_id": 1315901, "post_url": "https://chromereleases.googleblog.com/2022/04/chrome-for-android-update_01436352408.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 19 Apr 2022 07:16:08 GMT", "id": "1b752a59e5d37ba51ec2b89fb193b0339b1bcae3" }, { "date": "Wed, 13 Apr 2022 18:33:58 GMT", "id": "2c8d797fee04bc385c5a866235a88eb62c39ffb7" }, { "date": "Thu, 14 Apr 2022 08:44:24 GMT", "id": "b32605ee8d5137024d335e0fa2a5c0a2529f7881" }, { "date": "Tue, 19 Apr 2022 07:15:55 GMT", "id": "5bfe521a1c4165ae7afae68c32e105e945e6af35" }, { "date": "Wed, 27 Apr 2022 08:18:18 GMT", "id": "66c8de2cdac10cad9e622ecededda411b44ac5b3" }, { "date": "Wed, 13 Apr 2022 17:30:19 GMT", "id": "8081a5ffa7ebdb0e5b35cf63aa0490ad3578b940" }, { "date": "Wed, 13 Apr 2022 18:34:16 GMT", "id": "bc8f9a2d23d4622637fdb6d6095bf2061302e983" }, { "date": "Mon, 18 Apr 2022 13:56:17 GMT", "id": "b2d3ef69ef992d2dc2f1733e3c17c361357516dd" }, { "date": "Wed, 13 Apr 2022 17:36:43 GMT", "id": "1da81b4637cdb4d16bb7c13c5160a4e57debfe9c" } ] } }, { "cve": "CVE-2022-1867", "date": "Tue, 12 Apr 2022 00:00:00 GMT", "description": "Insufficient validation of untrusted input in Data Transfer. Reported by Micha\u0142 Bentkowski of Securitum", "issue_id": 1315563, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 18 May 2022 03:21:02 GMT", "id": "f4c3bd0a164b9557e66b42be36e7af8582710240" }, { "date": "Thu, 28 Apr 2022 03:15:16 GMT", "id": "19280353fb92d0ff7d048d7cec28d6a23befbce0" }, { "date": "Mon, 02 May 2022 23:43:40 GMT", "id": "b03797bdb1dfc960c06fc61e5ae4075e2c53454b" } ], "v8": [] } }, { "cve": "CVE-2022-1492", "date": "Mon, 11 Apr 2022 00:00:00 GMT", "description": "Insufficient data validation in Blink Editing. Reported by Micha\u0142 Bentkowski of Securitum", "issue_id": 1315040, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 12 Apr 2022 02:03:00 GMT", "id": "5164a0fe3391283663e1196cf4576ec233985e89" }, { "date": "Mon, 18 Apr 2022 01:14:45 GMT", "id": "e2b8856012e068e16a9a343525961972bc45b480" }, { "date": "Mon, 25 Apr 2022 20:57:43 GMT", "id": "12ba78f3fa7a42c9a6a15f7a8248453ffef91a08" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 11 Apr 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1292905, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 29 Mar 2022 10:11:28 GMT", "id": "02e4b18febb37de8baea718bc2f62cfb5fe56e23" }, { "date": "Wed, 13 Apr 2022 07:55:24 GMT", "id": "75478fe20d017638bee80e1b5e56982493fb043f" }, { "date": "Tue, 05 Apr 2022 20:44:33 GMT", "id": "1a31e2110440a507ff75e50490ae50a47fdd2a6c" } ], "v8": [] } }, { "cve": "CVE-2022-1634", "date": "Sat, 09 Apr 2022 00:00:00 GMT", "description": "Use after free in Browser UI. Reported by Khalil Zhani", "issue_id": 1314908, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 03 May 2022 16:43:02 GMT", "id": "e3df22f945cd065a8de597ebb8a8364b2b3b46d6" }, { "date": "Tue, 03 May 2022 16:42:39 GMT", "id": "e216e57e25c531c05ee223d78f190fb88009d669" }, { "date": "Tue, 03 May 2022 14:37:17 GMT", "id": "72b858db22e2353f2c59bb0dcd26aa22582e8dd0" }, { "date": "Tue, 26 Apr 2022 18:46:14 GMT", "id": "b84548853b4695104647f52228918561ca1e0a76" } ], "v8": [] } }, { "cve": "CVE-2022-1483", "date": "Fri, 08 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in WebGPU. Reported by Mark Brand of Google Project Zero", "issue_id": 1314754, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 20 Apr 2022 19:46:58 GMT", "id": "80fda5a57b7540dd972a4233bc20316d9a65754f" }, { "date": "Mon, 25 Apr 2022 21:01:40 GMT", "id": "5361d836aeb1bde7fb3ef333209a65b61e1911fe" }, { "date": "Mon, 18 Apr 2022 17:21:56 GMT", "id": "f935b27591ed2974f0a8471c85c0840b5ded5ce8" }, { "date": "Tue, 12 Apr 2022 14:31:00 GMT", "id": "bee4701c99cbbbb25c0bd6c5c79a40f63f1b1e47" } ], "v8": [] } }, { "cve": "CVE-2022-1486", "date": "Fri, 08 Apr 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Brendon Tiszka", "issue_id": 1314616, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7500", "severity": "Medium", "commit": { "chromium": [], "v8": [ { "date": "Wed, 13 Apr 2022 12:20:49 GMT", "id": "f473f10ef33955096eb40a1720d7100d1c1aab7e" }, { "date": "Mon, 25 Apr 2022 14:40:23 GMT", "id": "90c0e214ffd67f5de865820a96b542130ba6ce12" }, { "date": "Tue, 19 Apr 2022 09:29:17 GMT", "id": "46b08e67752333b9b78d94ab57b80f3a7668620c" }, { "date": "Tue, 19 Apr 2022 09:23:57 GMT", "id": "68e6ce795ed34d6e8d41083257dc4c3e7fc22fa3" } ] } }, { "cve": "CVE-2022-1858", "date": "Thu, 07 Apr 2022 00:00:00 GMT", "description": "Out of bounds read in DevTools. Reported by EllisVlad", "issue_id": 1314310, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 26 Apr 2022 05:53:56 GMT", "id": "919b1ffe1fe75aa7f77213c0291e6396a6a60e43" }, { "date": "Thu, 21 Apr 2022 20:03:06 GMT", "id": "2e0a0b83e1340e948a27cdc319bea8f32849d414" } ], "v8": [] } }, { "cve": "CVE-2022-1876", "date": "Wed, 06 Apr 2022 00:00:00 GMT", "description": "Heap buffer overflow in DevTools. Reported by @ginggilBesel", "issue_id": 1313600, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Tue, 12 Apr 2022 23:14:06 GMT", "id": "6bbbdbf771fc7ff458724de4720154123b2dd019" }, { "date": "Mon, 11 Apr 2022 22:52:50 GMT", "id": "2039b7264b8d1c653d4ef876aa1aa221fb98ad7e" } ], "v8": [] } }, { "cve": "CVE-2022-1477", "date": "Wed, 06 Apr 2022 00:00:00 GMT", "description": "Use after free in Vulkan. Reported by SeongHwan Park (SeHwa)", "issue_id": 1313905, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [], "v8": [] } }, { "cve": "CVE-2022-1637", "date": "Thu, 31 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Web Contents. Reported by Alesandro Ortiz", "issue_id": 1311820, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 25 Apr 2022 06:18:19 GMT", "id": "2941a90229d258462afa72bb62e5cbe1691e57ea" }, { "date": "Tue, 05 Apr 2022 21:32:46 GMT", "id": "4eb716ef5cdbca4db3a9377ee6390964d0d4025f" }, { "date": "Mon, 25 Apr 2022 05:56:35 GMT", "id": "432027aab772952238842f73730f166aaaea1026" }, { "date": "Thu, 05 May 2022 03:39:56 GMT", "id": "3a48ae495c67e516af53ed92f079ef1dfe551833" } ], "v8": [] } }, { "cve": "CVE-2022-1312", "date": "Wed, 30 Mar 2022 00:00:00 GMT", "description": "Use after free in storage. Reported by Leecraso and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1311701, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 07 Apr 2022 18:07:37 GMT", "id": "b8d56fab5dde25c988f0ae7acdac37b1fbd26a91" }, { "date": "Mon, 04 Apr 2022 23:40:56 GMT", "id": "6405ab0150f1a98ea7a712cf79047770d54bd854" }, { "date": "Thu, 07 Apr 2022 18:35:05 GMT", "id": "0221dbed0ca96e011d38b117a04aeac320578f27" }, { "date": "Tue, 19 Apr 2022 17:21:58 GMT", "id": "794764e9dac65771375b3c3fc1bb73cc4f3a9efe" } ], "v8": [] } }, { "cve": "CVE-2022-1232", "date": "Wed, 30 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1311641, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 01 Apr 2022 15:18:07 GMT", "id": "9c9c8cc00c3f8e2531c532a4b37d178a477bbc5d" }, { "date": "Fri, 01 Apr 2022 10:36:01 GMT", "id": "c4e66b89b4ecd0e90b31e9e4ed08d38085a84c49" }, { "date": "Fri, 01 Apr 2022 16:33:27 GMT", "id": "07e7c60fdb533f6069ec1479bfa06b7333165d5d" }, { "date": "Fri, 01 Apr 2022 16:34:27 GMT", "id": "36b66b5cc99147edc594a69f4b94f7828fc94750" }, { "date": "Mon, 04 Apr 2022 12:55:36 GMT", "id": "f599381978f2f9463afdb154146ad210e89dad0a" } ] } }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1305234, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 15 Mar 2022 21:24:24 GMT", "id": "11aeb511e7b9ae07f853f3ce11dc6a25a2abc6fd" }, { "date": "Mon, 28 Mar 2022 01:45:50 GMT", "id": "aefbd0a8f18bcfd0f6ebcd1904c41992ffe66275" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1304659, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 00:57:32 GMT", "id": "f98c2bb836ec753d5f09ca691db79780c4e94746" }, { "date": "Wed, 16 Mar 2022 00:46:26 GMT", "id": "188557d84f3db956ddbdbe6288236716eb77ec44" }, { "date": "Mon, 28 Mar 2022 01:21:12 GMT", "id": "2c4cf6da48728185485ba6d962e5b1a02257aa60" }, { "date": "Mon, 28 Mar 2022 11:55:01 GMT", "id": "4766acf9fafa60608b991300db482581ea7fb684" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1278260, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 14 Feb 2022 22:13:07 GMT", "id": "83df092064e14a3a736d8692acba8f0feb0fd43b" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 29 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1083835, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 16 Feb 2022 20:38:02 GMT", "id": "eb9207d825d08577cddc774680d9ce92123ab000" } ], "v8": [] } }, { "cve": "CVE-2022-1311", "date": "Mon, 28 Mar 2022 00:00:00 GMT", "description": "Use after free in Chrome OS shell. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab", "issue_id": 1310717, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 08 Apr 2022 03:28:17 GMT", "id": "18c12392ffd2cd2a88e7f75d62c5f9364a4d0cef" }, { "date": "Fri, 08 Apr 2022 03:09:35 GMT", "id": "29a0add3cb1bf14cc3fadb7c9c55b9f3a0fc5eed" }, { "date": "Fri, 01 Apr 2022 06:32:55 GMT", "id": "19d06d3fb2d9824e06f3dcac492815d785910fd9" }, { "date": "Wed, 13 Apr 2022 16:37:30 GMT", "id": "5dd954d87a0c091a7874b40d39f27375fcea10fb" } ], "v8": [] } }, { "cve": "CVE-2022-1872", "date": "Sat, 26 Mar 2022 00:00:00 GMT", "description": "Insufficient policy enforcement in Extensions API. Reported by ChaobinZhang", "issue_id": 1310461, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$7000", "severity": "Low", "commit": { "chromium": [ { "date": "Mon, 28 Mar 2022 21:45:24 GMT", "id": "8fe4d09509323628750d91ac5b112ec25b95e101" } ], "v8": [] } }, { "cve": "CVE-2022-1869", "date": "Wed, 23 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab", "issue_id": 1309467, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$NA", "severity": "Medium", "commit": { "chromium": [], "v8": [ { "date": "Wed, 30 Mar 2022 13:09:20 GMT", "id": "185d6116ae7d7771c590f38be8b08530f979d226" } ] } }, { "cve": "CVE-2022-1096", "date": "Wed, 23 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by anonymous", "issue_id": 1309225, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Thu, 24 Mar 2022 20:07:43 GMT", "id": "816573b76818db032f7f2091006bc8973a8b22b8" }, { "date": "Thu, 24 Mar 2022 17:50:12 GMT", "id": "0981e91a4f8692af337e2588562ad1504f4bffdc" }, { "date": "Fri, 25 Mar 2022 13:34:31 GMT", "id": "a2cae2180a7a6d64ccdede44d730c9fbba690fb7" }, { "date": "Thu, 24 Mar 2022 18:07:51 GMT", "id": "bacf506f6f7a187c7b08468fb559e4d6007d2a96" }, { "date": "Thu, 24 Mar 2022 20:15:42 GMT", "id": "f2f44331a14004af99f6508d2aed029b2b48cb3f" }, { "date": "Thu, 24 Mar 2022 18:09:24 GMT", "id": "f39f3c4fe999e9b23b340862b8db215e6518252a" }, { "date": "Thu, 24 Mar 2022 22:55:43 GMT", "id": "a7a1d14b14e222ec6af90764745ab8d3c420fc58" }, { "date": "Fri, 25 Mar 2022 11:25:04 GMT", "id": "26b7ad6967b1d192ffffafb91e8f42e74aa40e55" }, { "date": "Thu, 24 Mar 2022 19:58:53 GMT", "id": "8cfc3bfdcd22070664417dcb2de091bff55833e7" } ] } }, { "cve": "CVE-2022-1871", "date": "Mon, 21 Mar 2022 00:00:00 GMT", "description": "Insufficient policy enforcement in File System API. Reported by Thomas Orlita\u00a0", "issue_id": 1308199, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$7000", "severity": "Low", "commit": { "chromium": [ { "date": "Tue, 29 Mar 2022 10:15:21 GMT", "id": "cbbc7f49e6a64389872037c8fca87f1fc3a429db" } ], "v8": [] } }, { "cve": "CVE-2022-1134", "date": "Mon, 21 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab", "issue_id": 1308360, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Wed, 30 Mar 2022 13:09:20 GMT", "id": "185d6116ae7d7771c590f38be8b08530f979d226" }, { "date": "Mon, 11 Apr 2022 13:06:24 GMT", "id": "f546ac11eec75a5f3db797a844a5b8e2322f345f" }, { "date": "Fri, 25 Mar 2022 16:12:59 GMT", "id": "32fe54204859f8d04e55c62718ed776a35dc14aa" }, { "date": "Thu, 24 Mar 2022 22:10:35 GMT", "id": "464987b1183c54d8c7039ffe8a8c464c69e43912" }, { "date": "Thu, 24 Mar 2022 13:23:42 GMT", "id": "96c5daaea685c72abbc20b8083f6e40c87cabccd" }, { "date": "Fri, 25 Mar 2022 16:15:53 GMT", "id": "6bdb9281a8d3cbe5771cdb0f42825050edd73384" }, { "date": "Wed, 23 Mar 2022 12:26:15 GMT", "id": "9c3d4b3556b2797fa9d9f4bee915e8502608312f" }, { "date": "Thu, 24 Mar 2022 17:59:52 GMT", "id": "c6b68cbfbd49a24bd9d343d718132125370da729" } ] } }, { "cve": "CVE-2022-1310", "date": "Fri, 18 Mar 2022 00:00:00 GMT", "description": "Use after free in regular expressions. Reported by Brendon Tiszka ", "issue_id": 1307610, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Thu, 24 Mar 2022 08:18:33 GMT", "id": "0799b27e6f56e5d9829748cddcbaba81bdef5342" }, { "date": "Tue, 19 Apr 2022 12:39:17 GMT", "id": "e4509f356228ddba8080792d35f566691513213c" }, { "date": "Mon, 21 Mar 2022 07:45:09 GMT", "id": "bdc4f54a50293507d9ef51573bab537883560cc8" }, { "date": "Mon, 04 Apr 2022 08:04:22 GMT", "id": "e42dbcdedb7a7fad504bb1979500cda05baddc1f" } ] } }, { "cve": "CVE-2022-1875", "date": "Tue, 15 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in PDF. Reported by NDevTK", "issue_id": 1306443, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$500", "severity": "Low", "commit": { "chromium": [ { "date": "Wed, 23 Mar 2022 00:58:35 GMT", "id": "7fcb5f05cd1a1c6de9116419e4dd66ec2bb9447b" } ], "v8": [] } }, { "cve": "CVE-2022-1496", "date": "Tue, 15 Mar 2022 00:00:00 GMT", "description": "Use after free in File Manager. Reported by Zhiyi Zhang and Zhunki from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1306391, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 03 May 2022 13:16:36 GMT", "id": "1c4f05e0cf217f48541ff490673664a37e8ad53a" }, { "date": "Tue, 19 Apr 2022 00:24:41 GMT", "id": "588c2b08e2f4f3d6b6f23c01464192f5d21eacba" }, { "date": "Tue, 26 Apr 2022 14:28:54 GMT", "id": "6a2190a8566a1c8e58155eb85420bbb769a00803" }, { "date": "Fri, 25 Mar 2022 21:55:11 GMT", "id": "b7209bc027a96c83473ea6390ffbef3550e3860d" }, { "date": "Fri, 25 Mar 2022 21:12:41 GMT", "id": "004c2a28c015c658b5e5f7bcb19c9b7910135cc6" }, { "date": "Tue, 19 Apr 2022 00:24:16 GMT", "id": "bccb5551a84b695377910d186105c5555834f96e" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 15 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1296876, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Mon, 07 Mar 2022 16:35:52 GMT", "id": "acb491cc375d4abe804604c4f6781b81e3eba579" }, { "date": "Mon, 07 Mar 2022 16:34:12 GMT", "id": "44d5a4c2b182b6542bb1301f79bf32db13fad747" }, { "date": "Mon, 07 Mar 2022 16:39:32 GMT", "id": "bb4325b54d184c5c7521112dc6e36c8433502813" }, { "date": "Wed, 09 Mar 2022 17:00:44 GMT", "id": "c46fb3a15ec24a626b403f7143c58e45cee8b2c7" }, { "date": "Thu, 24 Feb 2022 16:57:37 GMT", "id": "b5003a3c631328bfbe3357dfea7aaebf46316c09" } ] } }, { "cve": "CVE-2022-1133", "date": "Sun, 13 Mar 2022 00:00:00 GMT", "description": "Use after free in WebRTC. Reported by Anonymous", "issue_id": 1305776, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 21 Mar 2022 23:35:04 GMT", "id": "140afbd23488af71aa535ce88e04c71ff772acf6" }, { "date": "Wed, 16 Mar 2022 23:21:55 GMT", "id": "7b04461342e737c2ff8d76bac719265bc84eda5a" } ], "v8": [] } }, { "cve": "CVE-2022-1491", "date": "Sat, 12 Mar 2022 00:00:00 GMT", "description": "Use after free in Bookmarks. Reported by raven at KunLun lab", "issue_id": 1305706, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 22 Mar 2022 00:21:31 GMT", "id": "32b13d19412a9ed44d2c3892d1f75a394b84947e" }, { "date": "Fri, 18 Mar 2022 17:27:41 GMT", "id": "f2d3c078ac66e0c535c357d8eeccc0d0fb795c4b" } ], "v8": [] } }, { "cve": "CVE-2022-1873", "date": "Fri, 11 Mar 2022 00:00:00 GMT", "description": "Insufficient policy enforcement in COOP. Reported by NDevTK", "issue_id": 1305394, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$2000", "severity": "Low", "commit": { "chromium": [ { "date": "Mon, 11 Apr 2022 19:53:56 GMT", "id": "b465304f25945922b9cf68b7e8bf74c056871ecf" }, { "date": "Mon, 28 Mar 2022 08:36:15 GMT", "id": "e465928a544ccec77e292cd46720f3d1122aa832" } ], "v8": [] } }, { "cve": "CVE-2022-1641", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Use after free in Web UI Diagnostics. Reported by Rong Jian of VRI", "issue_id": 1305068, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 26 Apr 2022 16:13:11 GMT", "id": "0f6c9878641be05f3b126bff2da53f68def8af1a" }, { "date": "Wed, 04 May 2022 14:09:01 GMT", "id": "097594adb58d997cd7770792c571361297a2cafb" }, { "date": "Thu, 31 Mar 2022 22:59:23 GMT", "id": "a7a8ff2579e4dd47f5c97ad2482fb2149d950bab" }, { "date": "Tue, 26 Apr 2022 04:23:44 GMT", "id": "28e187eaf9ca08ee638978e0fcf065bbde2d6a78" } ], "v8": [] } }, { "cve": "CVE-2022-1479", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by Jeonghoon Shin of Theori", "issue_id": 1305190, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 00:45:04 GMT", "id": "9b1219a869bd9b469bac758bc9f8463b1361b52e" }, { "date": "Tue, 12 Apr 2022 04:42:05 GMT", "id": "12e39e60c7b15f677b8f6776d9922b52d4a98ca6" } ], "v8": [] } }, { "cve": "CVE-2022-1482", "date": "Thu, 10 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in WebGL. Reported by Christoph Diehl, Microsoft", "issue_id": 1304987, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 29 Apr 2022 15:23:33 GMT", "id": "5be8e065f43e219d4ab71cefecdbbfd3e75ff426" }, { "date": "Tue, 29 Mar 2022 03:11:52 GMT", "id": "f3244fe50ba6c64ab6a75f1370d8dd983927fae6" }, { "date": "Wed, 20 Apr 2022 19:46:07 GMT", "id": "d9b0bc0dcd437407a2403c54e0639a9943a4dab6" }, { "date": "Tue, 19 Apr 2022 23:41:13 GMT", "id": "96feac616a9d6adeef1da1c533b080bb3b9d53cc" } ], "v8": [] } }, { "cve": "CVE-2022-1487", "date": "Wed, 09 Mar 2022 00:00:00 GMT", "description": "Use after free in Ozone. Reported by Sri", "issue_id": 1304368, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 14 Mar 2022 00:07:44 GMT", "id": "e161e3691f6807e64a8f51e454d3ac2fd2f292d2" } ], "v8": [] } }, { "cve": "CVE-2022-1314", "date": "Wed, 09 Mar 2022 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Bohan Liu (@P4nda20371774) and exp-sky of Tencent Security Xuanwu Lab", "issue_id": 1304658, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [], "v8": [ { "date": "Fri, 18 Mar 2022 08:30:45 GMT", "id": "bbea5909c797dec7c620b9fee43d80a1420c2e08" }, { "date": "Tue, 05 Apr 2022 12:23:23 GMT", "id": "9a98f23bcabbf09525037b66a4e9202655197dc0" }, { "date": "Mon, 11 Apr 2022 12:44:05 GMT", "id": "2004594a46c8a2766de63d850d15fcf5efe82dc9" }, { "date": "Mon, 21 Mar 2022 14:12:14 GMT", "id": "90c861ffe7fd4805959867975e5855a61c0bc341" } ] } }, { "cve": "CVE-2022-1145", "date": "Wed, 09 Mar 2022 00:00:00 GMT", "description": "Use after free in Extensions. Reported by Yakun Zhang of Baidu Security", "issue_id": 1304545, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 16 Mar 2022 00:11:10 GMT", "id": "b501c4e45aeb23261b57e6f44ece15f8b4c977fa" }, { "date": "Thu, 31 Mar 2022 17:08:31 GMT", "id": "b9b2d92171974f464277f53e82222cc58ab406c6" }, { "date": "Mon, 21 Mar 2022 23:33:14 GMT", "id": "abdc96c71a384d94fda6c6687b19685d20292b61" } ], "v8": [] } }, { "cve": "CVE-2022-1144", "date": "Tue, 08 Mar 2022 00:00:00 GMT", "description": "Use after free in WebUI. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1304145, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 28 Mar 2022 01:14:50 GMT", "id": "56dd8f0fb0a7405fe8aa6ed2dfe9137f6e1d0f85" }, { "date": "Thu, 10 Mar 2022 22:07:17 GMT", "id": "19504a2ded14ec3a254a2c6b2b0effb0f9169194" }, { "date": "Tue, 22 Mar 2022 23:12:49 GMT", "id": "b23ae53131ce7e5afbcb54d42da6efa622abe63b" } ], "v8": [] } }, { "cve": "CVE-2022-1132", "date": "Mon, 07 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Virtual Keyboard. Reported by Andr.Ess", "issue_id": 1303410, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 02:59:13 GMT", "id": "9bc07cd2ae189cd433e497a09424fdc3c52d2178" }, { "date": "Mon, 14 Mar 2022 22:11:45 GMT", "id": "63bf63f82948b30112eb38f5f0d128141b88386f" }, { "date": "Mon, 14 Mar 2022 22:16:39 GMT", "id": "35e6332614f84ac4acf053e54b9378e92703bc36" } ], "v8": [] } }, { "cve": "CVE-2022-1142", "date": "Mon, 07 Mar 2022 00:00:00 GMT", "description": "Heap buffer overflow in WebUI. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1303613, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 22 Mar 2022 21:30:25 GMT", "id": "c630c62d4bfd4a07078a51226a1149efe43795d6" }, { "date": "Thu, 31 Mar 2022 17:11:01 GMT", "id": "c87440239c897d7ec86b3e5d28c498f590df7032" }, { "date": "Wed, 09 Mar 2022 23:18:43 GMT", "id": "a1a288da0646237bc161c0145cb35018767def38" } ], "v8": [] } }, { "cve": "CVE-2022-1143", "date": "Mon, 07 Mar 2022 00:00:00 GMT", "description": "Heap buffer overflow in WebUI. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1303615, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 00:31:15 GMT", "id": "e782490c1b0b5d500b9aca3bd21c15fd486d1c28" }, { "date": "Mon, 28 Mar 2022 15:58:25 GMT", "id": "790bfdaeb734054c419628e70fd6408e593ffb9d" }, { "date": "Mon, 14 Mar 2022 19:52:55 GMT", "id": "7f3b9f790969d8a566cf30270760e7ba5d5414fc" } ], "v8": [] } }, { "cve": "CVE-2022-1141", "date": "Sat, 05 Mar 2022 00:00:00 GMT", "description": "Use after free in File Manager. Reported by raven at KunLun lab", "issue_id": 1303253, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 31 Mar 2022 17:12:41 GMT", "id": "80cae5e81c10e40ad19ed14e6a10705d887b5db4" }, { "date": "Thu, 10 Mar 2022 00:54:05 GMT", "id": "214db6b05f61309e14eab393755ca3ab47857012" }, { "date": "Fri, 18 Mar 2022 01:12:58 GMT", "id": "98670c1e8709c9da41bedf10e3dab3ec32dd44bd" } ], "v8": [] } }, { "cve": "CVE-2022-1481", "date": "Fri, 04 Mar 2022 00:00:00 GMT", "description": "Use after free in Sharing. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1302949, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 19 Apr 2022 16:15:52 GMT", "id": "75362bbcdb231fd33c93f95c22edebe571122c61" }, { "date": "Fri, 08 Apr 2022 17:10:31 GMT", "id": "88d48019fa49b27478269aeff2068223b35b1e5d" }, { "date": "Tue, 19 Apr 2022 16:09:19 GMT", "id": "04091a4a6e8f4f35a1daa2d6a02e51a3ec28dd8f" } ], "v8": [] } }, { "cve": "CVE-2022-1488", "date": "Fri, 04 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Extensions API. Reported by Thomas Beverley from Wavebox.io", "issue_id": 1302959, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 12 Apr 2022 23:14:54 GMT", "id": "f1359aac0f3511fe435c3133bdd550ecf73e8c9a" }, { "date": "Fri, 25 Mar 2022 23:44:41 GMT", "id": "940ddcfaff7bca60f7df77e54735c4f808933bfa" } ], "v8": [] } }, { "cve": "CVE-2022-0979", "date": "Thu, 03 Mar 2022 00:00:00 GMT", "description": "Use after free in Safe Browsing. Reported by anonymous", "issue_id": 1302644, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 01:53:46 GMT", "id": "6e896d17286cb976555b0b672d32ffea2ab95562" }, { "date": "Tue, 08 Mar 2022 06:33:37 GMT", "id": "1e71a1fcad627e61585d023aa2102262c1dc35b7" }, { "date": "Thu, 10 Mar 2022 00:59:17 GMT", "id": "eb9f2c2099e901d4faacdbc9ce72fb5d5edbf8fc" }, { "date": "Thu, 10 Mar 2022 01:57:18 GMT", "id": "b756e611c62ef992a27d20a148dbcf63c7c7e6fa" } ], "v8": [] } }, { "cve": "CVE-2022-0980", "date": "Wed, 02 Mar 2022 00:00:00 GMT", "description": "Use after free in New Tab Page. Reported by Krace", "issue_id": 1302157, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 07 Mar 2022 20:50:22 GMT", "id": "db2176c1d001ff4f52026c0920c2393ee24115b7" }, { "date": "Mon, 07 Mar 2022 21:13:06 GMT", "id": "e400cb1bdffdc10f87cf648481d3eadf96fd8496" }, { "date": "Thu, 03 Mar 2022 07:20:05 GMT", "id": "64f02e6e38d192a234a1d4f873d01e05aa85a367" } ], "v8": [] } }, { "cve": "CVE-2022-1490", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Use after free in Browser Switcher. Reported by raven at KunLun lab", "issue_id": 1301840, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 02 Mar 2022 17:47:01 GMT", "id": "e7e87d05d58bc70611401f655dc845498357f8e4" } ], "v8": [] } }, { "cve": "CVE-2022-1307", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in full screen. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1301873, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 07 Apr 2022 00:02:50 GMT", "id": "c682acd05ebd33c6fb89ee409984559374f3e436" }, { "date": "Fri, 11 Mar 2022 04:00:06 GMT", "id": "5326b6967d000c677efa23b9f849145b0b06df07" } ], "v8": [] } }, { "cve": "CVE-2022-1128", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "Inappropriate implementation in Web Share API. Reported by Abdel Adim (@smaury92) Oisfi of Shielder", "issue_id": 1301920, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 08 Mar 2022 21:55:02 GMT", "id": "fcb2ea2c4676f96921b067bf7da192a0692c2215" }, { "date": "Thu, 10 Mar 2022 21:29:07 GMT", "id": "4751620d00b41155bbfb791111583f6ae8bb19e8" }, { "date": "Tue, 08 Mar 2022 15:44:00 GMT", "id": "26f39eab6cefe74baef3b0451b63cadd6a7eb84c" }, { "date": "Thu, 10 Mar 2022 22:13:37 GMT", "id": "0c06be8f0f33fbdc856018b45e7d71bcb78385e4" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 01 Mar 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1259596, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Sat, 15 Jan 2022 01:02:05 GMT", "id": "029f149f03dbc7f2f47e4aa0537bfb2bd47a34b2" }, { "date": "Thu, 13 Jan 2022 10:19:18 GMT", "id": "0b1a94ed9435dcfacb28dd0e0857bdb23909a692" }, { "date": "Wed, 19 Jan 2022 10:22:45 GMT", "id": "21ca838a59ab173bc736d8c5f373162fe97aec11" } ], "v8": [] } }, { "cve": "CVE-2022-1868", "date": "Mon, 28 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in Extensions API. Reported by Alesandro Ortiz", "issue_id": 1301203, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 29 Mar 2022 15:40:06 GMT", "id": "d51682b36adc22496f45a8111358a8bb30914534" } ], "v8": [] } }, { "cve": "CVE-2022-1495", "date": "Mon, 28 Feb 2022 00:00:00 GMT", "description": "Incorrect security UI in Downloads. Reported by Umar Farooq ", "issue_id": 1301180, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 18 Mar 2022 07:08:45 GMT", "id": "5bfe30827bd88638cfc6438ec4a283463e55bbb1" }, { "date": "Thu, 17 Mar 2022 21:11:18 GMT", "id": "49bbefe192eabd120f9af9aa1e18ab0116cce891" } ], "v8": [] } }, { "cve": "CVE-2022-0972", "date": "Mon, 28 Feb 2022 00:00:00 GMT", "description": "Use after free in Extensions. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1301320, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 04 Mar 2022 19:43:47 GMT", "id": "5c4e043324b3afd1be673ae2c0a5c00845bb0e86" }, { "date": "Thu, 10 Mar 2022 00:45:56 GMT", "id": "f248f0755b5c2a7aa65c45aa33bb54bc69ad3845" }, { "date": "Tue, 08 Mar 2022 18:14:46 GMT", "id": "382ed1260b5eb60a8bfe9847ce6d2095f2f544ec" }, { "date": "Thu, 10 Mar 2022 02:35:27 GMT", "id": "b321ac924772586a874927cce2b04600efdf4d69" }, { "date": "Thu, 17 Mar 2022 10:19:43 GMT", "id": "80e73e605d32e57ae6020ec6fe03d07f9d3fffbd" } ], "v8": [] } }, { "cve": "CVE-2022-1489", "date": "Fri, 25 Feb 2022 00:00:00 GMT", "description": "Out of bounds memory access in UI Shelf. Reported by Khalil Zhani", "issue_id": 1300561, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 12 Apr 2022 21:58:03 GMT", "id": "df6fec5fdb03df9e6cfcf2e6eb522ac70b885773" }, { "date": "Tue, 22 Mar 2022 01:41:41 GMT", "id": "7412ebc71d3b83b77812ebfcc5207bf482700273" }, { "date": "Mon, 09 May 2022 20:24:33 GMT", "id": "1e0398484250809563aa782c9c5c2dbc2abe7252" } ], "v8": [] } }, { "cve": "CVE-2022-1129", "date": "Thu, 24 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in Full Screen Mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1300253, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Mar 2022 23:13:01 GMT", "id": "37d6456a8fcc12e8719f13470aabf71c7a8ac3cb" }, { "date": "Sat, 19 Mar 2022 00:51:29 GMT", "id": "56470daf4aa89711328c2476403b468ea8adcc17" } ], "v8": [] } }, { "cve": "CVE-2022-1485", "date": "Tue, 22 Feb 2022 00:00:00 GMT", "description": "Use after free in File System API. Reported by Anonymous", "issue_id": 1299743, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7500", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 10:23:25 GMT", "id": "9d06234e50ac61c0d31c8e7616f23f3b13e69d75" }, { "date": "Wed, 02 Mar 2022 14:18:25 GMT", "id": "224c3928e875078766e2f2df03aa78b81418011b" }, { "date": "Fri, 11 Mar 2022 10:08:55 GMT", "id": "cf64617c1cc509f1dc88adb068ef64e61457bc0f" } ], "v8": [] } }, { "cve": "CVE-2022-1306", "date": "Mon, 21 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in compositing. Reported by Sven Dysthe", "issue_id": 1299287, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 20:48:32 GMT", "id": "540e2ecde447b0757dd5bb079a59d8faef3183c1" }, { "date": "Sat, 02 Apr 2022 01:05:15 GMT", "id": "d88e959e018c8ec8107448c46879bd5537dfc0d1" } ], "v8": [] } }, { "cve": "CVE-2022-0971", "date": "Mon, 21 Feb 2022 00:00:00 GMT", "description": "Use after free in Blink Layout. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1299422, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$NA", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 01 Mar 2022 20:02:12 GMT", "id": "4d71d571302a75192f26d9e1122150ae5c600abb" }, { "date": "Tue, 08 Mar 2022 22:55:06 GMT", "id": "db880005f1f0b17ee1702629c225a8044ccc9d3b" }, { "date": "Mon, 07 Mar 2022 20:17:13 GMT", "id": "e3e7862718bce4eb785c59d96359a35ca64c6ac5" }, { "date": "Mon, 07 Mar 2022 20:13:16 GMT", "id": "cebad8ef22dc7b07430fed392518726a62bd25d4" } ], "v8": [] } }, { "cve": "CVE-2022-1478", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in SwiftShader. Reported by SeongHwan Park (SeHwa)", "issue_id": 1299261, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 17 Mar 2022 00:45:04 GMT", "id": "9b1219a869bd9b469bac758bc9f8463b1361b52e" }, { "date": "Fri, 11 Mar 2022 03:59:00 GMT", "id": "5b016f4109f08a3a90ff860c49a68141db6e5d5e" } ], "v8": [] } }, { "cve": "CVE-2022-0977", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in Browser UI. Reported by Khalil Zhani", "issue_id": 1299225, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Mar 2022 15:57:31 GMT", "id": "f9beeea17c09e39c8187caa67b938a1688829d0b" }, { "date": "Wed, 02 Mar 2022 09:19:15 GMT", "id": "7c822d7f1e932fbc4a1220a6f1c5f69b88034f1c" }, { "date": "Thu, 17 Mar 2022 14:32:10 GMT", "id": "650d48c86955c9e7172612810022c2b1ff0129d5" }, { "date": "Fri, 04 Mar 2022 00:59:50 GMT", "id": "24747a485174e78bf8b2b8a6269c8ca8d0a529cb" }, { "date": "Tue, 08 Mar 2022 15:53:37 GMT", "id": "0358cfdcc41283e02a0d2d03450e0b4ff5198da2" }, { "date": "Thu, 17 Mar 2022 16:41:41 GMT", "id": "08e5c10085e2e87b8c3b901ffa11293550140140" }, { "date": "Tue, 08 Mar 2022 19:29:57 GMT", "id": "d0302488d12d1aa6b0ff3fc51d3641f632f89b4b" }, { "date": "Thu, 03 Mar 2022 19:17:49 GMT", "id": "616c160eb7ee8ab538f274b651e5ce67a5ea4f8d" } ], "v8": [] } }, { "cve": "CVE-2022-0978", "date": "Sun, 20 Feb 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1299264, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 12 Apr 2019 03:47:33 GMT", "id": "a5e8f735bfef8be77b8050de46673e4054bc998c" }, { "date": "Mon, 07 Mar 2022 22:25:11 GMT", "id": "04d9d2bb8389539411d6216c1d4ff08d7b84d7a9" } ], "v8": [] } }, { "cve": "CVE-2022-1494", "date": "Thu, 17 Feb 2022 00:00:00 GMT", "description": "Insufficient data validation in Trusted Types. Reported by Masato Kinugawa", "issue_id": 1298122, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 14 Mar 2022 13:04:04 GMT", "id": "9903cb3f093dd569bbc19aaab525cd0239a98366" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 15 Feb 2022 15:14:15 GMT", "description": "internal security issue", "issue_id": 1297764, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 16 Feb 2022 17:30:32 GMT", "id": "b2db0e5d1cbfd7d0b2005f3cfa6a1ca8086449ad" } ], "v8": [] } }, { "cve": "CVE-2022-1860", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in UI Foundations. Reported by @ginggilBesel", "issue_id": 1297209, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 12 May 2022 18:39:05 GMT", "id": "1717b8590d3196d9d0f915d2cc18c36f87d0c18e" }, { "date": "Tue, 17 May 2022 17:26:36 GMT", "id": "97030152ecf30fcad4b62e884460f5bf3dd91687" } ], "v8": [] } }, { "cve": "CVE-2022-1636", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Performance APIs. Reported by Seth Brenith, Microsoft\u00a0", "issue_id": 1297283, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 02 May 2022 07:58:17 GMT", "id": "1639db815d9c0e0c274c49a1204f377325fc28ad" }, { "date": "Wed, 20 Apr 2022 19:30:03 GMT", "id": "9f9d5fd2f3085414fc8776bf556fb5c4fa2dac2c" }, { "date": "Fri, 19 Apr 2019 01:15:41 GMT", "id": "1ceb102baa5f1d21076396de5a1fc27798563b5f" }, { "date": "Wed, 20 Apr 2022 19:22:23 GMT", "id": "0164af057c81452bcec61b484e8de5170a89758b" }, { "date": "Thu, 05 May 2022 10:03:12 GMT", "id": "7ceb0da2ef56d29fb463d2eca72696ed388de4fe" }, { "date": "Thu, 07 Apr 2022 10:30:57 GMT", "id": "f2834646594023a2293d91c4c79b84845d74f5b5" }, { "date": "Tue, 10 May 2022 14:05:53 GMT", "id": "ec0cce63f47df40f35e27e668f321c75ff26e670" } ], "v8": [ { "date": "Wed, 13 Apr 2022 21:19:29 GMT", "id": "ac2275b81b2a0e860025a04c1e54990ab96d251b" }, { "date": "Wed, 06 Apr 2022 19:29:14 GMT", "id": "ca51ae3ac8b468509603633adb6ee3b3be9306ec" } ] } }, { "cve": "CVE-2022-1484", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Heap buffer overflow in Web UI Settings. Reported by Chaoyuan Peng (@ret2happy)", "issue_id": 1297429, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$7500", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 04 Mar 2022 18:09:44 GMT", "id": "83c1fe8483abf01ca9966c643736048d3f8c2790" } ], "v8": [] } }, { "cve": "CVE-2022-1131", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Cast UI. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1297404, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 15 Mar 2022 21:05:56 GMT", "id": "f3c85fc8e436069633e0082cb3de060a2ff8db46" }, { "date": "Thu, 03 Mar 2022 18:52:55 GMT", "id": "4b4ba391d5ab114f2a4f06fabb307be86bf65eeb" }, { "date": "Mon, 28 Mar 2022 01:10:10 GMT", "id": "f2fdce105c82fb6b860309d0f0d49d65b3a24979" } ], "v8": [] } }, { "cve": "CVE-2022-0973", "date": "Tue, 15 Feb 2022 00:00:00 GMT", "description": "Use after free in Safe Browsing. Reported by avaue and Buff3tts at S.S.L.", "issue_id": 1297498, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 08 Mar 2022 04:30:28 GMT", "id": "906da494a320cd54e56004fdb496648deb4e3ce6" }, { "date": "Wed, 23 Feb 2022 05:06:54 GMT", "id": "43bd823074abd33f430bbb94448107910680d85a" }, { "date": "Sat, 05 Mar 2022 00:35:12 GMT", "id": "99c2812f32825223c4f3f362296f1e1b85acaf8e" }, { "date": "Tue, 08 Mar 2022 06:03:58 GMT", "id": "d987062f10146d85be4e4ca6658a3e747f84c253" } ], "v8": [] } }, { "cve": "CVE-2022-1498", "date": "Mon, 14 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in HTML Parser. Reported by SeungJu Oh (@real_as3617)", "issue_id": 1297138, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$500", "severity": "Low", "commit": { "chromium": [ { "date": "Wed, 16 Mar 2022 07:38:59 GMT", "id": "f96e7cfcff0c8a75b314b05382c53bbf92c0bf4e" } ], "v8": [] } }, { "cve": "CVE-2022-0976", "date": "Sun, 13 Feb 2022 00:00:00 GMT", "description": "Heap buffer overflow in GPU. Reported by Omair", "issue_id": 1296866, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Sat, 02 Apr 2022 21:46:04 GMT", "id": "b2f7e89dcec58c0376af82d96688ab0c6f4173a1" }, { "date": "Mon, 04 Apr 2022 19:59:59 GMT", "id": "ce458109a6a93e8a085baff7e6af189b51aa9123" }, { "date": "Tue, 12 Apr 2022 10:12:16 GMT", "id": "15aaa5a53faa8d7d0378452d152915a8e7984b7e" }, { "date": "Fri, 04 Mar 2022 01:10:18 GMT", "id": "9a2188ee5238f9e9d4ddb8d0983179d55d544e54" } ], "v8": [] } }, { "cve": "CVE-2022-0609", "date": "Thu, 10 Feb 2022 06:30:28 GMT", "description": "Use after free in Animation. Reported by Adam Weidemann and Cl\u00e9ment Lecigne of Google's Threat Analysis Group", "issue_id": 1296150, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 18 Feb 2022 20:28:27 GMT", "id": "ae61862752353103f4b7f4d21ca7e948dd6c35eb" }, { "date": "Wed, 16 Feb 2022 19:25:28 GMT", "id": "5fe0a966e36174a933334d89fd0be003502c90d4" } ], "v8": [] } }, { "cve": "CVE-2022-0796", "date": "Wed, 09 Feb 2022 10:32:10 GMT", "description": "Use after free in Media. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1295786, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 24 Feb 2022 17:39:53 GMT", "id": "6b2643846ae3a2ea925a0d3d0773bbf5c9565917" }, { "date": "Mon, 14 Feb 2022 21:00:35 GMT", "id": "34526c3d0a857a22618e4d77c7f63b5ca6f8d3d2" }, { "date": "Wed, 23 Feb 2022 01:48:56 GMT", "id": "ae144d56941a36e2c4e40a58c3fc508a4566a283" }, { "date": "Wed, 23 Feb 2022 01:34:20 GMT", "id": "5ee033bd9c6f7fb73c0c3af2ef6cad52855f8f28" } ], "v8": [] } }, { "cve": "CVE-2022-0975", "date": "Wed, 09 Feb 2022 00:00:00 GMT", "description": "Use after free in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1295411, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 04 Mar 2022 14:34:30 GMT", "id": "91d805fceaf561052f3c943ff7f51fc057639138" } ], "v8": [] } }, { "cve": "CVE-2022-0794", "date": "Thu, 03 Feb 2022 19:31:47 GMT", "description": "Use after free in WebShare. Reported by Khalil Zhani", "issue_id": 1294097, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 24 Feb 2022 15:44:53 GMT", "id": "8649511cc77ce6dbe6194480e4afd10eab4a127c" }, { "date": "Tue, 22 Feb 2022 18:18:12 GMT", "id": "e30c255bcafdeb25ec1f634dba8540c8e93db5df" }, { "date": "Tue, 22 Feb 2022 17:56:05 GMT", "id": "a9824a8bff47b9699bf2df1d59cf30d1ef3b9201" }, { "date": "Wed, 09 Feb 2022 21:33:14 GMT", "id": "2d9e826b165b03da422727cc0905b05780b1a66d" } ], "v8": [] } }, { "cve": "CVE-2022-0809", "date": "Thu, 03 Feb 2022 00:00:00 GMT", "description": "Out of bounds memory access in WebXR. Reported by @uwu7586", "issue_id": 1293428, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 03 Feb 2022 23:20:40 GMT", "id": "7f575ab43a8ac1d9a98feb9e4261e5f22265bdb9" }, { "date": "Tue, 08 Feb 2022 01:58:21 GMT", "id": "42ce14e6e9cb70fae7a92a97f020b3d76d176505" } ], "v8": [] } }, { "cve": "CVE-2022-1501", "date": "Wed, 02 Feb 2022 00:00:00 GMT", "description": "Inappropriate implementation in iframe. Reported by Oriol Brufau", "issue_id": 1293191, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "Low", "commit": { "chromium": [ { "date": "Fri, 18 Feb 2022 18:05:48 GMT", "id": "a486ffcc6d5ecf0d9827d6468ece0eae4306eb50" } ], "v8": [] } }, { "cve": "CVE-2022-1863", "date": "Tue, 01 Feb 2022 00:00:00 GMT", "description": "Use after free in Tab Groups. Reported by David Erceg", "issue_id": 1292870, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 21 Mar 2022 19:17:17 GMT", "id": "77119fc2859decac2584ff7284090cd00d8e51ea" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 31 Jan 2022 08:48:57 GMT", "description": "internal security issue", "issue_id": 1292537, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 07 Feb 2022 23:55:49 GMT", "id": "2e3a388c2f82a890fdd38a175214b649f60468cf" } ], "v8": [] } }, { "cve": "CVE-2022-1866", "date": "Sat, 29 Jan 2022 00:00:00 GMT", "description": "Use after free in Tablet Mode. Reported by @ginggilBesel", "issue_id": 1292264, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 24 Mar 2022 19:25:20 GMT", "id": "d2fdb99a2b5d87c75fef69968d4d477cbd66ebd9" } ], "v8": [] } }, { "cve": "CVE-2022-1125", "date": "Sat, 29 Jan 2022 00:00:00 GMT", "description": "Use after free in Portals. Reported by Khalil Zhani", "issue_id": 1292261, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 25 Feb 2022 18:28:35 GMT", "id": "2f06825c8a968f2c9b0e1391cfa9f4eef984f261" }, { "date": "Mon, 07 Mar 2022 20:12:02 GMT", "id": "327b900d80bdb717d697cc0766b88bdfe230a1e8" }, { "date": "Thu, 07 Apr 2022 17:15:05 GMT", "id": "591d198d2e38e017bcde793deb87c2e694cf282a" } ], "v8": [] } }, { "cve": "CVE-2022-0808", "date": "Fri, 28 Jan 2022 23:57:31 GMT", "description": "Use after free in Chrome OS Shell. Reported by @ginggilBesel", "issue_id": 1292271, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 15 Feb 2022 21:03:09 GMT", "id": "b9793da9aa03f0e99bd4d7de3c25639931c3bb4c" }, { "date": "Fri, 18 Feb 2022 18:54:58 GMT", "id": "6036b79972a3de67737f5b5195d7951fe2ae01bb" }, { "date": "Tue, 15 Feb 2022 20:55:48 GMT", "id": "47d058ed961166bc1e5bd4c9dd74598cf215a202" }, { "date": "Mon, 14 Feb 2022 21:17:20 GMT", "id": "5a2a306942bc7e794ec147f685f5eb44e3746111" } ], "v8": [] } }, { "cve": "CVE-2022-1127", "date": "Fri, 28 Jan 2022 00:00:00 GMT", "description": "Use after free in QR Code Generator. Reported by anonymous", "issue_id": 1291891, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 28 Feb 2022 23:54:13 GMT", "id": "78be1c5b4615d380d1353df0d46d95068e848b18" }, { "date": "Thu, 24 Feb 2022 19:40:19 GMT", "id": "7a9d15519436b530d3fd219b53741be8530d2217" } ], "v8": [] } }, { "cve": "CVE-2022-0974", "date": "Fri, 28 Jan 2022 00:00:00 GMT", "description": "Use after free in Splitscreen. Reported by @ginggilBesel", "issue_id": 1291986, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 23 Feb 2022 19:25:05 GMT", "id": "b35a7847d73d0e0631229506095b817db25cf40a" }, { "date": "Fri, 04 Mar 2022 20:11:24 GMT", "id": "106b06e760b2c41af6d89a3f7e9634db72776f6c" }, { "date": "Fri, 25 Feb 2022 05:01:08 GMT", "id": "137f63c76b518c5e4bb81bfbd3b285cd4431527f" }, { "date": "Fri, 04 Mar 2022 20:41:45 GMT", "id": "dea3b599a82630f9535698d97187907462090676" }, { "date": "Mon, 28 Feb 2022 21:08:15 GMT", "id": "81faaaaf4f0efc219164933a5cce0c9a1820f25b" }, { "date": "Thu, 17 Mar 2022 11:30:41 GMT", "id": "ee261b6eb59a6d1498233e7c418678a204ea05dd" }, { "date": "Mon, 28 Feb 2022 21:22:24 GMT", "id": "f66d0f81d2f08b751b9784ca403172a2f9ab34c3" } ], "v8": [] } }, { "cve": "CVE-2022-0793", "date": "Thu, 27 Jan 2022 14:51:35 GMT", "description": "Use after free in Views. Reported by Thomas Orlita", "issue_id": 1291728, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 31 Jan 2022 23:58:23 GMT", "id": "4535fe2334d0713535adb52b641a8cb34e11333c" }, { "date": "Thu, 17 Feb 2022 16:23:29 GMT", "id": "1887414c016d19e48e18ac998684f7b2f90d8898" }, { "date": "Wed, 02 Feb 2022 18:57:48 GMT", "id": "d636ddca68f281417383bf26f7a2e6a35369c865" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 26 Jan 2022 23:46:04 GMT", "description": "internal security issue", "issue_id": 1291482, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 04 Feb 2022 10:16:05 GMT", "id": "4d26949260aa9961ee5f3154b6290e1e72495063" } ], "v8": [] } }, { "cve": "CVE-2022-0805", "date": "Mon, 24 Jan 2022 22:40:35 GMT", "description": "Use after free in Browser Switcher. Reported by raven at KunLun Lab", "issue_id": 1290700, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 22 Feb 2022 16:54:35 GMT", "id": "9c0616145e98f318bf886bee49a6fa75962c7bd6" }, { "date": "Thu, 10 Feb 2022 12:18:43 GMT", "id": "ce87670f70a41beb1a2293582fd5dde70f0092a2" } ], "v8": [] } }, { "cve": "CVE-2022-1146", "date": "Sun, 23 Jan 2022 07:59:22 GMT", "description": "Inappropriate implementation in Resource Timing. Reported by Sohom Datta", "issue_id": 1290150, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Fri, 11 Feb 2022 14:11:29 GMT", "id": "e96b9f57d8d9e32bf9cb748524735d7903271755" } ], "v8": [] } }, { "cve": "CVE-2022-0603", "date": "Sat, 22 Jan 2022 03:21:42 GMT", "description": "Use after free in File Manager. Reported by Chaoyuan Peng (@ret2happy)", "issue_id": 1290008, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 31 Jan 2022 05:15:24 GMT", "id": "0a4ede6c430df907937e910d0abd532d2a6c0e77" }, { "date": "Tue, 01 Feb 2022 00:53:47 GMT", "id": "0772f9d48f1211a8d32aac0c55d84d2159f6c70b" }, { "date": "Thu, 03 Feb 2022 12:22:50 GMT", "id": "516dfe32ba33fe61f410d3f75580109e27a26e15" }, { "date": "Mon, 31 Jan 2022 10:30:54 GMT", "id": "12172c1da521c9ff6faff8df5c6a512cb583eba1" }, { "date": "Tue, 01 Feb 2022 04:27:03 GMT", "id": "f32d3413b24bdce6605316c066b2225753f3b7de" } ], "v8": [] } }, { "cve": "CVE-2022-1137", "date": "Fri, 21 Jan 2022 14:36:30 GMT", "description": "Inappropriate implementation in Extensions. Reported by Thomas Orlita ", "issue_id": 1289846, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 27 Jan 2022 17:38:57 GMT", "id": "6f1205eddca62b071cc2ca2ed5d82d7fc1b5a89b" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 21 Jan 2022 06:50:16 GMT", "description": "internal security issue", "issue_id": 1289678, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Wed, 26 Jan 2022 12:55:41 GMT", "id": "37986368d573cc454e8e5c2cada26bfc1efc2f6a" }, { "date": "Mon, 24 Jan 2022 11:27:35 GMT", "id": "8628ec4d83a244384d2d45660c465410bcc62ffc" } ] } }, { "cve": "CVE-2022-0456", "date": "Thu, 20 Jan 2022 22:06:47 GMT", "description": "Use after free in Web Search. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1289523, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 04 Feb 2022 12:21:07 GMT", "id": "77982678b1b4fb97b4bc2c3f75edcbbec4a282a7" }, { "date": "Wed, 26 Jan 2022 00:40:15 GMT", "id": "5b60f6559fee6a01a5d8a3ffd644369dc646ed88" }, { "date": "Thu, 27 Jan 2022 22:41:04 GMT", "id": "75d5730e0f71e85595580fcc0d83723e21878769" }, { "date": "Fri, 21 Jan 2022 23:15:42 GMT", "id": "65080d25a92a1a4fb45d052277702ae2aac19be4" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 20 Jan 2022 13:57:38 GMT", "description": "internal security issue", "issue_id": 1289394, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 10 Feb 2022 23:38:35 GMT", "id": "76a47a19862b986a9b01010cbc44dd0ac8b4e3b3" }, { "date": "Tue, 08 Feb 2022 19:12:53 GMT", "id": "3fdf2adf11b3c716c9015597d30b59bffc7ac91b" }, { "date": "Thu, 10 Feb 2022 22:18:54 GMT", "id": "05e714a87c289900cf19dc7e41f38af05a5644a9" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 20 Jan 2022 13:44:06 GMT", "description": "internal security issue", "issue_id": 1289384, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 17 Feb 2022 22:19:20 GMT", "id": "5c33e7cb8fccd6bb9b067bbd03a1ec45b7170b80" }, { "date": "Tue, 25 Jan 2022 16:17:32 GMT", "id": "c8231f9a89460fd8336e6c0d8e10347f52f540ec" }, { "date": "Thu, 27 Jan 2022 00:00:23 GMT", "id": "b27ef06479ad06659324d11da6f616c75ef11ff3" }, { "date": "Tue, 08 Feb 2022 15:58:40 GMT", "id": "11505c38673339746e492d6c82879d86c009f420" } ], "v8": [] } }, { "cve": "CVE-2022-0789", "date": "Thu, 20 Jan 2022 13:43:36 GMT", "description": "Heap buffer overflow in ANGLE. Reported by SeongHwan Park (SeHwa)", "issue_id": 1289383, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 27 Jan 2022 04:36:15 GMT", "id": "fe5811a1e4ca6e7dc226adea186f7e67b53fabe5" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 20 Jan 2022 13:32:33 GMT", "description": "internal security issue", "issue_id": 1289378, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 24 Jan 2022 18:08:22 GMT", "id": "292311bffe05f714e202223067487a903971a2a7" }, { "date": "Tue, 25 Jan 2022 22:49:21 GMT", "id": "d426f96b84b1c8ef2bd47d7637fd42e47ac16b36" } ], "v8": [] } }, { "cve": "CVE-2022-1865", "date": "Thu, 20 Jan 2022 00:00:00 GMT", "description": "Use after free in Bookmarks. Reported by Rong Jian of VRI", "issue_id": 1289192, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 06 Apr 2022 18:34:21 GMT", "id": "29459d6d51286e9d972964abe069a43334919ad6" }, { "date": "Thu, 26 May 2022 15:28:36 GMT", "id": "39acb79d6d841514ac4b19358106bb170ce42a47" } ], "v8": [] } }, { "cve": "CVE-2022-0606", "date": "Mon, 17 Jan 2022 06:45:57 GMT", "description": "Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1288020, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Feb 2022 02:15:22 GMT", "id": "7aa53b8bf162e8ce84a705c533af9039efa4ea6e" } ], "v8": [] } }, { "cve": "CVE-2022-0454", "date": "Mon, 17 Jan 2022 02:24:11 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Seong-Hwan Park (SeHwa)", "issue_id": 1287962, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$12000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 17 Jan 2022 22:20:32 GMT", "id": "f322782a9a8cb5b30737a73aea9b7be20e3cdc9c" } ], "v8": [] } }, { "cve": "CVE-2022-0807", "date": "Thu, 13 Jan 2022 21:25:38 GMT", "description": "Inappropriate implementation in Autofill. Reported by Alesandro Ortiz", "issue_id": 1287364, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 18 Jan 2022 20:02:21 GMT", "id": "403ebfda330f64d2cb0e102d215f32f15df449a0" } ], "v8": [] } }, { "cve": "CVE-2022-0605", "date": "Wed, 12 Jan 2022 16:40:44 GMT", "description": "Use after free in Webstore API. Reported by Thomas Orlita\u00a0", "issue_id": 1286940, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 01 Feb 2022 20:32:17 GMT", "id": "3da687e35069ff2ec44af3140923359ecb67005c" }, { "date": "Thu, 17 Feb 2022 12:08:22 GMT", "id": "17abdb65f470f7d150e1abd79d0812121e7095a8" }, { "date": "Fri, 11 Feb 2022 20:04:44 GMT", "id": "92513389e86c68a162574a74c55c0cf34cbab073" }, { "date": "Tue, 15 Feb 2022 18:27:21 GMT", "id": "8bccbf86d76c1ff282248c9f2e0c3092267a1f9b" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 12 Jan 2022 10:31:35 GMT", "description": "internal security issue", "issue_id": 1286816, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 21 Jan 2022 00:01:43 GMT", "id": "a1dc371d6680c19f978ea6c20f3ef8c70d2bad59" } ], "v8": [] } }, { "cve": "CVE-2022-0792", "date": "Mon, 10 Jan 2022 08:41:17 GMT", "description": "Out of bounds read in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1285885, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 25 Jan 2022 20:04:11 GMT", "id": "79d1d335f7adaa4cedcd333b30395648d525a1ff" } ], "v8": [] } }, { "cve": "CVE-2022-1135", "date": "Sat, 08 Jan 2022 08:11:44 GMT", "description": "Use after free in Shopping Cart. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1285601, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$16000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 01 Feb 2022 18:05:45 GMT", "id": "5b399d63e31334d6d61125f039907a0c5d358a50" } ], "v8": [] } }, { "cve": "CVE-2022-0610", "date": "Sat, 08 Jan 2022 00:00:00 GMT", "description": "Inappropriate implementation in Gamepad API. Reported by Anonymous", "issue_id": 1285449, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 17 Feb 2022 22:28:39 GMT", "id": "e55fd3a74f56fb661252b57f3712e54ff2f90311" }, { "date": "Fri, 11 Feb 2022 01:12:14 GMT", "id": "2b50ef7c7803ba1ba9ccb87bb5521df623b4bb39" }, { "date": "Wed, 19 Jan 2022 21:03:08 GMT", "id": "0081bb347e67f820f3b23ee8e45a7dce24e46d11" } ], "v8": [] } }, { "cve": "CVE-2022-1305", "date": "Fri, 07 Jan 2022 00:00:00 GMT", "description": "Use after free in storage. Reported by Anonymous", "issue_id": 1285234, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$6000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 29 Mar 2022 23:12:33 GMT", "id": "7187b41cd6201840c8c66f6ccb88c5907c5f11bc" }, { "date": "Tue, 05 Apr 2022 20:09:23 GMT", "id": "5cb934a23ddfccb7ce7ace36b5f0ec5036281e0f" }, { "date": "Mon, 28 Mar 2022 20:12:14 GMT", "id": "7222e9825fc02acc962e005c59885ee2f26df185" } ], "v8": [] } }, { "cve": "CVE-2022-0453", "date": "Thu, 06 Jan 2022 03:00:48 GMT", "description": "Use after free in Reader Mode. Reported by Rong Jian of VRI", "issue_id": 1284916, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 18 Jan 2022 19:03:59 GMT", "id": "ee3c9dfc50f9330c8205cd7eff97dd18774573c3" }, { "date": "Mon, 24 Jan 2022 17:34:23 GMT", "id": "32ddaf46fc3e232c360f691f01c9165c9a206fe4" }, { "date": "Mon, 07 Feb 2022 18:13:19 GMT", "id": "917f042f6707fac7c578254584689a62feaa695b" } ], "v8": [] } }, { "cve": "CVE-2022-0452", "date": "Wed, 05 Jan 2022 04:08:17 GMT", "description": "Use after free in Safe Browsing. Reported by avaue at S.S.L.", "issue_id": 1284584, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Sat, 22 Jan 2022 03:23:36 GMT", "id": "524b01441d1acbca385df54d82720fccbd48f168" }, { "date": "Fri, 14 Jan 2022 01:35:00 GMT", "id": "1d9300c6ec561931739e5e756a15b81c0e775139" }, { "date": "Mon, 21 Feb 2022 15:18:50 GMT", "id": "5491d2bacedc0eae10318b57675a1e98e230fb68" } ], "v8": [] } }, { "cve": "CVE-2022-0289", "date": "Tue, 04 Jan 2022 09:56:09 GMT", "description": "Use after free in Safe browsing. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1284367, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 02:50:37 GMT", "id": "3166b688a51b35859d6a1277ff10d9ae64e04bb0" }, { "date": "Thu, 06 Jan 2022 08:36:45 GMT", "id": "2481bf37971a89c20e033379e08d252345dd491c" }, { "date": "Wed, 12 Jan 2022 03:05:52 GMT", "id": "b9929424c37083c3056e54c142e19bbcc929480f" }, { "date": "Tue, 29 Mar 2022 16:40:38 GMT", "id": "99c840474019de6e09dbe895775199f46e3d688e" }, { "date": "Wed, 12 Jan 2022 02:50:21 GMT", "id": "51608cbd629d661789397eb66c893e21fd0ac539" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1262967, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 03 Nov 2021 03:53:27 GMT", "id": "a1c1ec1ea9ac607180114a1d16d69733f7ff5518" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1262516, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 10 Nov 2021 10:42:28 GMT", "id": "08bea375f416465a4993f23dd8edb01939eb1160" }, { "date": "Thu, 04 Nov 2021 05:25:10 GMT", "id": "083a287382f644db9bb9f961139f2c1a0c7aeb01" }, { "date": "Wed, 01 Dec 2021 12:32:24 GMT", "id": "6f1d21c6cc73362b78add06753c750d964cbf31b" }, { "date": "Wed, 01 Dec 2021 10:52:58 GMT", "id": "34eee206712bf33d19dba2b7627234b2106e7db7" }, { "date": "Wed, 24 Nov 2021 06:56:31 GMT", "id": "fd228f5c7d2683448bcd6a5dcb3e52e645890cc5" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1155297, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 13 Dec 2021 21:31:34 GMT", "id": "4ea822925bbc6a6e508820e236a6a46efee78040" }, { "date": "Wed, 09 Jun 2021 12:44:16 GMT", "id": "a70e32b72c5f0363f5167ebd315aad0f4ea1bbfb" }, { "date": "Tue, 20 Apr 2021 17:08:53 GMT", "id": "8f054c5df245cd455cc79e554937fd96b3ae3c57" }, { "date": "Fri, 16 Apr 2021 03:49:10 GMT", "id": "c2f6803bddd31f733a91349cbf777db4b9c30cbc" }, { "date": "Thu, 15 Apr 2021 20:01:17 GMT", "id": "c768895b3f59b8d5de263f0699caeb659292cbef" }, { "date": "Tue, 07 Dec 2021 21:12:45 GMT", "id": "3fcc9061b26bc4ba1498f134ccdeaacaff8b3de5" }, { "date": "Mon, 13 Dec 2021 20:19:34 GMT", "id": "e2628c1ba9645d7e3323e6cabb02b357a6b66691" }, { "date": "Tue, 30 Mar 2021 02:14:37 GMT", "id": "b7758233216445264174dd249e7565ab4849daa6" }, { "date": "Fri, 09 Apr 2021 22:21:36 GMT", "id": "87191386a072fbb4b93c34e445d94520c7370237" }, { "date": "Thu, 15 Apr 2021 23:11:30 GMT", "id": "58393127e7099790ed45b1602d1e31bfae711024" }, { "date": "Mon, 28 Jun 2021 17:50:36 GMT", "id": "8918131525c4c8b438cf593535172ef327b463f9" }, { "date": "Tue, 20 Apr 2021 16:32:33 GMT", "id": "de1dbdb608a30978e04f2fa2a636305120678d10" }, { "date": "Tue, 02 Mar 2021 18:56:58 GMT", "id": "6fc89cf82608ba8fe14aee16c36d0de60b2a375d" }, { "date": "Wed, 07 Apr 2021 15:24:33 GMT", "id": "3e3e3cf7036d7e33a4d68b8416ae25730f9eee1d" }, { "date": "Fri, 09 Apr 2021 21:18:10 GMT", "id": "5f47666b79ac7ded20e1c7657037498561bd3352" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 04 Jan 2022 00:00:00 GMT", "description": "internal security issue", "issue_id": 1260869, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 25 Oct 2021 21:10:55 GMT", "id": "efdfe711dc5f112b6dedd15311c65dcd171363d7" }, { "date": "Wed, 27 Oct 2021 21:23:10 GMT", "id": "629e74007540e540cd54b1713729e265708025bc" } ], "v8": [] } }, { "cve": "CVE-2022-0311", "date": "Sun, 02 Jan 2022 15:19:53 GMT", "description": "Heap buffer overflow in Task Manager. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1283807, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 07 Jan 2022 02:27:29 GMT", "id": "cc6c21a0f3ab8a0d066b85dcfc5638de41a935cd" }, { "date": "Thu, 13 Jan 2022 19:49:22 GMT", "id": "77f141ce750bb9a14e2c394165a15f3a3c6f3d1f" }, { "date": "Thu, 13 Jan 2022 17:37:04 GMT", "id": "78fb8233e30d54aa60da398030bc971b1dc03127" }, { "date": "Tue, 11 Jan 2022 21:55:01 GMT", "id": "d9bd6f7c0f6fad3f4a710cacde3fefa78b1d190b" } ], "v8": [] } }, { "cve": "CVE-2022-0806", "date": "Thu, 30 Dec 2021 08:27:26 GMT", "description": "Data leak in Canvas. Reported by Paril", "issue_id": 1283434, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 14 Jan 2022 15:26:55 GMT", "id": "eb967bf2110884ddde91aea6ba1696ae6b56f892" } ], "v8": [] } }, { "cve": "CVE-2022-0798", "date": "Thu, 30 Dec 2021 04:04:03 GMT", "description": "Use after free in MediaStream. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1283402, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$15000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 18 Feb 2022 13:52:01 GMT", "id": "246c10dede97d21787c0ce57fa3032f6470954b3" }, { "date": "Fri, 28 Jan 2022 12:37:20 GMT", "id": "cb6778fb965e2b010922f157c68480de863c252e" } ], "v8": [] } }, { "cve": "CVE-2022-0296", "date": "Thu, 30 Dec 2021 01:57:23 GMT", "description": "Use after free in Printing. Reported by koocola(@alo_cook) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1283375, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 13 Jan 2022 02:32:03 GMT", "id": "047cc012ad2ced8d329ae8a3ead87a0b1b1ab0b9" }, { "date": "Thu, 13 Jan 2022 00:05:12 GMT", "id": "0387bda627b87c47e8d7d331fec7967b8dd59eca" }, { "date": "Tue, 11 Jan 2022 02:43:07 GMT", "id": "3ae14a78d724336edc0ad91858e38147523f68cf" }, { "date": "Fri, 07 Jan 2022 09:38:01 GMT", "id": "725a30e54d89e62744a78e019f49b0928d4d8230" } ], "v8": [] } }, { "cve": "CVE-2022-0293", "date": "Thu, 30 Dec 2021 01:28:13 GMT", "description": "Use after free in Web packaging. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1283371, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 13 Jan 2022 04:52:23 GMT", "id": "a1f95e4f705d6718fce869eaa9a0879dfd09ef89" }, { "date": "Thu, 13 Jan 2022 02:39:02 GMT", "id": "b70c72fb95dab9d262f37477a7657e7642f16849" }, { "date": "Mon, 10 Jan 2022 19:38:51 GMT", "id": "940e7df2de6847400f26f59080f4f2ed66535e00" }, { "date": "Thu, 06 Jan 2022 01:21:21 GMT", "id": "223e1a1752f3513c4b250bc6b8246256febfe121" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 29 Dec 2021 12:09:20 GMT", "description": "internal security issue", "issue_id": 1283255, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 30 Dec 2021 22:31:54 GMT", "id": "15623362a86aa0329281c210f5442c600efd0bc8" } ], "v8": [] } }, { "cve": "CVE-2022-0306", "date": "Wed, 29 Dec 2021 04:35:13 GMT", "description": "Heap buffer overflow in PDFium. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1283198, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 05:51:17 GMT", "id": "a86cf734253725630faa47b53ad409c4f86d2505" }, { "date": "Tue, 11 Jan 2022 03:23:19 GMT", "id": "e90077887b7be746e96af18af0872bcc420f565e" }, { "date": "Thu, 30 Dec 2021 05:08:29 GMT", "id": "ac024e185d9b6cd3dd76e265441392d60b69b8ac" }, { "date": "Tue, 04 Jan 2022 20:29:42 GMT", "id": "bebc6cfb983ff110b940c05964f8bef008514457" } ], "v8": [] } }, { "cve": "CVE-2022-1308", "date": "Tue, 28 Dec 2021 00:00:00 GMT", "description": "Use after free in BFCache. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1283050, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 07 Apr 2022 05:44:20 GMT", "id": "80e8d7dbedced3e83a5a754aab69e89c9518ad9f" }, { "date": "Thu, 07 Apr 2022 02:16:11 GMT", "id": "57bdd90d8c81168e8f055e5663967854068b7f05" }, { "date": "Tue, 19 Apr 2022 15:25:29 GMT", "id": "38ab9c5b06a472fcb5105458b2b4037749c50766" }, { "date": "Tue, 19 Apr 2022 14:25:57 GMT", "id": "fc6dc3985f265602269e60c10916532140eb8a4f" }, { "date": "Tue, 19 Apr 2022 16:17:20 GMT", "id": "7728c580999231f9f8b3202179a293a6b6b65f35" }, { "date": "Tue, 29 Mar 2022 08:10:17 GMT", "id": "a69d2ffadf8420b2625c3337be34905c6c6f88ab" } ], "v8": [] } }, { "cve": "CVE-2022-0795", "date": "Sun, 26 Dec 2021 08:16:55 GMT", "description": "Type Confusion in Blink Layout. Reported by 0x74960", "issue_id": 1282782, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 06 Jan 2022 17:23:22 GMT", "id": "809b8358c1c2ba4971990e56b728203b36298bf2" } ], "v8": [] } }, { "cve": "CVE-2022-0308", "date": "Thu, 23 Dec 2021 09:14:14 GMT", "description": "Use after free in Data Transfer. Reported by @ginggilBesel", "issue_id": 1282480, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 03 Feb 2022 13:48:34 GMT", "id": "e99e3f53f256e21eb27f29f1ef5797b62df61eb3" }, { "date": "Fri, 14 Jan 2022 17:44:02 GMT", "id": "c62bf887c748a759415574a947245bc05d83a51d" }, { "date": "Fri, 14 Jan 2022 17:58:51 GMT", "id": "3bff590804859f2c65a2ef0ff4d84f46ee4bce01" }, { "date": "Tue, 11 Jan 2022 21:15:56 GMT", "id": "0a71010677563e51b14acba2c2c11fa2319b27b1" }, { "date": "Fri, 07 Jan 2022 21:47:25 GMT", "id": "1f5969495575d819dcf44a7d94d2e0f1bb4b1d71" } ], "v8": [] } }, { "cve": "CVE-2022-0305", "date": "Thu, 23 Dec 2021 00:00:00 GMT", "description": "Inappropriate implementation in Service Worker API. Reported by @uwu7586", "issue_id": 1282354, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 00:33:53 GMT", "id": "63bd2fd5c8e374dc08c94d960e6118001b8530d0" }, { "date": "Tue, 18 Jan 2022 17:20:31 GMT", "id": "90cec52fb4352d8946bd159007f45b918c1a8906" }, { "date": "Fri, 14 Jan 2022 18:54:00 GMT", "id": "8e5ac793d34e7d8b099159c381821afc4e74d026" }, { "date": "Fri, 14 Jan 2022 21:56:46 GMT", "id": "78cf343a785a70d3ee240b3af1fe12a6272cc63e" } ], "v8": [] } }, { "cve": "CVE-2022-0304", "date": "Wed, 22 Dec 2021 01:21:08 GMT", "description": "Use after free in Bookmarks. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1282118, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 14 Jan 2022 20:10:51 GMT", "id": "9109a3aa18a637f5ecb11abe81654415e8523ac8" }, { "date": "Fri, 14 Jan 2022 20:11:36 GMT", "id": "08d44f95a8a08ce0e702324589fab34ea7ebd581" }, { "date": "Mon, 10 Jan 2022 20:32:48 GMT", "id": "5eaba7cca73cbb6743cc76c7bf1e5935d94110cc" }, { "date": "Fri, 14 Jan 2022 20:07:41 GMT", "id": "2fa5a30cbee60a79a8f64fa054c31447c568071c" } ], "v8": [] } }, { "cve": "CVE-2022-0465", "date": "Tue, 21 Dec 2021 09:43:10 GMT", "description": "Use after free in Extensions. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1281941, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 07 Feb 2022 15:51:31 GMT", "id": "50859367448970d8c75685d2f5a333b6878de00d" }, { "date": "Tue, 25 Jan 2022 17:32:09 GMT", "id": "7150f9edf134a1dea4d6a0e09b9213d7e9550356" }, { "date": "Fri, 07 Jan 2022 22:05:01 GMT", "id": "5c6992807466506b4d4215465b07077984a4165e" } ], "v8": [] } }, { "cve": "CVE-2022-0797", "date": "Tue, 21 Dec 2021 07:30:46 GMT", "description": "Out of bounds memory access in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1281908, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 24 Feb 2022 15:13:13 GMT", "id": "62142d222a80b14827ebc9317c7a3300a8af4259" }, { "date": "Tue, 15 Feb 2022 16:48:02 GMT", "id": "8d5bc69146505785ce299c490e35e3f3ef19f69c" }, { "date": "Tue, 22 Feb 2022 20:24:06 GMT", "id": "9247f3b959d638d15ee121581a29cf1a21332a77" }, { "date": "Tue, 22 Feb 2022 20:30:20 GMT", "id": "e558401fbf697d18476e9d64ee3eb193beaf5b44" } ], "v8": [] } }, { "cve": "CVE-2022-0307", "date": "Tue, 21 Dec 2021 05:48:28 GMT", "description": "Use after free in Optimization Guide. Reported by Samet Bekmezci @sametbekmezci", "issue_id": 1281881, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 05:43:17 GMT", "id": "6f5ef89dc45d9fcd3e1b47292212dc8ca7bd35ae" }, { "date": "Tue, 11 Jan 2022 05:35:58 GMT", "id": "fe0d886f433dae78b715ab101e0661938ed2ea69" }, { "date": "Tue, 04 Jan 2022 18:32:04 GMT", "id": "b7e4b8abcb25502c1a43c4f51ffacb01d3d2dae1" }, { "date": "Tue, 21 Dec 2021 19:20:24 GMT", "id": "5163b969bc7a846044df54311f6b217c3bed3718" } ], "v8": [] } }, { "cve": "CVE-2022-0291", "date": "Sun, 19 Dec 2021 00:00:00 GMT", "description": "Inappropriate implementation in Storage. Reported by Anonymous", "issue_id": 1281084, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 07 Jan 2022 09:39:46 GMT", "id": "2eb7fa85cc36271d2f9dd77047591b0b5d3d35ee" }, { "date": "Mon, 20 Dec 2021 21:43:14 GMT", "id": "0fa630e347c4910325210e903825e5c74ab1f6cb" }, { "date": "Fri, 07 Jan 2022 21:02:39 GMT", "id": "c349386033e236faad3b0d99a5cc60a62cde43f3" }, { "date": "Fri, 07 Jan 2022 08:00:05 GMT", "id": "f7bfc2c33d6ac4a0442786cec2b4ce2955871bfb" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 16 Dec 2021 22:05:59 GMT", "description": "internal security issue", "issue_id": 1280852, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 15 Feb 2022 19:26:20 GMT", "id": "0fb95f3a8485d8cf9c77ab17932109810aad84a1" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 16 Dec 2021 12:42:37 GMT", "description": "internal security issue", "issue_id": 1280743, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Sat, 18 Dec 2021 09:39:07 GMT", "id": "936e34bfe63921167930a07bfc6f798adfbbd6e1" } ], "v8": [] } }, { "cve": "CVE-2022-0803", "date": "Wed, 15 Dec 2021 04:24:20 GMT", "description": "Inappropriate implementation in Permissions. Reported by Abdulla Aldoseri", "issue_id": 1280233, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 18 Feb 2022 07:48:33 GMT", "id": "8bfb46438804357f5b914ee8bea6de5223a5ca71" }, { "date": "Tue, 25 Jan 2022 20:43:44 GMT", "id": "b13ddd23f2696a1a823ee13794cfdb3102d8e9f7" } ], "v8": [] } }, { "cve": "CVE-2022-1136", "date": "Wed, 15 Dec 2021 00:00:00 GMT", "description": "Use after free in Tab Strip . Reported by Krace", "issue_id": 1280205, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$7000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 17 Feb 2022 17:15:45 GMT", "id": "d90543a244cffcf5d267a720ed86a37f5edd5835" } ], "v8": [] } }, { "cve": "CVE-2022-0469", "date": "Mon, 13 Dec 2021 12:05:07 GMT", "description": "Use after free in Cast. Reported by Thomas Orlita", "issue_id": 1279531, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 11 Jan 2022 19:10:11 GMT", "id": "80115e61078db06074abb2cfc5472461afa56458" }, { "date": "Wed, 23 Feb 2022 07:59:42 GMT", "id": "784914619567207bbed6ce32a328ae36ea13a41f" }, { "date": "Wed, 05 Jan 2022 20:17:31 GMT", "id": "92e310df6d555b86d5b975d810b7a99c05cdffeb" } ], "v8": [] } }, { "cve": "CVE-2022-0799", "date": "Sun, 12 Dec 2021 04:48:25 GMT", "description": "Insufficient policy enforcement in Installer. Reported by Abdelhamid Naceri (halov)", "issue_id": 1279188, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 05 Jan 2022 14:21:41 GMT", "id": "368a755a8d2364742b65f1ae5dbafbd99532683f" } ], "v8": [] } }, { "cve": "none", "date": "Sat, 11 Dec 2021 18:56:03 GMT", "description": "internal security issue", "issue_id": 1279147, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 15 Dec 2021 17:57:40 GMT", "id": "997b23f2775752e0a81eecafbcbb293d0d6fbd78" } ], "v8": [] } }, { "cve": "CVE-2022-0106", "date": "Fri, 10 Dec 2021 15:41:14 GMT", "description": "Use after free in Autofill. Reported by Khalil Zhani", "issue_id": 1278960, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 16 Dec 2021 20:45:47 GMT", "id": "a465e42d95183ea523e7d7190a40224dcc818a86" }, { "date": "Tue, 28 Dec 2021 18:55:39 GMT", "id": "e89aed2a562e2cdf797fe6e4ed4f35e2cfb05215" }, { "date": "Mon, 20 Dec 2021 10:28:23 GMT", "id": "40edf82fdf87b74dca867ea668ef64a7c4d28b13" } ], "v8": [] } }, { "cve": "CVE-2022-0302", "date": "Thu, 09 Dec 2021 20:49:39 GMT", "description": "Use after free in Omnibox. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1278613, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 04 Jan 2022 21:14:42 GMT", "id": "ecf38d17dba552c9802d4580e49e635340d20b72" }, { "date": "Tue, 04 Jan 2022 22:52:35 GMT", "id": "bd367fdccc0f9d19989f0c02312c27c60511acd7" }, { "date": "Tue, 04 Jan 2022 23:38:07 GMT", "id": "a6e660f31604746d334f0b3312da1557a27554c3" }, { "date": "Wed, 15 Dec 2021 20:20:30 GMT", "id": "a3393ce39586558f74b4fd57495bfdd66a6b564b" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 09 Dec 2021 18:42:41 GMT", "description": "internal security issue", "issue_id": 1278589, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 13 Dec 2021 22:06:14 GMT", "id": "2a0ad74271619c8466a1db2a015066726ec9233c" }, { "date": "Mon, 13 Dec 2021 22:06:54 GMT", "id": "f668bbbbaa430bf341a3ee6a72820457cfaf2051" } ], "v8": [] } }, { "cve": "CVE-2022-0791", "date": "Thu, 09 Dec 2021 06:04:19 GMT", "description": "Use after free in Omnibox. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1278322, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 20 Jan 2022 18:33:14 GMT", "id": "24459ac6c72b2fd7c90f9e58bdbd6808c1a19be0" } ], "v8": [] } }, { "cve": "CVE-2021-4102", "date": "Thu, 09 Dec 2021 00:00:00 GMT", "description": "Use after free in V8. Reported by Anonymous", "issue_id": 1278387, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 10 Dec 2021 21:47:30 GMT", "id": "bc50756657604eafac3262283a00284081eed5fb" }, { "date": "Wed, 15 Dec 2021 10:42:08 GMT", "id": "418c276ef228163080a4aed7ea0f4bab3aeeb8a0" }, { "date": "Fri, 10 Dec 2021 21:47:46 GMT", "id": "f4f11c23ae2eaf9bb4525d0fac7ab842de9b0fe2" }, { "date": "Fri, 10 Dec 2021 16:35:50 GMT", "id": "51af8170aa83307f898343de499f6fe29e67ce2e" }, { "date": "Fri, 10 Dec 2021 21:44:14 GMT", "id": "1ec6d747227a365ddbda0228520603e44fa195c2" }, { "date": "Fri, 10 Dec 2021 15:36:42 GMT", "id": "4fae8b16802a416fe3aab0e7792fabe96cf1ecd8" } ] } }, { "cve": "CVE-2022-0295", "date": "Wed, 08 Dec 2021 18:52:05 GMT", "description": "Use after free in Omnibox. Reported by Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute", "issue_id": 1278180, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 04 Jan 2022 21:14:42 GMT", "id": "ecf38d17dba552c9802d4580e49e635340d20b72" }, { "date": "Tue, 04 Jan 2022 22:52:35 GMT", "id": "bd367fdccc0f9d19989f0c02312c27c60511acd7" }, { "date": "Tue, 04 Jan 2022 23:38:07 GMT", "id": "a6e660f31604746d334f0b3312da1557a27554c3" }, { "date": "Wed, 15 Dec 2021 20:20:30 GMT", "id": "a3393ce39586558f74b4fd57495bfdd66a6b564b" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 08 Dec 2021 03:39:52 GMT", "description": "internal security issue", "issue_id": 1277917, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 12 Jan 2022 18:20:42 GMT", "id": "7c9349137d79681c9264b749eba1d3d8f31eb6dc" }, { "date": "Tue, 11 Jan 2022 15:53:18 GMT", "id": "8d208183be46fd9419d02b6b6c63eafeed91871f" }, { "date": "Fri, 07 Jan 2022 20:00:37 GMT", "id": "5c461c47eb5a44db576fa87ebbd3ba0bdbb1736d" }, { "date": "Wed, 12 Jan 2022 18:50:12 GMT", "id": "2489b1106ef325b76561b8188f3856c93a92cf2d" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 06 Dec 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1271302, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 17:11:04 GMT", "id": "65e9b6f76ce1c0be94e4594268b87f8033eb4a99" }, { "date": "Tue, 23 Nov 2021 22:22:19 GMT", "id": "83d0ac0227ae5cefaee69affd0c174f677834248" }, { "date": "Thu, 02 Dec 2021 23:42:18 GMT", "id": "a68f82bb376fb4bb26baa78d573ddd097def9eb9" }, { "date": "Fri, 19 Nov 2021 02:34:36 GMT", "id": "1a0498917c56c7155010a309629304dc0bfc3676" }, { "date": "Tue, 30 Nov 2021 18:57:04 GMT", "id": "6a96dd2649b54867823343ee92d4e21988443ffa" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 06 Dec 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1262750, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Thu, 18 Nov 2021 10:02:56 GMT", "id": "c0756abf299199d6101c3d0b840274148bd5ce38" }, { "date": "Mon, 27 Dec 2021 11:16:39 GMT", "id": "b014d0ba9c907f101b4d3b57e87051f99d2e29d0" } ] } }, { "cve": "CVE-2022-0301", "date": "Fri, 03 Dec 2021 01:25:09 GMT", "description": "Heap buffer overflow in DevTools. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1276331, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 21 Feb 2022 12:59:21 GMT", "id": "8948a3646cb208b2f48e93226e56ad0f8df084ac" }, { "date": "Fri, 14 Jan 2022 06:03:52 GMT", "id": "1e49157f8e38eda42967aa817f5d7b8fbd734f39" }, { "date": "Thu, 13 Jan 2022 23:54:59 GMT", "id": "af938c7036f1384b26d82620fc4f1b06626b6836" }, { "date": "Tue, 21 Dec 2021 18:12:33 GMT", "id": "97fad0d96c874399a640f1a69b25e6e0d7bd95c6" } ], "v8": [] } }, { "cve": "CVE-2022-1493", "date": "Wed, 01 Dec 2021 00:00:00 GMT", "description": "Use after free in Dev Tools. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1275414, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 09 Mar 2022 09:20:01 GMT", "id": "8ef4631cac23a205c0d237c087dba82674f1ce6e" } ], "v8": [] } }, { "cve": "CVE-2022-0300", "date": "Tue, 30 Nov 2021 23:06:03 GMT", "description": "Use after free in Text Input Method Editor. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1275438, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 14 Dec 2021 18:10:36 GMT", "id": "9404000e28b0bf7a673cbb174daab050bcf90b50" }, { "date": "Wed, 12 Jan 2022 01:05:51 GMT", "id": "b93f953035beb268c853e071805f142da558171a" }, { "date": "Wed, 12 Jan 2022 01:03:32 GMT", "id": "c0bcbc25a68d127feddab13260ad498555b7514a" }, { "date": "Wed, 05 Jan 2022 20:35:14 GMT", "id": "5c21c2f5dc7b8fbd9ff8732952be932edf6e5c14" } ], "v8": [] } }, { "cve": "CVE-2022-0096", "date": "Tue, 30 Nov 2021 00:42:10 GMT", "description": "Use after free in Storage. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1275020, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 28 Dec 2021 22:46:20 GMT", "id": "e531a38cf5fd45997b5f60b1d4a3c58126996b73" }, { "date": "Wed, 29 Dec 2021 19:49:22 GMT", "id": "c5571653d9323402e7ab316f97e675b8e7f2c6e1" }, { "date": "Wed, 22 Dec 2021 00:07:37 GMT", "id": "e304c0373f9cc4a65d39d7094e4897627e83390e" }, { "date": "Tue, 28 Dec 2021 23:20:39 GMT", "id": "6122b68dfd0437e5576889466f4c0c34158a14ef" } ], "v8": [] } }, { "cve": "CVE-2021-4067", "date": "Mon, 29 Nov 2021 09:49:28 GMT", "description": "Use after free in window manager. Reported by @ginggilBesel", "issue_id": 1274641, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 02:42:58 GMT", "id": "bab2d02a8b84177d86325c76800c8c903755c1b4" }, { "date": "Thu, 02 Dec 2021 18:45:35 GMT", "id": "67d4e10ebb7f4306f3e2831623f882857ec163f9" }, { "date": "Thu, 02 Dec 2021 17:31:58 GMT", "id": "f517d3f1375ce3a02a0fff280ee30e8319337ec0" } ], "v8": [] } }, { "cve": "CVE-2021-4066", "date": "Mon, 29 Nov 2021 01:13:05 GMT", "description": "Integer underflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1274499, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 01 Dec 2021 02:19:56 GMT", "id": "f14b5ca768b132469c21212227d597cdf11b75c7" } ], "v8": [] } }, { "cve": "CVE-2022-0457", "date": "Sun, 28 Nov 2021 18:18:35 GMT", "description": "Type Confusion in V8. Reported by rax of the Group0x58", "issue_id": 1274445, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 24 Jan 2022 10:15:15 GMT", "id": "27bc67f761e613adf5143cb2de3d86685b1f2519" }, { "date": "Thu, 13 Jan 2022 07:45:25 GMT", "id": "4b8d04897cba70cac45eea33d78fa2354dfe2bd7" } ] } }, { "cve": "CVE-2022-0105", "date": "Sun, 28 Nov 2021 09:32:41 GMT", "description": "Use after free in PDF. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1274376, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Dec 2021 19:38:47 GMT", "id": "6d9638366ae0f60f8d2db41857fcbc738c2514d4" }, { "date": "Wed, 08 Dec 2021 00:32:35 GMT", "id": "7fabaa4d4eea71886dd30962dc96aa0f59bd73e3" } ], "v8": [] } }, { "cve": "CVE-2022-0297", "date": "Sun, 28 Nov 2021 00:45:31 GMT", "description": "Use after free in Vulkan. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1274316, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 01 Dec 2021 16:59:25 GMT", "id": "531e47db7393b331895ae58d24b9e33c63671728" }, { "date": "Thu, 16 Dec 2021 02:06:35 GMT", "id": "e0282162cdf5021d1f4ec58addfd516fdc7e8bd1" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 26 Nov 2021 05:22:13 GMT", "description": "internal security issue", "issue_id": 1274113, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 04 Feb 2022 11:20:26 GMT", "id": "c256cca7211b8d5b5f5a27ac444496ef6158bad4" }, { "date": "Tue, 18 Jan 2022 21:14:54 GMT", "id": "51a0bec16770cd82b7f842da5abbbc1ef626ff9d" }, { "date": "Fri, 28 Jan 2022 12:45:02 GMT", "id": "07deb53ea23434a14cb0f7ea7094cd6cae5e4fc4" }, { "date": "Wed, 12 Jan 2022 10:38:27 GMT", "id": "accc9d90c1867ed34f2ddaee2477ed249e661712" }, { "date": "Fri, 07 Jan 2022 09:36:31 GMT", "id": "9db9911e124204771192f2ed74ab6cb6da9c0cc1" } ], "v8": [] } }, { "cve": "CVE-2021-4065", "date": "Wed, 24 Nov 2021 18:09:45 GMT", "description": "Use after free in autofill. Reported by 5n1p3r0010 from Topsec ChiXiao Lab", "issue_id": 1273674, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Dec 2021 00:34:55 GMT", "id": "9b444926aa0bea35828f7e7de2d669d05262cb82" }, { "date": "Tue, 30 Nov 2021 21:14:25 GMT", "id": "f151ba1355794fc39e22cb3afec7e8c04acfc4ea" }, { "date": "Fri, 03 Dec 2021 08:24:15 GMT", "id": "28265d547872a64b3b6ef00249848fbbcff659f0" }, { "date": "Wed, 06 Apr 2022 18:08:33 GMT", "id": "b78464d0004934e143d74fe308d926dde5f3cf32" } ], "v8": [] } }, { "cve": "CVE-2022-0104", "date": "Wed, 24 Nov 2021 17:04:01 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Abraruddin Khan and Omair", "issue_id": 1273661, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 07 Dec 2021 00:57:11 GMT", "id": "0bc38ea16ec75040921620619a23233b0f8f4b36" } ], "v8": [] } }, { "cve": "CVE-2022-0098", "date": "Wed, 24 Nov 2021 13:14:29 GMT", "description": "Use after free in Screen Capture. Reported by @ginggilBesel", "issue_id": 1273609, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Dec 2021 17:38:20 GMT", "id": "cefa9f2fcb175fd6a21bd616bd5ce73bb90a9ee1" }, { "date": "Tue, 30 Nov 2021 17:36:38 GMT", "id": "fccc5919f3edb3b7e6edad4641d6479628976714" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 24 Nov 2021 09:39:33 GMT", "description": "internal security issue", "issue_id": 1273537, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 07 Dec 2021 21:07:15 GMT", "id": "9f9836f3387d67d6e539b6dce89ccaa7bcc4a91e" } ], "v8": [] } }, { "cve": "CVE-2022-0604", "date": "Wed, 24 Nov 2021 03:35:45 GMT", "description": "Heap buffer overflow in Tab Groups. Reported by Krace", "issue_id": 1273397, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 14 Feb 2022 18:18:38 GMT", "id": "b613ed5f67476cc532ebf9e2accd889283c1ebb6" }, { "date": "Wed, 09 Feb 2022 17:07:33 GMT", "id": "6921d04d0dadf9d3621cf0491a152f778ae27965" }, { "date": "Wed, 09 Feb 2022 19:14:19 GMT", "id": "2b608b95e2534312a86105be25578a20a5fac6e7" }, { "date": "Tue, 25 Jan 2022 02:58:21 GMT", "id": "8e276e73f8390fc4f88a2752527889467bf742bb" } ], "v8": [] } }, { "cve": "CVE-2021-4064", "date": "Tue, 23 Nov 2021 13:17:21 GMT", "description": "Use after free in screen capture. Reported by @ginggilBesel", "issue_id": 1273197, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 18:54:54 GMT", "id": "84d60042e8b182b055e91645ec94e7c7a08a2f93" }, { "date": "Thu, 02 Dec 2021 18:09:07 GMT", "id": "7bdbc8355f6e3290f517a9829d58c3b80b97c7af" }, { "date": "Thu, 02 Dec 2021 17:53:55 GMT", "id": "7fa981a9fedeb3247ff04f11becac83590d91c8b" } ], "v8": [] } }, { "cve": "CVE-2021-4063", "date": "Tue, 23 Nov 2021 11:52:21 GMT", "description": "Use after free in developer tools. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1273176, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 25 Nov 2021 09:55:39 GMT", "id": "82d52ba11ef24778fee951b8e3c78cb1b3cf35f2" }, { "date": "Tue, 30 Nov 2021 08:56:50 GMT", "id": "c1d56eafd19c8dd8629eb9434fa49e79184b65e8" }, { "date": "Tue, 30 Nov 2021 09:34:39 GMT", "id": "2acb20303dc00dcc1a167a1ff5b80724ea1ec791" } ], "v8": [] } }, { "cve": "CVE-2022-0294", "date": "Tue, 23 Nov 2021 03:12:24 GMT", "description": "Inappropriate implementation in Push messaging. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1273017, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 14 Jan 2022 08:49:50 GMT", "id": "c51812de4d7a8614b2e445dbcb62478edc4c4f37" }, { "date": "Tue, 21 Dec 2021 15:41:03 GMT", "id": "c941c1be502c0f84a12731007bc99952d5cc5063" }, { "date": "Wed, 22 Dec 2021 18:35:34 GMT", "id": "e4195bf41feace94152b62b8c0f443887e8ada6f" }, { "date": "Mon, 10 Jan 2022 18:30:27 GMT", "id": "55339e4207939a6fc7ffc9fb30e448fcfc462670" } ], "v8": [] } }, { "cve": "CVE-2022-0790", "date": "Tue, 23 Nov 2021 00:00:00 GMT", "description": "Use after free in Cast UI. Reported by Anonymous", "issue_id": 1274077, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "High", "commit": { "chromium": [ { "date": "Sat, 08 Jan 2022 05:28:27 GMT", "id": "823301b29d38ed1d393c1488c0f7069d229a2d74" } ], "v8": [] } }, { "cve": "CVE-2021-4062", "date": "Mon, 22 Nov 2021 01:18:53 GMT", "description": "Heap buffer overflow in BFCache. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1272403, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 06 Dec 2021 07:43:18 GMT", "id": "bd673db3b1d6b2eaccf3238d7711228a4aa522e3" }, { "date": "Fri, 03 Dec 2021 04:12:48 GMT", "id": "9dd8b9a39e64a3ab90e7957d1225a1955d8da43f" }, { "date": "Wed, 24 Nov 2021 15:26:07 GMT", "id": "1059bf191cc8c7a8a10fd667522b6949e8de0f35" } ], "v8": [] } }, { "cve": "CVE-2022-0103", "date": "Sat, 20 Nov 2021 18:29:06 GMT", "description": "Use after free in SwiftShader. Reported by Abraruddin Khan and Omair\u00a0", "issue_id": 1272266, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 09 Dec 2021 23:14:38 GMT", "id": "44b788a5992fca21ead0749fcfe39c294b5ca97c" } ], "v8": [] } }, { "cve": "CVE-2022-0116", "date": "Sat, 20 Nov 2021 14:36:42 GMT", "description": "Inappropriate implementation in Compositing. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1272250, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 18:30:10 GMT", "id": "ab1b76f3e7cdad702c562f0b43bf3367caff4812" }, { "date": "Tue, 07 Dec 2021 20:49:07 GMT", "id": "4deb522c22e748f223feae060203d50bfd740eb1" } ], "v8": [] } }, { "cve": "CVE-2021-4100", "date": "Fri, 19 Nov 2021 13:04:56 GMT", "description": "Object lifecycle issue in ANGLE. Reported by Aki Helin of Solita", "issue_id": 1272068, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Dec 2021 22:43:32 GMT", "id": "9df08d0fb9551aa2f175ab7f7741228a5279d70d" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 18 Nov 2021 16:54:04 GMT", "description": "internal security issue", "issue_id": 1271747, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 01 Dec 2021 08:46:58 GMT", "id": "c458116b70c1498f5858e7c09d0e2445b72e3009" } ], "v8": [] } }, { "cve": "CVE-2021-4061", "date": "Wed, 17 Nov 2021 16:19:34 GMT", "description": "Type Confusion in V8. Reported by Paolo Severini", "issue_id": 1271456, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 23 Nov 2021 00:47:59 GMT", "id": "9324d7fd21278d382dbfe1892f4fbb64241fb9f0" }, { "date": "Tue, 23 Nov 2021 01:32:13 GMT", "id": "daf8df62aca44279d7c44a475ccf57fdbad3969b" }, { "date": "Fri, 19 Nov 2021 11:42:25 GMT", "id": "6c62b55fc2ddccc3825e91eb1baebc9ed17cbc5c" }, { "date": "Thu, 18 Nov 2021 10:38:26 GMT", "id": "9c8741567d29c09133f305e521c076a0b7205d8a" }, { "date": "Fri, 19 Nov 2021 11:43:28 GMT", "id": "be835718714cddfcc832e7cf93a2d15b396014d7" } ] } }, { "cve": "CVE-2021-4059", "date": "Tue, 16 Nov 2021 18:12:41 GMT", "description": "Insufficient data validation in loader. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1270990, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 29 Nov 2021 19:10:38 GMT", "id": "a5f630e5f94da28a926d60da7dde194acd8697f0" }, { "date": "Wed, 08 Dec 2021 00:55:25 GMT", "id": "3244f616e74119cc190a90db8af746f7de98dc96" }, { "date": "Fri, 03 Dec 2021 18:15:17 GMT", "id": "dbde8795233ac77de05b9309210bcf6a137f8959" } ], "v8": [] } }, { "cve": "CVE-2021-4099", "date": "Tue, 16 Nov 2021 00:40:15 GMT", "description": "Use after free in Swiftshader. Reported by Aki Helin of Solita", "issue_id": 1270658, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 01 Dec 2021 19:46:35 GMT", "id": "a1bfeb949fd02f2f73ab62b4d20a1493cbc6189a" } ], "v8": [] } }, { "cve": "CVE-2022-1313", "date": "Tue, 16 Nov 2021 00:00:00 GMT", "description": "Use after free in tab groups. Reported by Thomas Orlita ", "issue_id": 1270539, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 11 Feb 2022 21:05:37 GMT", "id": "bf9500afcb08e7dfaec3cf4f52e00618ab663ec9" } ], "v8": [] } }, { "cve": "CVE-2022-0455", "date": "Mon, 15 Nov 2021 19:02:57 GMT", "description": "Inappropriate implementation in Full Screen Mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1270593, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 12 Jan 2022 01:42:41 GMT", "id": "708b1652778fffdb76a2e54a9cd6ffa3809f622f" }, { "date": "Wed, 22 Dec 2021 18:11:10 GMT", "id": "5826dba7f25f6915bebf2711f8258f8f56b81439" }, { "date": "Tue, 11 Jan 2022 21:00:01 GMT", "id": "5342e92ac42713522f09dd71292bd8fd62181a29" }, { "date": "Fri, 07 Jan 2022 02:13:46 GMT", "id": "57192a3615a7aae0e4ace6558965f355c2e0ec27" }, { "date": "Wed, 05 Jan 2022 03:51:42 GMT", "id": "928a8265d3000206a8b11073e983010bb64cb8f4" }, { "date": "Fri, 21 Jan 2022 00:34:04 GMT", "id": "e2d4274e25bc2d642f99c6cee97b5015ff67c9af" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 15 Nov 2021 13:57:20 GMT", "description": "internal security issue", "issue_id": 1270498, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 16 Dec 2021 21:16:37 GMT", "id": "1096731a9de0d64cf7ab51ac95970f925efcb50d" }, { "date": "Thu, 09 Dec 2021 17:48:59 GMT", "id": "eeeb43e7165452eb229b195523bfbe57ca7d3c3c" }, { "date": "Thu, 03 Feb 2022 13:29:21 GMT", "id": "b8963b6607647af64db8c3558a214fa9f6fc03ba" } ], "v8": [] } }, { "cve": "CVE-2022-0462", "date": "Mon, 15 Nov 2021 12:45:43 GMT", "description": "Inappropriate implementation in Scroll. Reported by Youssef Sammouda", "issue_id": 1270470, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 13 Jan 2022 15:19:13 GMT", "id": "83b205f6d15059268afd272b91742bd0c0fbcbab" }, { "date": "Tue, 25 Jan 2022 04:07:57 GMT", "id": "f375e3ed7bae261e7bd1c7f4c91a535d8eea2010" }, { "date": "Tue, 25 Jan 2022 00:44:13 GMT", "id": "908c81facdeca04307499e6539f13aac07375d31" }, { "date": "Wed, 12 Jan 2022 15:26:22 GMT", "id": "4ca8a782c0d417000ea8010c2f9b72c7f674920d" } ], "v8": [] } }, { "cve": "CVE-2022-0292", "date": "Mon, 15 Nov 2021 09:29:52 GMT", "description": "Inappropriate implementation in Fenced Frames. Reported by Brendon Tiszka\u00a0", "issue_id": 1270358, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$17000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 07 Jan 2022 23:00:30 GMT", "id": "556ad8e9dc252b6ffb5924ce0a20d3217f96bde5" }, { "date": "Wed, 12 Jan 2022 03:49:51 GMT", "id": "3d6a86ed0b1f97357e3840a74c85a5471de47ad3" }, { "date": "Wed, 08 Dec 2021 00:26:10 GMT", "id": "4f6e84a9e911b9e22ff36770e8ceb5e1d09dd851" }, { "date": "Fri, 10 Dec 2021 19:51:49 GMT", "id": "2b3304ff64a1103b87b1c760fdc0eaa3c4465df5" }, { "date": "Fri, 07 Jan 2022 20:19:30 GMT", "id": "3c964808805d55dae3b1a56b2761895dc4dc392d" }, { "date": "Sat, 08 Jan 2022 13:50:10 GMT", "id": "6e5abb702af92d5ab91c33994b2cd288f4f22beb" }, { "date": "Tue, 07 Dec 2021 20:53:49 GMT", "id": "874303093082ebf6c83ca7f650b41de1af6615bb" }, { "date": "Mon, 20 Dec 2021 08:50:18 GMT", "id": "9b740966ebb4f42f8de032fa0d42f843d1d4845a" } ], "v8": [] } }, { "cve": "CVE-2022-0608", "date": "Mon, 15 Nov 2021 08:06:43 GMT", "description": "Integer overflow in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1270333, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 27 Jan 2022 21:00:04 GMT", "id": "e1432faf5e101b3a516037a26818c03c759d2fdd" }, { "date": "Wed, 02 Feb 2022 05:59:56 GMT", "id": "89328d6207e18eaa53316fe8b2f7fb94a1511304" }, { "date": "Tue, 25 Jan 2022 12:16:14 GMT", "id": "76eca90d0e9c09bfbb8c3e8999f36e6da6842a39" }, { "date": "Sat, 05 Feb 2022 13:41:47 GMT", "id": "ebc188ad769e7a91739cdd443aa0e427b4f205d7" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 15 Nov 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1267085, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Sat, 06 Nov 2021 00:27:32 GMT", "id": "995ac3d0c4a7b28065711be0ff7974b07783855f" }, { "date": "Wed, 10 Nov 2021 23:31:28 GMT", "id": "4b08525eec42e94df7c1281ed5cef35e9ac8eac0" }, { "date": "Mon, 08 Nov 2021 23:20:08 GMT", "id": "e5b90442f64133cca12833c81dc321f2bf0b0696" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 15 Nov 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1258223, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 13 Oct 2021 20:23:18 GMT", "id": "490dc98b70385b196c3c7f2637577bcb304edddc" }, { "date": "Sat, 09 Oct 2021 03:25:15 GMT", "id": "dd32207449d64126f0114ebf366244555fdc71cd" } ], "v8": [] } }, { "cve": "CVE-2022-0464", "date": "Sat, 13 Nov 2021 23:08:57 GMT", "description": "Use after free in Accessibility. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1270095, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 20 Dec 2021 20:18:30 GMT", "id": "40368c45857e8f0f4602de3dd8f91d038214ca02" }, { "date": "Fri, 11 Feb 2022 14:01:51 GMT", "id": "f83fa6cdedd695d2df732899c1865121667548cb" }, { "date": "Thu, 02 Dec 2021 23:39:01 GMT", "id": "96df51a947a4603c9c5c202d23bb0d2b9af1c0fe" } ], "v8": [] } }, { "cve": "CVE-2022-0802", "date": "Sat, 13 Nov 2021 12:18:45 GMT", "description": "Inappropriate implementation in Full screen mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1270052, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 10 Jan 2022 18:13:27 GMT", "id": "9126f59e3fe456c8bad83424bab74ec514380e79" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 12 Nov 2021 22:20:06 GMT", "description": "internal security issue", "issue_id": 1270014, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 14 Dec 2021 22:30:06 GMT", "id": "0393741895f7aa43a264a034fb33d3b3a07a863b" }, { "date": "Tue, 30 Nov 2021 17:13:54 GMT", "id": "a5eebd7f7acae4bbd30c65327e06a74fc47534eb" }, { "date": "Tue, 14 Dec 2021 15:28:36 GMT", "id": "b2aadb511f03da7eb53a0ab6f2285e24cede9243" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 12 Nov 2021 22:19:48 GMT", "description": "internal security issue", "issue_id": 1269999, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 01 Feb 2022 16:51:19 GMT", "id": "c5dea7aa38a3e22e5990a5b0b398dcc3e8727b3a" }, { "date": "Sat, 05 Feb 2022 16:19:54 GMT", "id": "6b161b5fdc23aa68892f5a60d9285dd1d8789a39" }, { "date": "Thu, 17 Feb 2022 22:21:18 GMT", "id": "905302eb3a2bd502786dd0321a8ccb5330669954" } ], "v8": [] } }, { "cve": "CVE-2022-0470", "date": "Thu, 11 Nov 2021 03:41:41 GMT", "description": "Out of bounds memory access in V8. Reported by Looben Yang", "issue_id": 1269225, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [], "v8": [ { "date": "Fri, 12 Nov 2021 21:15:06 GMT", "id": "79f617b009c4d8128413a07abed7f0fbe5b65308" } ] } }, { "cve": "none", "date": "Wed, 10 Nov 2021 20:28:20 GMT", "description": "internal security issue", "issue_id": 1269151, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 23 Nov 2021 02:21:18 GMT", "id": "3d6ea74fc8103ad5d6bc97e6aca567b9504dc1ea" }, { "date": "Fri, 19 Nov 2021 21:43:46 GMT", "id": "28d9dd3bd3204463bf64ea2f8ff04e27eced1b93" }, { "date": "Tue, 23 Nov 2021 02:39:20 GMT", "id": "1d13bd045ec95fff17c4e774b66fe522e201b45d" } ], "v8": [] } }, { "cve": "CVE-2022-0115", "date": "Wed, 10 Nov 2021 08:52:31 GMT", "description": "Uninitialized Use in File API. Reported by Mark Brand of Google Project Zero", "issue_id": 1268903, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 14 Dec 2021 17:03:55 GMT", "id": "473c4c2cdc31b714bb56584a9f60c9e1b5bcd770" }, { "date": "Mon, 13 Dec 2021 23:32:55 GMT", "id": "5e03b6a7aaf1ab17745a2185b399da22c2426914" }, { "date": "Thu, 09 Dec 2021 20:13:43 GMT", "id": "07a2e4a07bb6e3f7435682fc924c843c6e89f494" } ], "v8": [] } }, { "cve": "CVE-2022-1139", "date": "Wed, 10 Nov 2021 00:00:00 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by Maurice Dauer ", "issue_id": 1268541, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 14 Feb 2022 20:31:53 GMT", "id": "c15a4bba2f9bbc9790ccccaf720bdca1f14ad4e0" }, { "date": "Thu, 07 Apr 2022 16:11:45 GMT", "id": "bf57ba0673ebe0bce8f65f60bac2c13b4bd167da" } ], "v8": [] } }, { "cve": "CVE-2021-4078", "date": "Tue, 09 Nov 2021 22:37:34 GMT", "description": "Type confusion in V8. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab", "issue_id": 1268738, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 16 Nov 2021 13:58:29 GMT", "id": "6ffcdddbc2d9109dfab0caf7e3e428728e830090" }, { "date": "Thu, 19 May 2022 14:59:44 GMT", "id": "1da4b373a72137fb386927c0e4984520d46b0448" }, { "date": "Wed, 17 Nov 2021 12:03:32 GMT", "id": "85ab0ad7789a7188b4c0b2be3cd3d758134c7de6" }, { "date": "Tue, 16 Nov 2021 13:22:04 GMT", "id": "9b5f39855448c9dc283832063c4e9e1c4dd07246" } ] } }, { "cve": "none", "date": "Tue, 09 Nov 2021 08:28:59 GMT", "description": "internal security issue", "issue_id": 1268448, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 11 Nov 2021 22:24:28 GMT", "id": "fd8a8914ca0183f0add65ae55f04e287543c7d4a" } ], "v8": [] } }, { "cve": "CVE-2021-38011", "date": "Mon, 08 Nov 2021 22:50:54 GMT", "description": "Use after free in storage foundation. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1268274, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 10 Nov 2021 21:14:03 GMT", "id": "a5f54612590dc58fbe1dc283eef89269c23fa3b7" }, { "date": "Wed, 10 Nov 2021 02:19:17 GMT", "id": "e7bae3f4b45d22ea3fdc15878b238d81a10785ae" }, { "date": "Wed, 10 Nov 2021 21:09:27 GMT", "id": "f071d5efa653a4dd308f8b44f8e0761aeb4fc824" }, { "date": "Wed, 10 Nov 2021 00:07:45 GMT", "id": "5200793c2aea5979cc79f3350a4e3d6c0795d6f2" } ], "v8": [] } }, { "cve": "CVE-2022-0463", "date": "Mon, 08 Nov 2021 19:28:05 GMT", "description": "Use after free in Accessibility. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1268240, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 24 Nov 2021 18:02:48 GMT", "id": "0846e75996f4702afb6f6c64e9bb394cf9abe515" } ], "v8": [] } }, { "cve": "CVE-2021-4053", "date": "Sun, 07 Nov 2021 22:52:56 GMT", "description": "Use after free in UI. Reported by Rox", "issue_id": 1267791, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 25 Nov 2021 17:00:28 GMT", "id": "7280aa30a74b434c714190479cd02c31a064c4e5" }, { "date": "Mon, 29 Nov 2021 22:49:30 GMT", "id": "0d29c13044025b2a05aa09c67fe847a77899e7c3" }, { "date": "Tue, 30 Nov 2021 00:18:35 GMT", "id": "94ca87ec7c634157e3e9815ad87d8f5fdd7319bb" } ], "v8": [] } }, { "cve": "CVE-2021-4052", "date": "Sat, 06 Nov 2021 23:55:33 GMT", "description": "Use after free in web apps. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1267661, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 12 Nov 2021 18:54:23 GMT", "id": "25030ef24ece304403cc88cb4fc8c5e8936e0098" }, { "date": "Mon, 15 Nov 2021 23:18:04 GMT", "id": "fc26857104f0bc5ec024941ae39a8236d73057a6" }, { "date": "Tue, 30 Nov 2021 01:51:48 GMT", "id": "e1ed13a08e46f5703705f298edd9e6059c3e87a4" }, { "date": "Tue, 30 Nov 2021 02:08:27 GMT", "id": "30835f861d5cd78b309225a4faab70cd011c8be6" }, { "date": "Tue, 30 Nov 2021 01:26:16 GMT", "id": "62fd7d67b813b1bbb9253408558df7c2d0f75fc3" }, { "date": "Tue, 30 Nov 2021 02:09:48 GMT", "id": "3adb8f7e7dc78e4aa23544b312328647e618643b" } ], "v8": [] } }, { "cve": "CVE-2022-0114", "date": "Sat, 06 Nov 2021 15:57:35 GMT", "description": "Out of bounds memory access in Web Serial. Reported by Looben Yang", "issue_id": 1267627, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 12 Nov 2021 20:09:12 GMT", "id": "55f6cb37525c796e8b1df5331736b1da39c52bc2" }, { "date": "Thu, 11 Nov 2021 02:47:48 GMT", "id": "7ce1516b49e86430c9216d0df8e23a325104a8c5" }, { "date": "Mon, 21 Feb 2022 12:03:32 GMT", "id": "5c560354b7a77d91a55c14686174b686dfc34261" } ], "v8": [] } }, { "cve": "CVE-2021-4058", "date": "Fri, 05 Nov 2021 18:24:48 GMT", "description": "Heap buffer overflow in ANGLE. Reported by Abraruddin Khan and Omair\u00a0", "issue_id": 1267496, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 25 Nov 2021 21:32:20 GMT", "id": "70c2cd5a59993d30d0c9f36df12ffacfc4cedb45" }, { "date": "Thu, 02 Dec 2021 00:20:32 GMT", "id": "65ec75ce44893103382bc91e5d5d0fb143261fb3" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 05 Nov 2021 14:49:41 GMT", "description": "internal security issue", "issue_id": 1267426, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 03 Feb 2022 14:40:11 GMT", "id": "8ca9250057e3ca2745e958b04bdbdcb5f004024f" }, { "date": "Sat, 13 Nov 2021 00:54:20 GMT", "id": "b5e609d4e7a296fa8c2d50f1373e9f3a50003995" }, { "date": "Tue, 30 Nov 2021 20:53:26 GMT", "id": "06504ff3b1743e3cc84332ef3a14266f5398ddef" } ], "v8": [] } }, { "cve": "CVE-2022-0458", "date": "Fri, 05 Nov 2021 00:00:00 GMT", "description": "Use after free in Thumbnail Tab Strip. Reported by Anonymous", "issue_id": 1267060, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Dec 2021 23:05:41 GMT", "id": "276a8bd1ca3292472b84199be83357f94e434c2a" } ], "v8": [] } }, { "cve": "CVE-2021-4055", "date": "Wed, 03 Nov 2021 10:58:16 GMT", "description": "Heap buffer overflow in extensions. Reported by Chen Rong", "issue_id": 1266510, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 00:53:37 GMT", "id": "9da7f37785eb871a24ec9d68cb61ccef87f60644" }, { "date": "Mon, 08 Nov 2021 18:47:23 GMT", "id": "92cf863b4197ec51ed3d0be9aa9abd33a78165c7" }, { "date": "Wed, 01 Dec 2021 23:50:18 GMT", "id": "cf1c0bd0cef311392254af8bc60ed9040c457aa7" } ], "v8": [] } }, { "cve": "CVE-2021-4079", "date": "Mon, 01 Nov 2021 22:50:20 GMT", "description": "Out of bounds write in WebRTC. Reported by Brendon Tiszka", "issue_id": 1265806, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$8500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 17 Nov 2021 00:05:36 GMT", "id": "1716b97db65bb88a0babc8c3f568e99ad4182e20" }, { "date": "Wed, 24 Nov 2021 15:43:42 GMT", "id": "91f7a656fe28a6fe286ce0d3fa613b09c097b348" }, { "date": "Fri, 26 Nov 2021 13:08:02 GMT", "id": "ab7ab73dcfbf83caa4d0a63a5ee3ed580bb71252" }, { "date": "Tue, 30 Nov 2021 16:05:42 GMT", "id": "e29115c06f518667454262c4ec6d3f47505b0e41" }, { "date": "Thu, 02 Dec 2021 15:19:51 GMT", "id": "cc853f9f44892e8808993c724d30d0ef5f4ba804" }, { "date": "Wed, 17 Nov 2021 11:14:40 GMT", "id": "55248ea9aaf1f6f4c67cf3ae4004f3d424a50f1f" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 01 Nov 2021 10:29:17 GMT", "description": "internal security issue", "issue_id": 1265570, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Fri, 12 Nov 2021 17:43:31 GMT", "id": "ad4b160eaff6ebb41814fd89300a34afd43d12ce" } ] } }, { "cve": "CVE-2021-4068", "date": "Sat, 30 Oct 2021 20:30:35 GMT", "description": "Insufficient validation of untrusted input in new tab page. Reported by NDevTK", "issue_id": 1265197, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$500", "severity": "Low", "commit": { "chromium": [ { "date": "Tue, 16 Nov 2021 20:29:45 GMT", "id": "96d764cc45aeccb278a194dd6168718a2972c23a" }, { "date": "Tue, 02 Nov 2021 22:02:16 GMT", "id": "c812dc628e7a25349b7e63d64da5aaebe8ac2ead" } ], "v8": [] } }, { "cve": "CVE-2022-1497", "date": "Fri, 29 Oct 2021 00:00:00 GMT", "description": "Inappropriate implementation in Input. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1264543, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$NA", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 02 Mar 2022 18:33:42 GMT", "id": "6b66a45021a0eef9795568b1f5797968723f381b" }, { "date": "Wed, 23 Feb 2022 00:17:36 GMT", "id": "361ec38044f34036d920350a72557a51de0ed157" }, { "date": "Tue, 22 Feb 2022 20:11:51 GMT", "id": "e9828a82b5c182dc9a7fb0ae7226c35ba1726e7d" } ], "v8": [] } }, { "cve": "CVE-2022-0804", "date": "Thu, 28 Oct 2021 13:32:13 GMT", "description": "Inappropriate implementation in Full screen mode. Reported by Irvan Kurniawan (sourc7)", "issue_id": 1264561, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$2500", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 22 Dec 2021 01:00:40 GMT", "id": "df07056850f5788da2f16375b79b1a1180a07395" }, { "date": "Wed, 22 Dec 2021 17:14:29 GMT", "id": "a62652a590df20ab936dcb8b30c22095e01386c6" }, { "date": "Wed, 05 Jan 2022 05:33:44 GMT", "id": "affba65e089bc0d7c2c1720f6d12e12a5cf32ae0" } ], "v8": [] } }, { "cve": "CVE-2021-38010", "date": "Thu, 28 Oct 2021 09:51:57 GMT", "description": "Inappropriate implementation in service workers. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1264477, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 10 Dec 2021 20:14:19 GMT", "id": "ae9f97b05fbb5a22e201fbd0253822444ce47dd0" }, { "date": "Mon, 08 Nov 2021 15:05:30 GMT", "id": "1a8af2da50e40331f5b0fb9b39a22a78084caa23" }, { "date": "Wed, 03 Nov 2021 15:30:38 GMT", "id": "dbe67ccde52e30acf6a66b1b9cc83768a067fa6a" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 27 Oct 2021 17:12:07 GMT", "description": "internal security issue", "issue_id": 1264196, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 15 Nov 2021 23:25:43 GMT", "id": "8e8afbd4060b2781eec4cce04d6899e655cd4d07" } ], "v8": [] } }, { "cve": "CVE-2021-38008", "date": "Tue, 26 Oct 2021 12:21:11 GMT", "description": "Use after free in media. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1263620, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 28 Oct 2021 12:31:03 GMT", "id": "d1055cb23b15e42381bc815eeabb207ce18394d9" }, { "date": "Wed, 03 Nov 2021 12:42:52 GMT", "id": "562a2931f4f6a7de6655d369b64139820b850283" }, { "date": "Tue, 02 Nov 2021 21:21:27 GMT", "id": "109fde1088bef0ad849f0c5dc74d905ff739a05e" }, { "date": "Tue, 02 Nov 2021 19:21:42 GMT", "id": "aa14e55c2bec861e1b32aa43a07175d62ee9f01b" } ], "v8": [] } }, { "cve": "CVE-2021-38003", "date": "Tue, 26 Oct 2021 06:07:14 GMT", "description": "Inappropriate implementation in V8. Reported by Cl\u00e9ment Lecigne from Google TAG and Samuel Gro\u00df from Google Project Zero", "issue_id": 1263462, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Wed, 27 Oct 2021 09:01:33 GMT", "id": "7849ead949e2fb76478bd439d085eb6d8d4bed0d" }, { "date": "Wed, 10 Nov 2021 13:38:28 GMT", "id": "7ada005dde022748902728896f5daafc861faea0" }, { "date": "Wed, 27 Oct 2021 08:57:16 GMT", "id": "62a557e5172f220461b4dd593975ffc5f85f76b7" }, { "date": "Tue, 26 Oct 2021 16:52:31 GMT", "id": "be55c16e50e714475034b00ed2682f0813794d15" }, { "date": "Tue, 26 Oct 2021 20:57:24 GMT", "id": "2f010ece66a39592a790d1a37eee08bc0c65f549" }, { "date": "Wed, 27 Oct 2021 09:03:38 GMT", "id": "feef10137b16a4105f12ea88d7a850a8250b3c4a" } ] } }, { "cve": "CVE-2021-4098", "date": "Tue, 26 Oct 2021 05:35:00 GMT", "description": "Insufficient data validation in Mojo. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1263457, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$NA", "severity": "Critical", "commit": { "chromium": [ { "date": "Tue, 07 Dec 2021 20:51:59 GMT", "id": "0747c9405e1098c0bbbc5593183696eafb45b72c" }, { "date": "Mon, 13 Dec 2021 23:42:31 GMT", "id": "fe1826f6ef396e437058254ac7652a28c15bd572" }, { "date": "Fri, 10 Dec 2021 01:03:53 GMT", "id": "da11d71a02276cccc64f6ead66a85ad55aeff45c" }, { "date": "Thu, 09 Dec 2021 19:50:42 GMT", "id": "22ba6ba3413e0c653ee6a4bfa58f8efcc8cf8493" } ], "v8": [] } }, { "cve": "CVE-2022-0120", "date": "Mon, 25 Oct 2021 03:37:43 GMT", "description": "Inappropriate implementation in Passwords. Reported by CHAKRAVARTHI (Ruler96)", "issue_id": 1262953, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Tue, 09 Nov 2021 19:46:06 GMT", "id": "155a965de2b7ebf7ccac9695a66a1b7ddba198c7" }, { "date": "Thu, 04 Nov 2021 10:35:32 GMT", "id": "057e949aee5ce6c8881208e818ec23abb4e126b0" } ], "v8": [] } }, { "cve": "CVE-2021-38012", "date": "Sat, 23 Oct 2021 22:06:50 GMT", "description": "Type Confusion in V8. Reported by Yonghwi Jin (@jinmo123)", "issue_id": 1262791, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$15000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 01 Nov 2021 07:51:38 GMT", "id": "26564c88bc9e034cc512afd857cf303193647b9a" }, { "date": "Sat, 06 Nov 2021 18:52:26 GMT", "id": "f0a63e1f361f2eb8590b35cb960816bc14a994b4" } ], "v8": [] } }, { "cve": "CVE-2021-4057", "date": "Thu, 21 Oct 2021 09:57:29 GMT", "description": "Use after free in file API. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1262183, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 09 Nov 2021 21:39:27 GMT", "id": "15cfa2bed3ce9dcdd0a06d3cd3b8330e3591acdc" }, { "date": "Tue, 16 Nov 2021 22:16:15 GMT", "id": "2b978fb48263ae35112518323b5ee6b8e1e42078" }, { "date": "Thu, 11 Nov 2021 00:13:47 GMT", "id": "8826fb26d8e7b6604e653afa7b6ff632cf5668de" } ], "v8": [] } }, { "cve": "CVE-2021-4101", "date": "Thu, 21 Oct 2021 02:59:02 GMT", "description": "Heap buffer overflow in Swiftshader. Reported by Abraruddin Khan and Omair\u00a0", "issue_id": 1262080, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 06 Dec 2021 20:16:02 GMT", "id": "675b9e6b0c2fe42d4f0f95b64d1742a3cf44a66d" } ], "v8": [] } }, { "cve": "CVE-2022-0109", "date": "Tue, 19 Oct 2021 19:20:46 GMT", "description": "Inappropriate implementation in Autofill. Reported by Young Min Kim (@ylemkimon), CompSec Lab at Seoul National University", "issue_id": 1261689, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$4000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 20 Dec 2021 16:41:52 GMT", "id": "9817ab616338df9cf1dbbbec6e589c4abfcacffb" }, { "date": "Mon, 20 Dec 2021 22:37:51 GMT", "id": "76ee5ef9198eeb8185bfa6a90b12495ae891c563" }, { "date": "Wed, 22 Dec 2021 16:25:16 GMT", "id": "91fbf179875be529f32f4ad2ba83186f9c072641" }, { "date": "Tue, 14 Dec 2021 02:07:29 GMT", "id": "e3aeadcf584ebb5d7f61cd141f9af317cb60cf21" }, { "date": "Mon, 15 Nov 2021 20:58:16 GMT", "id": "55b07dc54220200313366ec821d2303cd847187a" }, { "date": "Tue, 21 Dec 2021 18:01:14 GMT", "id": "896620bfe9d405cde104d74347e300d1ddb03c21" }, { "date": "Mon, 20 Dec 2021 18:53:00 GMT", "id": "cff03c22c54b3bbdb0642b9062855f5f77f9d12a" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 19 Oct 2021 03:09:58 GMT", "description": "internal security issue", "issue_id": 1261415, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 23 Nov 2021 20:16:56 GMT", "id": "eb2bb156e7bc14219353e3797d43d64ce41405d2" } ], "v8": [] } }, { "cve": "CVE-2021-38002", "date": "Mon, 18 Oct 2021 09:17:29 GMT", "description": "Use after free in Web Transport. Reported by @__R0ng of 360 Alpha Lab, \u6f0f\u6d1e\u7814\u7a76\u9662\u9752\u8bad\u961f via Tianfu Cup", "issue_id": 1260940, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 26 Oct 2021 00:40:40 GMT", "id": "143027cf096c64f73b963c280d7d5a0e2482de0f" }, { "date": "Wed, 20 Oct 2021 01:39:59 GMT", "id": "b1997bdadcda9738a19773f82605f65832acedac" }, { "date": "Tue, 26 Oct 2021 04:50:35 GMT", "id": "45f9dcf5021da2f53812c769ec67f033a636b9cc" } ], "v8": [] } }, { "cve": "CVE-2021-4056", "date": "Mon, 18 Oct 2021 09:14:41 GMT", "description": "Type Confusion in loader. Reported by @__R0ng of 360 Alpha Lab", "issue_id": 1260939, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 24 Nov 2021 07:16:06 GMT", "id": "7077e03a4e02c198ac9fdb0814d195df7a75c229" }, { "date": "Thu, 02 Dec 2021 19:23:45 GMT", "id": "731871eeabb6a9c78669292a44e927c5f42b1f7d" }, { "date": "Thu, 02 Dec 2021 15:23:47 GMT", "id": "b991003092e22cc46b93a78127f802e09f7962fa" } ], "v8": [ { "date": "Tue, 23 Nov 2021 16:05:34 GMT", "id": "b0c6dd86bd563672dba6256f482dc5e145f094ae" }, { "date": "Wed, 01 Dec 2021 14:24:09 GMT", "id": "417dee4d1b0f967e3cac360a0b012decbc9f6908" }, { "date": "Wed, 01 Dec 2021 14:25:11 GMT", "id": "04a58fedd57dbf9d96b3ed3351ddef1eea1d1578" } ] } }, { "cve": "CVE-2021-38009", "date": "Sat, 16 Oct 2021 12:59:49 GMT", "description": "Inappropriate implementation in cache. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1260649, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$2000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 05 Nov 2021 19:47:08 GMT", "id": "1fcfb942bd8a1def685cc1da09bfb26aaf2eac4b" }, { "date": "Tue, 02 Nov 2021 16:49:07 GMT", "id": "802faa035409ac7cbb58ad1a385bb8507fe99077" } ], "v8": [] } }, { "cve": "CVE-2021-38001", "date": "Fri, 15 Oct 2021 19:04:27 GMT", "description": "Type Confusion in V8. Reported by @s0rrymybad of Kunlun Lab via Tianfu Cup", "issue_id": 1260577, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 25 Oct 2021 10:07:30 GMT", "id": "a30807d002d19830c52dbe3276e0facc5e9f6d20" }, { "date": "Tue, 19 Oct 2021 15:02:49 GMT", "id": "643bde32a94f0842b54431614e03ca37701a6bfc" }, { "date": "Mon, 18 Oct 2021 10:13:19 GMT", "id": "e4dba97006ca20337deafb85ac00524a94a62fe9" }, { "date": "Fri, 19 Nov 2021 09:57:37 GMT", "id": "b52afb1e2b6a3af4fb9c5d89818c21f50bc68225" }, { "date": "Mon, 25 Oct 2021 10:31:21 GMT", "id": "014e1f857c335ce403447b4aca84f21243ad091b" } ] } }, { "cve": "none", "date": "Thu, 14 Oct 2021 09:37:51 GMT", "description": "internal security issue", "issue_id": 1260007, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 18 Jan 2022 19:44:13 GMT", "id": "ca55b08afcfa31595a525a7ab6b39517145f3965" }, { "date": "Sat, 08 Jan 2022 00:16:39 GMT", "id": "cd661299187203b4701393b95af99ffbe9f626d5" }, { "date": "Wed, 20 Oct 2021 21:59:08 GMT", "id": "f52836419f364a2eefe7a6b7b7b3a66be6bb0279" }, { "date": "Thu, 13 Jan 2022 21:52:22 GMT", "id": "177606efaa9d5c8604eb43f57c2c8e49f346c8ed" }, { "date": "Tue, 18 Jan 2022 20:39:33 GMT", "id": "e85d337a91920ca7342062a1752c3798329b1e84" }, { "date": "Mon, 18 Oct 2021 20:49:18 GMT", "id": "d5a3bd2da61d3a8cb1b931a251a852495bd6cd62" }, { "date": "Tue, 18 Jan 2022 20:25:03 GMT", "id": "5733c2229d7f43f76d2fb2962f5ad7e3ed46dbe9" }, { "date": "Thu, 13 Jan 2022 11:06:48 GMT", "id": "5f0f7006f555a4d4ed68c1251ede0c5f3fb51a53" }, { "date": "Tue, 18 Jan 2022 21:15:50 GMT", "id": "f40bf7383ad2d6764209667400e15154e4d7ad54" }, { "date": "Tue, 18 Jan 2022 19:24:40 GMT", "id": "6c9b3bf35bbed00aaae9a48213955f630d2f98d7" }, { "date": "Tue, 18 Jan 2022 22:47:22 GMT", "id": "c407b091411d0b1cad2a4ca3c789672ba22af7b8" }, { "date": "Tue, 18 Jan 2022 21:26:30 GMT", "id": "95f47ca45477c5ca3676eccd82b2cef18477ce42" }, { "date": "Fri, 15 Oct 2021 20:42:46 GMT", "id": "cab52ad80cb4985de0c9431d761fe9c909bbfb8f" }, { "date": "Thu, 13 Jan 2022 19:29:09 GMT", "id": "714f621a506a958fe28976f539c9f214fcae09c8" }, { "date": "Tue, 18 Jan 2022 20:36:51 GMT", "id": "f5190156c03f55c677881c272dd23c98e9d5ed01" }, { "date": "Tue, 18 Jan 2022 19:39:01 GMT", "id": "62143c64173445b7a96eab925361e36f31ee1865" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 14 Oct 2021 02:45:54 GMT", "description": "internal security issue", "issue_id": 1259899, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 17 Nov 2021 19:34:10 GMT", "id": "ebf502b1588ac7839904064435c6a60f291576cf" }, { "date": "Tue, 02 Nov 2021 22:12:28 GMT", "id": "251f4ebec241494a0e232017f1df595cbc26b28b" } ], "v8": [] } }, { "cve": "CVE-2022-0102", "date": "Thu, 14 Oct 2021 00:00:00 GMT", "description": "Type Confusion in V8 . Reported by Brendon Tiszka", "issue_id": 1260129, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 15 Oct 2021 15:47:21 GMT", "id": "a1427aad7cefbe952c9db37a4a46d9b0af672943" } ] } }, { "cve": "CVE-2021-37997", "date": "Wed, 13 Oct 2021 23:28:33 GMT", "description": "Use after free in Sign-In. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1259864, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 04 Nov 2021 17:32:28 GMT", "id": "18dfa590d29525cb6294399ec0c46c398dca9418" }, { "date": "Thu, 04 Nov 2021 11:18:26 GMT", "id": "fd22c9fd6f15b982160d41839b9af9046697c52f" }, { "date": "Wed, 20 Oct 2021 23:36:54 GMT", "id": "2dc6b4aa93063bd0c3283e605b59a26f60b13a01" }, { "date": "Mon, 18 Oct 2021 10:06:54 GMT", "id": "9f9874f3fdb261ab56899ac68fb9e9caa858c250" }, { "date": "Fri, 15 Oct 2021 17:02:37 GMT", "id": "79772972a0d41572db52073e310711b5b2cac23f" }, { "date": "Wed, 20 Oct 2021 23:45:15 GMT", "id": "4dc66405bae74b709ce69d507aa2fb062b7e7d57" } ], "v8": [] } }, { "cve": "CVE-2021-38020", "date": "Wed, 13 Oct 2021 11:09:00 GMT", "description": "Insufficient policy enforcement in contacts picker. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1259694, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 28 Oct 2021 13:07:26 GMT", "id": "53568f244c8594f200ead4e042f29efb55f3be82" }, { "date": "Mon, 08 Nov 2021 20:49:30 GMT", "id": "93ca0dccf68c7b23c6370298cfcd136f9db9373f" } ], "v8": [] } }, { "cve": "CVE-2021-37998", "date": "Wed, 13 Oct 2021 04:54:23 GMT", "description": "Use after free in Garbage Collection. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1259587, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Sat, 16 Oct 2021 09:26:26 GMT", "id": "4feccb9b4e4ac2accc92dd24b17f6b2f12611354" }, { "date": "Wed, 20 Oct 2021 07:27:19 GMT", "id": "2e9b90efde2faeb80211eaf0b0077d160b33817a" }, { "date": "Mon, 20 Dec 2021 13:20:34 GMT", "id": "7d79acbd12d59e54be23c5b17245d797a7f19bde" }, { "date": "Wed, 20 Oct 2021 08:12:59 GMT", "id": "656c2769c5803f19c238590154d05114b2f3a04c" }, { "date": "Wed, 13 Oct 2021 19:05:13 GMT", "id": "32a09a6bce6cc75806dee5ec748bb1d081048fd0" } ] } }, { "cve": "none", "date": "Wed, 13 Oct 2021 02:39:38 GMT", "description": "internal security issue", "issue_id": 1259557, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 09 Dec 2021 02:53:15 GMT", "id": "b66b0b1ba61d0f0d4bb745d6a643e3da6128306f" }, { "date": "Tue, 14 Dec 2021 01:21:26 GMT", "id": "e8379497e64bfb7e15b6ef4c62befb1fe6d506a1" }, { "date": "Tue, 14 Dec 2021 01:21:19 GMT", "id": "4724ce7b1a8e4c2d31e569a51032c6a6792eff8f" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 11 Oct 2021 10:46:08 GMT", "description": "internal security issue", "issue_id": 1258809, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 13 Oct 2021 21:07:04 GMT", "id": "20abe8b3fa4758b2ea2030d0d981a8992c014d93" }, { "date": "Thu, 14 Oct 2021 23:17:53 GMT", "id": "5dc914b1bd8b7effdde05fcfe0440164dc06b0a2" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 11 Oct 2021 06:13:45 GMT", "description": "internal security issue", "issue_id": 1258603, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Thu, 14 Oct 2021 22:15:23 GMT", "id": "ebddaedee6c7e8b27fe3a6493c18e18a921062d3" } ] } }, { "cve": "none", "date": "Tue, 05 Oct 2021 11:42:57 GMT", "description": "internal security issue", "issue_id": 1256885, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 14 Oct 2021 05:01:51 GMT", "id": "4ead0363e1a9266ed0c18a067c6c9f7fe6202721" } ], "v8": [] } }, { "cve": "CVE-2021-38017", "date": "Tue, 05 Oct 2021 09:01:14 GMT", "description": "Insufficient policy enforcement in iframe sandbox. Reported by NDevTK", "issue_id": 1256822, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$2500", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 03 Nov 2021 12:49:50 GMT", "id": "855df1837e97de265be9cd9d5565d247348a823a" }, { "date": "Tue, 19 Oct 2021 12:05:04 GMT", "id": "ab32e8aacb08c9fce0dc4bf09eec456ba46e3710" }, { "date": "Thu, 21 Oct 2021 11:44:35 GMT", "id": "62f4f82ad39f177538f733b37cdd5dabd8f333de" } ], "v8": [] } }, { "cve": "CVE-2022-0461", "date": "Tue, 05 Oct 2021 00:00:00 GMT", "description": "Policy bypass in COOP. Reported by NDevTK", "issue_id": 1256823, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 10:36:15 GMT", "id": "d400fcfcccd5d1fc636d8758fcfa3c9490f37ca5" } ], "v8": [] } }, { "cve": "CVE-2022-0112", "date": "Mon, 04 Oct 2021 09:07:12 GMT", "description": "Incorrect security UI in Browser UI. Reported by Thomas Orlita\u00a0", "issue_id": 1255713, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 13 Oct 2021 16:36:13 GMT", "id": "84ce1c7414d2d7fce208787f34fedd75a083973e" }, { "date": "Mon, 11 Oct 2021 23:05:56 GMT", "id": "6ae36cd32eb7c21fa2a5d4761e37ea5c272adf07" }, { "date": "Wed, 13 Oct 2021 18:51:41 GMT", "id": "b0eb49065f24771bf42e534e7be00c958799f27a" } ], "v8": [] } }, { "cve": "none", "date": "Sat, 02 Oct 2021 09:42:57 GMT", "description": "internal security issue", "issue_id": 1255368, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Wed, 06 Oct 2021 11:36:34 GMT", "id": "2dd23f757563e46917623ce548914975222fe4de" }, { "date": "Wed, 06 Oct 2021 10:02:13 GMT", "id": "bab8254c325b37255e19bacd8a3f36730051ea51" } ] } }, { "cve": "CVE-2021-37993", "date": "Fri, 01 Oct 2021 21:46:39 GMT", "description": "Use after free in PDF Accessibility. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1255332, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 26 Oct 2021 13:04:15 GMT", "id": "39de6aab386fe810077cd2e2baea74d7058229fb" }, { "date": "Thu, 07 Oct 2021 19:32:19 GMT", "id": "994ecbfe6e5448e2ed8d41002d7508bb09f606f1" }, { "date": "Mon, 11 Oct 2021 20:36:49 GMT", "id": "7dce7b3a15b2fa14be933f2a0b8eb93192a1e0b9" } ], "v8": [] } }, { "cve": "CVE-2021-37980", "date": "Thu, 30 Sep 2021 00:07:14 GMT", "description": "Inappropriate implementation in Sandbox. Reported by Yonghwi Jin (@jinmo123) of Theori", "issue_id": 1254631, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 30 Sep 2021 21:23:47 GMT", "id": "19d2be5d47e0edc406ef7d93096f54009e47937f" }, { "date": "Fri, 01 Oct 2021 23:30:09 GMT", "id": "3a5bafa35defbaf3fd82bd2220034bd403e76243" }, { "date": "Fri, 01 Oct 2021 23:26:35 GMT", "id": "466e04a85740c20faa126afc6120d098f503c96e" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 29 Sep 2021 10:04:16 GMT", "description": "internal security issue", "issue_id": 1254422, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 04 Jan 2022 21:37:43 GMT", "id": "87779d6f6c91a7031ec23b2548a163fc58dad865" } ], "v8": [] } }, { "cve": "CVE-2021-38007", "date": "Tue, 28 Sep 2021 20:23:44 GMT", "description": "Type Confusion in V8. Reported by Polaris Feng and SGFvamll at Singular Security Lab", "issue_id": 1254189, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 09 Nov 2021 09:36:52 GMT", "id": "5d2b5e7c006c8af13b2d467ce2a38877bad300dc" }, { "date": "Mon, 04 Oct 2021 09:04:56 GMT", "id": "131c0055c9a5e039185d19584b3c95edc3164bee" }, { "date": "Fri, 01 Oct 2021 09:39:57 GMT", "id": "b65e72c68eaf48640679dc1e7b379e81f999a8f1" }, { "date": "Mon, 25 Oct 2021 10:03:33 GMT", "id": "bdf31d5883607db4377b519d7308fb1e639a0448" }, { "date": "Fri, 10 Dec 2021 21:51:17 GMT", "id": "8212f0fb2878e9ec16422eb609a65891606bca91" } ] } }, { "cve": "CVE-2021-37992", "date": "Mon, 27 Sep 2021 22:33:44 GMT", "description": "Out of bounds read in WebAudio. Reported by sunburst@Ant Security Light-Year Lab", "issue_id": 1253746, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 06 Oct 2021 15:16:37 GMT", "id": "4e2dcd84dc33f29b032b52e053726ab49e4d0b4d" }, { "date": "Tue, 26 Oct 2021 13:41:34 GMT", "id": "2a8c262b443a7086299b1deaa44d0ed058a280a8" }, { "date": "Mon, 11 Oct 2021 23:53:51 GMT", "id": "c69dddfe1cdede662f2b1a2d5a3c1613029a3e98" } ], "v8": [] } }, { "cve": "CVE-2021-37984", "date": "Mon, 27 Sep 2021 09:45:08 GMT", "description": "Heap buffer overflow in PDFium. Reported by Antti Levom\u00e4ki, Joonas Pihlaja and Christian Jalio from Forcepoint", "issue_id": 1253399, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 28 Sep 2021 23:27:23 GMT", "id": "d54a58a34f3e3466d821f992859c5d7ff118093a" } ], "v8": [] } }, { "cve": "CVE-2021-37977", "date": "Fri, 24 Sep 2021 11:13:31 GMT", "description": "Use after free in Garbage Collection. Reported by Anonymous", "issue_id": 1252878, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 01 Oct 2021 14:00:27 GMT", "id": "e677a6f6b257e992094b9183a958b67ecc68aa85" }, { "date": "Tue, 05 Oct 2021 08:36:27 GMT", "id": "53d43b00a7bad10750226eebc29f846beca5e157" }, { "date": "Tue, 05 Oct 2021 08:34:36 GMT", "id": "ad55ae0b84beeb29f9ca5c7b5096632dce0ecd17" } ] } }, { "cve": "none", "date": "Fri, 24 Sep 2021 10:18:07 GMT", "description": "internal security issue", "issue_id": 1252858, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 29 Sep 2021 19:41:35 GMT", "id": "6e74f7b5cb2f48b17403f0431f3e4f3a2e716265" }, { "date": "Thu, 04 Nov 2021 15:08:56 GMT", "id": "8059cb4355bba5334a314412115c6e60fbcd4d5a" }, { "date": "Mon, 25 Oct 2021 18:22:50 GMT", "id": "91dd4f79ab5bac88b449746e245dd525c8200a48" } ], "v8": [] } }, { "cve": "CVE-2022-0468", "date": "Fri, 24 Sep 2021 03:06:21 GMT", "description": "Use after free in Payments. Reported by Krace", "issue_id": 1252716, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 10 Jan 2022 21:24:28 GMT", "id": "abfb897cfe10707226bb41ec6ee5c0ae2d800a06" }, { "date": "Mon, 10 Jan 2022 14:56:57 GMT", "id": "91dd0b4e79848d9fc1c23324981efe20d9fd4a91" }, { "date": "Fri, 14 Jan 2022 01:34:10 GMT", "id": "836ea11d0c5e81087183d91285d23048b88c3a67" } ], "v8": [] } }, { "cve": "CVE-2021-37975", "date": "Fri, 24 Sep 2021 00:00:00 GMT", "description": "Use after free in V8. Reported by Anonymous", "issue_id": 1252918, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 28 Sep 2021 19:02:41 GMT", "id": "1054ee7f349d6be22e9518cf9b794b206d0e5818" }, { "date": "Wed, 29 Sep 2021 22:44:00 GMT", "id": "5c4acf2ae64ad4698c0a880c72c8eee9e8c335d1" }, { "date": "Fri, 01 Oct 2021 18:11:22 GMT", "id": "ef8c804a4d3b7b4f85fb848d32727851c13646c8" }, { "date": "Mon, 04 Oct 2021 07:29:56 GMT", "id": "02fe7beaf04c51b3e7902900f1e648c7a9f4cd8d" }, { "date": "Wed, 29 Sep 2021 22:44:12 GMT", "id": "e1dc181c2badd91a2e20ffcd8edf5a0c4131211a" }, { "date": "Tue, 28 Sep 2021 19:55:59 GMT", "id": "5f79f478b5bdd9efabfeafac12ee7181b4b1d0ea" } ] } }, { "cve": "none", "date": "Thu, 23 Sep 2021 15:32:10 GMT", "description": "internal security issue", "issue_id": 1252562, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 10 Nov 2021 01:57:33 GMT", "id": "1b76dd22c88ca6a48b8afe1522703c3b0bac45f0" }, { "date": "Tue, 09 Nov 2021 00:23:45 GMT", "id": "22f27676515e8e6ce1946ec7a1ccd371c0734382" } ], "v8": [] } }, { "cve": "CVE-2021-37976", "date": "Tue, 21 Sep 2021 14:52:58 GMT", "description": "Information leak in core. Reported by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero", "issue_id": 1251787, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$NA", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 01 Oct 2021 12:44:24 GMT", "id": "22ff08b3f85729635008df68fcf5c71c54637e09" }, { "date": "Wed, 29 Sep 2021 21:16:30 GMT", "id": "94adaae85e4db1d1a366aee2175148eea4915fe0" }, { "date": "Wed, 22 Sep 2021 02:05:50 GMT", "id": "d9cc471e122e9a2391a68fa7cd72ea50587d8d97" }, { "date": "Wed, 29 Sep 2021 21:16:47 GMT", "id": "6a8a2098f9fad2f0c1652d159fce563ede7d2ea8" }, { "date": "Wed, 22 Sep 2021 03:11:54 GMT", "id": "6fdb79cefd125eef4b07ff51c8d881dd12a020d5" } ], "v8": [] } }, { "cve": "CVE-2021-37973", "date": "Tue, 21 Sep 2021 12:40:48 GMT", "description": "Use after free in Portals. Reported by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero", "issue_id": 1251727, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 04 Oct 2021 22:59:41 GMT", "id": "43fe829f33b37af88cd277826f13d7dab128d419" }, { "date": "Wed, 22 Sep 2021 20:27:54 GMT", "id": "85123ea32b9d6c7c64e941285bff237b01f424b2" }, { "date": "Thu, 23 Sep 2021 01:34:10 GMT", "id": "f679b50bba1aa1089a6988f2cf85ec37b319ce2b" }, { "date": "Tue, 21 Sep 2021 23:43:51 GMT", "id": "beebc8aec0f8f9e627e69ad67ef311903924b384" }, { "date": "Fri, 01 Oct 2021 14:08:44 GMT", "id": "91cc00d28d4e8c58b2c9c9b8a4f72a7908a28b73" }, { "date": "Thu, 23 Sep 2021 00:36:06 GMT", "id": "608da38a6a38618e9ef78ca29ea965b4812de2df" }, { "date": "Tue, 21 Sep 2021 23:52:37 GMT", "id": "0b696b8ba22e35fcc6463a39be7ac3239d593099" } ], "v8": [] } }, { "cve": "CVE-2021-37999", "date": "Tue, 21 Sep 2021 02:15:59 GMT", "description": "Insufficient data validation in New Tab Page. Reported by Ashish Arun Dhone", "issue_id": 1251541, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 19 Oct 2021 18:10:43 GMT", "id": "60ce07072e343e9dcef5e3ee244bc13b641dcc9f" }, { "date": "Wed, 20 Oct 2021 00:34:33 GMT", "id": "0acea24516305427f2dcad85b98e6faf6f3e8908" }, { "date": "Wed, 20 Oct 2021 00:41:16 GMT", "id": "7095119c76ff55ed7e1706f6728cd98476e69f98" }, { "date": "Wed, 13 Oct 2021 00:51:56 GMT", "id": "10939d3c6653ef2cc8105bb4145db6a876c22e61" } ], "v8": [] } }, { "cve": "CVE-2022-1874", "date": "Tue, 21 Sep 2021 00:00:00 GMT", "description": "Insufficient policy enforcement in Safe Browsing. Reported by hjy79425575", "issue_id": 1251588, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$500", "severity": "Low", "commit": { "chromium": [ { "date": "Thu, 24 Mar 2022 22:42:54 GMT", "id": "784abfd18c9b7e733ec6031ab02912f2ebd27aeb" } ], "v8": [] } }, { "cve": "CVE-2021-38019", "date": "Mon, 20 Sep 2021 07:53:00 GMT", "description": "Insufficient policy enforcement in CORS. Reported by Maurice Dauer", "issue_id": 1251179, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 29 Sep 2021 07:58:26 GMT", "id": "27eb11a2855511c42900d82626b75bc1058d004d" } ], "v8": [] } }, { "cve": "CVE-2021-37991", "date": "Fri, 17 Sep 2021 03:11:15 GMT", "description": "Race in V8. Reported by Samuel Gro\u00df of Google Project Zero", "issue_id": 1250660, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [], "v8": [ { "date": "Thu, 04 Nov 2021 11:02:19 GMT", "id": "a7a83399b808b4fd61ba99a1a35d3a1284b4e047" }, { "date": "Thu, 23 Sep 2021 14:07:24 GMT", "id": "2bda4bad3daa20d0b0eb48b65399c2e99e3711a7" }, { "date": "Mon, 20 Sep 2021 14:53:26 GMT", "id": "8589742831a3c09ac96e1e82bf4d697175f2a351" } ] } }, { "cve": "CVE-2022-0607", "date": "Fri, 17 Sep 2021 02:26:40 GMT", "description": "Use after free in GPU. Reported by 0x74960", "issue_id": 1250655, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Feb 2022 05:45:44 GMT", "id": "be50c60b422563e672ed59324b79b8863e336739" }, { "date": "Tue, 25 Jan 2022 16:18:37 GMT", "id": "98d246cabe677e1d8287e4d42ce02825417be9e2" }, { "date": "Thu, 27 Jan 2022 21:37:53 GMT", "id": "1f67cc8f7fc671b3cfc571f2b52bf8fbf09cfa97" } ], "v8": [] } }, { "cve": "CVE-2022-0460", "date": "Thu, 16 Sep 2021 01:29:05 GMT", "description": "Use after free in Window Dialog. Reported by 0x74960", "issue_id": 1250227, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 04 Jan 2022 22:52:37 GMT", "id": "48ece4df40019535a3c21308941428ec82837c52" }, { "date": "Sat, 05 Feb 2022 13:41:37 GMT", "id": "220ee40ce9d98c917c979923b1a2fa0d14ea484b" }, { "date": "Fri, 14 Jan 2022 21:11:59 GMT", "id": "008d0651213fdf43407f5fe90c48e5432c0b64c7" } ], "v8": [] } }, { "cve": "CVE-2021-38000", "date": "Wed, 15 Sep 2021 11:57:37 GMT", "description": "Insufficient validation of untrusted input in Intents. Reported by Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group", "issue_id": 1249962, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 05 Oct 2021 20:46:01 GMT", "id": "098319b6e1eff1888fc2a682273ee2d98df27a25" }, { "date": "Wed, 20 Oct 2021 15:16:45 GMT", "id": "36aa9d15d1283d8d9758b044b7a9a20349f507de" }, { "date": "Tue, 12 Oct 2021 20:23:17 GMT", "id": "1c91d8448876e2c8f4824b100ad2d1ef9a53c333" }, { "date": "Sat, 09 Oct 2021 01:31:45 GMT", "id": "4e439fc7e82ba76e4be0dc5c33ddb916a6ecade2" }, { "date": "Fri, 15 Oct 2021 14:46:23 GMT", "id": "ecc68ebbf012d1a9cf88d32c7586292fa9717401" }, { "date": "Tue, 28 Sep 2021 01:08:54 GMT", "id": "9a942dc24e1f865515cacb40255ff53f707a8aa1" }, { "date": "Fri, 24 Sep 2021 15:35:09 GMT", "id": "acfd4fedd424dd0bec80eae44580bb999a283251" }, { "date": "Fri, 14 Jan 2022 17:59:58 GMT", "id": "7daf603a4a5236ab52fb99649fe438ffe9fb4d5c" }, { "date": "Mon, 18 Oct 2021 15:36:57 GMT", "id": "876983b5b4ad3beb5227d1ba8119b587631aaf18" }, { "date": "Thu, 14 Oct 2021 17:34:13 GMT", "id": "bec9c601c0d7973feac2d2751256d98195f74180" } ], "v8": [] } }, { "cve": "CVE-2021-37983", "date": "Wed, 15 Sep 2021 04:43:36 GMT", "description": "Use after free in Dev Tools. Reported by Zhihua Yao of KunLun Lab", "issue_id": 1249810, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 26 Oct 2021 13:46:25 GMT", "id": "4c926456a81365cdd8e0a4fa67c02e812bd1b909" }, { "date": "Wed, 13 Oct 2021 08:34:20 GMT", "id": "a0af9229eb1625e28ede99a374c830b0e9dec09a" }, { "date": "Wed, 06 Oct 2021 06:17:22 GMT", "id": "6bda8ff54af25de4feeae563ea8a040886bdb769" }, { "date": "Tue, 12 Oct 2021 13:59:34 GMT", "id": "01d6e2d93012480225e150c1ae73bc270a7d7a92" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 14 Sep 2021 14:28:12 GMT", "description": "internal security issue", "issue_id": 1249626, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 11 Oct 2021 02:00:56 GMT", "id": "9de3a2c53663b1b47737a1433fd576e534000415" }, { "date": "Fri, 10 Dec 2021 19:38:19 GMT", "id": "3e3e3768eadc2232ed0eee7fbf772a8df3dfa86b" }, { "date": "Wed, 06 Oct 2021 14:11:58 GMT", "id": "b0616e0e852b664c8a125a29b0b241e46a10eba6" } ], "v8": [] } }, { "cve": "CVE-2022-0101", "date": "Tue, 14 Sep 2021 04:55:54 GMT", "description": "Heap buffer overflow in Bookmarks. Reported by raven (@raid_akame)\u00a0", "issue_id": 1249426, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 14 Dec 2021 19:49:55 GMT", "id": "875cf9db390cfab678180aa3719d8a14ec519199" }, { "date": "Fri, 10 Dec 2021 02:10:34 GMT", "id": "7c66fad9cd7633ed04890e84cc0c13b26b5cce1c" }, { "date": "Tue, 14 Dec 2021 20:26:46 GMT", "id": "8f92f216b788253fb0d2b06929129209d01ed233" }, { "date": "Tue, 14 Dec 2021 20:18:26 GMT", "id": "a61ca664b411b5d78a39f7038b4037e80ce4faa1" } ], "v8": [] } }, { "cve": "CVE-2021-38022", "date": "Mon, 13 Sep 2021 00:00:00 GMT", "description": "Inappropriate implementation in WebAuthentication. Reported by Michal Kepkowski", "issue_id": 1248862, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Mon, 04 Oct 2021 20:51:11 GMT", "id": "8d55b45d41fe5046dd07074ca8d66e324dbfbc11" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 10 Sep 2021 19:35:40 GMT", "description": "internal security issue", "issue_id": 1248665, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 17 Sep 2021 10:34:12 GMT", "id": "0a0d0c12a7a9957765eb3727505dc79c6947f65d" } ], "v8": [] } }, { "cve": "CVE-2021-37982", "date": "Fri, 10 Sep 2021 19:14:16 GMT", "description": "Use after free in Incognito. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1248661, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 16 Sep 2021 13:42:33 GMT", "id": "bc872c1dbed0bfddf48b4a58b1399121eec4fd16" }, { "date": "Fri, 17 Sep 2021 18:58:13 GMT", "id": "45d44b48832dcee034def070e1a4f35e7b2c51b4" } ], "v8": [] } }, { "cve": "CVE-2021-38014", "date": "Fri, 10 Sep 2021 14:03:36 GMT", "description": "Out of bounds write in Swiftshader. Reported by Atte Kettunen of OUSPG", "issue_id": 1248567, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 22 Sep 2021 20:29:21 GMT", "id": "d38c55d07e913fd1d313dc3c3bab16b0ae26a005" } ], "v8": [] } }, { "cve": "CVE-2022-0108", "date": "Fri, 10 Sep 2021 09:06:34 GMT", "description": "Inappropriate implementation in Navigation. Reported by Luan Herrera (@lbherrera_)", "issue_id": 1248444, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 14 Oct 2021 20:24:32 GMT", "id": "5f8ddef5a678553c9bb1491cd5710788e6d571b3" } ], "v8": [] } }, { "cve": "CVE-2022-0107", "date": "Fri, 10 Sep 2021 08:36:42 GMT", "description": "Use after free in File Manager API. Reported by raven (@raid_akame)\u00a0", "issue_id": 1248438, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 12 Oct 2021 01:48:55 GMT", "id": "6fbc440cbe7f71e88170624b2fa76470d0cc4885" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 09 Sep 2021 19:09:39 GMT", "description": "internal security issue", "issue_id": 1248289, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 28 Sep 2021 11:04:14 GMT", "id": "c482ebfa2119d4b62fe964b8d05ec9ff8fed4525" }, { "date": "Wed, 22 Sep 2021 01:36:39 GMT", "id": "e251fd92eafd38c38e3f21fa80e49c992ac5b997" }, { "date": "Tue, 21 Sep 2021 09:31:23 GMT", "id": "fda85ae58f7d3483b57f02973015f0bdbc597f19" }, { "date": "Thu, 11 Nov 2021 00:22:44 GMT", "id": "c170741a3aa0cbb11f3622cdec8248fcf7a180c4" } ], "v8": [] } }, { "cve": "CVE-2021-37970", "date": "Thu, 09 Sep 2021 05:21:28 GMT", "description": "Use after free in File System API. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1248030, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 15 Sep 2021 23:57:27 GMT", "id": "4e528a5a8d839f8b382d25821a2807546f97d2cc" }, { "date": "Wed, 29 Sep 2021 08:20:51 GMT", "id": "f703dacd1a1d9a80cd7486cdb1936f11ef8138a5" }, { "date": "Fri, 10 Sep 2021 21:13:44 GMT", "id": "951339b41022b08a67ad94ba5960b05c84bf4cf2" }, { "date": "Mon, 13 Sep 2021 23:19:52 GMT", "id": "bfc77020c6ffcaf5216577ba2e5dc7344d0f5fd6" } ], "v8": [] } }, { "cve": "CVE-2021-30632", "date": "Wed, 08 Sep 2021 00:00:00 GMT", "description": "Out of bounds write in V8. Reported by Anonymous", "issue_id": 1247763, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 10 Sep 2021 15:53:41 GMT", "id": "ce925698c1af985bb559c194eb6a09aab02c6be7" }, { "date": "Thu, 16 Sep 2021 11:10:35 GMT", "id": "2d3128a5b6fa1ca04b4ebe4aa37d5f616b8d0518" }, { "date": "Thu, 09 Sep 2021 14:10:44 GMT", "id": "6391d7a58d0c58cd5d096d22453b954b3ecc6fec" }, { "date": "Fri, 10 Sep 2021 15:52:22 GMT", "id": "034c2003be31e50e7beb6a9f113e68142b7f4122" }, { "date": "Tue, 14 Sep 2021 08:19:44 GMT", "id": "fdec800c5d7088ddd66e321e4bcf2f844b5e328f" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" } ] } }, { "cve": "CVE-2021-30633", "date": "Wed, 08 Sep 2021 00:00:00 GMT", "description": "Use after free in Indexed DB API. Reported by Anonymous", "issue_id": 1247766, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 15 Sep 2021 18:20:40 GMT", "id": "d8a607f299fb70dac7f3421f39a8c29dec717001" }, { "date": "Thu, 16 Sep 2021 22:27:54 GMT", "id": "58d1fb68915af2a22a15e9c3d5f31e7716d5f59b" }, { "date": "Thu, 09 Sep 2021 18:44:21 GMT", "id": "ec3ddd67bae4c491ec1faba7be7cc988c425506c" }, { "date": "Thu, 16 Sep 2021 20:36:52 GMT", "id": "77bff77decf5181ee2719111787f3c597228dd76" }, { "date": "Fri, 17 Sep 2021 17:39:44 GMT", "id": "2e5c4e4706cf569ce46cdd68313fbeab1b376bbb" }, { "date": "Fri, 10 Sep 2021 22:37:26 GMT", "id": "2f5740f50f1a94c9baf90903553a4c5af1d09b9a" }, { "date": "Sat, 11 Sep 2021 09:03:33 GMT", "id": "49eeb9a2812d1c8ec5925d3c1b167e349146f668" }, { "date": "Sat, 11 Sep 2021 00:11:25 GMT", "id": "188d539dd53c0364fea623e0473be66da1647e42" }, { "date": "Fri, 10 Sep 2021 21:31:17 GMT", "id": "7699615c0d3ca4b6231c426ad51710e5f2fc51aa" }, { "date": "Fri, 10 Sep 2021 18:53:33 GMT", "id": "f9bf7be854ed80a792953e94dd56e1269a5bbe98" }, { "date": "Thu, 16 Sep 2021 11:00:12 GMT", "id": "1996efe1f9cfaf44afa2536d6d342e5282c90866" }, { "date": "Fri, 10 Sep 2021 19:48:01 GMT", "id": "5245fed81abc0cf0dae79c64b7392317cc953116" }, { "date": "Fri, 17 Sep 2021 08:55:00 GMT", "id": "37b2acf7cef4163c83573d5c6d0a3905b69477bc" } ], "v8": [] } }, { "cve": "CVE-2021-37990", "date": "Tue, 07 Sep 2021 13:50:53 GMT", "description": "Inappropriate implementation in WebView. Reported by Kareem Selim of CyShield", "issue_id": 1247395, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$N/A", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 15 Sep 2021 13:20:40 GMT", "id": "0f6896bd5e12865dfc5b5fc17967694a331f0aed" }, { "date": "Fri, 10 Sep 2021 22:27:38 GMT", "id": "023cb4ea8be6746453af81afcf0e6db7cad21150" } ], "v8": [] } }, { "cve": "CVE-2022-0337", "date": "Tue, 07 Sep 2021 13:40:09 GMT", "description": "Inappropriate implementation in File System API. Reported by Maciej Pulikowski", "issue_id": 1247389, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [], "v8": [] } }, { "cve": "CVE-2021-37979", "date": "Tue, 07 Sep 2021 06:54:56 GMT", "description": "Heap buffer overflow in WebRTC. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1247260, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 29 Nov 2021 14:58:54 GMT", "id": "24c201444aee8a545e8daa9c8fa3a703f1876565" }, { "date": "Fri, 01 Oct 2021 19:18:45 GMT", "id": "36e370cf4db9aee828ca327245d51ab042e8d3ae" }, { "date": "Tue, 28 Sep 2021 00:02:06 GMT", "id": "3ede49de5e3416d33e9c87e0ee08b9c2441b0513" } ], "v8": [] } }, { "cve": "CVE-2021-37981", "date": "Sat, 04 Sep 2021 08:25:35 GMT", "description": "Heap buffer overflow in Skia. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1246631, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 27 Oct 2021 08:18:46 GMT", "id": "2674b3f6170ca4c3d60594cb70a4d2f57fe5b2d7" }, { "date": "Wed, 15 Sep 2021 18:16:16 GMT", "id": "2e7c9b33453b999317c410730c8290ddf869648a" }, { "date": "Mon, 13 Sep 2021 17:33:46 GMT", "id": "a656373ae7212e0d88474bdec4691a4152452748" } ], "v8": [] } }, { "cve": "CVE-2022-1138", "date": "Thu, 02 Sep 2021 16:32:20 GMT", "description": "Inappropriate implementation in Web Cursor. Reported by Alesandro Ortiz", "issue_id": 1246188, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 01 Feb 2022 01:47:47 GMT", "id": "38a8343085e53889eba48fcff78a6c2295927333" }, { "date": "Fri, 28 Jan 2022 01:49:41 GMT", "id": "868b44dd8b4a1a3b9698f561ca17f75e4ec78dd2" }, { "date": "Tue, 01 Feb 2022 21:16:10 GMT", "id": "1665a1d16d46fc39da7bf220a85c4ee38cd99d25" } ], "v8": [] } }, { "cve": "CVE-2021-37969", "date": "Wed, 01 Sep 2021 20:39:01 GMT", "description": "Inappropriate implementation in Google Updater. Reported by Abdelhamid Naceri (halov)", "issue_id": 1245879, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [], "v8": [] } }, { "cve": "none", "date": "Wed, 01 Sep 2021 19:32:27 GMT", "description": "internal security issue", "issue_id": 1245870, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 04 Feb 2021 22:30:08 GMT", "id": "9ace56c6420d599d3a694e5d829c654c30cee72e" }, { "date": "Fri, 05 Feb 2021 03:12:05 GMT", "id": "6b8fd748df6b99748557db8f308e6cb84ec02338" }, { "date": "Fri, 05 Feb 2021 04:12:14 GMT", "id": "20ba535452c8a62036f32cb4cd70fbd832f200ee" }, { "date": "Thu, 04 Feb 2021 20:50:18 GMT", "id": "d87aaec03045e7775e9b2199d93284b2fc014084" }, { "date": "Fri, 05 Feb 2021 02:26:25 GMT", "id": "189bb86749cff6954174ceac6ae0f2571091c617" }, { "date": "Fri, 05 Feb 2021 02:10:47 GMT", "id": "3b861aa160e4262de8ae6985a429e024fe5a9076" }, { "date": "Thu, 04 Feb 2021 22:56:48 GMT", "id": "2c9acc880a905d48596470ef06e4b73b1ae19936" }, { "date": "Thu, 04 Feb 2021 20:32:18 GMT", "id": "c7fb55569341fcfb4625c16e6ce840c6472816d5" } ], "v8": [ { "date": "Fri, 03 Sep 2021 11:15:03 GMT", "id": "6de4e210688e68318670dc5a2863ebcfcd71788e" }, { "date": "Mon, 08 Nov 2021 12:50:25 GMT", "id": "d097b9f8b56453418bb03410289cf11c733f92f0" } ] } }, { "cve": "CVE-2021-30627", "date": "Wed, 01 Sep 2021 14:24:51 GMT", "description": "Type Confusion in Blink layout. Reported by Aki Helin of OUSPG", "issue_id": 1245786, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 23:02:44 GMT", "id": "d760d2ae1d51c0b4fda87a0a3af4e7ed30d2ff4c" }, { "date": "Thu, 02 Sep 2021 19:04:20 GMT", "id": "bbd315efb49a4ae257509dd0f0d85c6b5906e0e4" }, { "date": "Thu, 09 Sep 2021 23:20:48 GMT", "id": "8623d711677dcda77a54e84955c96c71040573d6" }, { "date": "Thu, 16 Sep 2021 11:29:42 GMT", "id": "eaed84eec02939de6b18a7dedd224bee31ddde48" } ], "v8": [] } }, { "cve": "CVE-2022-0099", "date": "Wed, 01 Sep 2021 06:41:03 GMT", "description": "Use after free in Sign-in. Reported by Rox", "issue_id": 1245629, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 11:15:00 GMT", "id": "98d542e27f9c87cf0fce0cbd8615594ca8e4d2b9" }, { "date": "Sat, 05 Feb 2022 13:29:57 GMT", "id": "5440642a53181a716e6018ec6c8b79e4ac8ded77" }, { "date": "Thu, 18 Nov 2021 13:01:38 GMT", "id": "c5e30ea5d1bcd339715df71b364b8b6243c36f2c" } ], "v8": [] } }, { "cve": "CVE-2021-37974", "date": "Wed, 01 Sep 2021 03:34:12 GMT", "description": "Use after free in Safe Browsing. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1245578, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 22:25:30 GMT", "id": "e7d560979f89705ea2844f9f64b5c7a598a03f2b" }, { "date": "Tue, 28 Sep 2021 19:16:15 GMT", "id": "edbb462a3b0c5f9528cf8d7cb982bb5ddc0b5cc1" }, { "date": "Wed, 06 Oct 2021 15:25:10 GMT", "id": "65e7f7c5442eb4860ddd647d98936cacfeec2d1b" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 31 Aug 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1221047, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 20 Aug 2021 00:52:03 GMT", "id": "d1eade9d390c6c6c8b29381d099b2294012d2ebd" }, { "date": "Tue, 27 Jul 2021 01:33:49 GMT", "id": "c06b3928469bfd0e0a9fa6045b95a7be70ef393f" }, { "date": "Thu, 19 Aug 2021 21:16:20 GMT", "id": "d061be0d9439196c73f7b02b0471ddb929d86d2d" }, { "date": "Fri, 10 Sep 2021 13:40:29 GMT", "id": "00c8342b591163ae1706125bb96509b07071d1bf" } ], "v8": [] } }, { "cve": "CVE-2021-37968", "date": "Mon, 30 Aug 2021 13:48:11 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by Maurice Dauer\u00a0", "issue_id": 1245053, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 07 Sep 2021 20:14:30 GMT", "id": "096afc1c5428d035b5166b7f279bdff7a5e2cbfa" }, { "date": "Fri, 03 Sep 2021 15:20:43 GMT", "id": "26be5702dab1d98e4d4b076a73d4688d20c043be" }, { "date": "Wed, 29 Sep 2021 14:40:47 GMT", "id": "e8a5cefd1aac01a460129a800c88c3acc59a0a29" } ], "v8": [] } }, { "cve": "CVE-2021-30630", "date": "Mon, 30 Aug 2021 05:54:47 GMT", "description": "Inappropriate implementation in Blink . Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1244568, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 09 Sep 2021 12:50:45 GMT", "id": "3fabcee42cb83e42f86263f8c7b4be9cd0ef6275" }, { "date": "Thu, 09 Sep 2021 11:16:13 GMT", "id": "3907d1140b44cac8f2eb71bcc9ec88d4d3e5b2af" }, { "date": "Thu, 16 Sep 2021 10:42:52 GMT", "id": "dcad2b2a1a2656654a73486499c4c461bd6387c8" }, { "date": "Mon, 06 Sep 2021 16:09:15 GMT", "id": "6ef569fd764a8e5f8fba4dcff830d460e406362b" } ], "v8": [] } }, { "cve": "CVE-2021-38016", "date": "Sat, 28 Aug 2021 04:14:13 GMT", "description": "Insufficient policy enforcement in background fetch. Reported by Maurice Dauer\u00a0", "issue_id": 1244289, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 06 Oct 2021 09:40:39 GMT", "id": "0f21e4d56847aecb3af7861b3e4ec9a4aaf47ca7" }, { "date": "Tue, 12 Oct 2021 15:05:10 GMT", "id": "fd260c29e002327aa30d4ee4c434880e273bd935" }, { "date": "Tue, 28 Sep 2021 22:25:59 GMT", "id": "91049ef77f5e1e7faf62ccf5ea059ce950324991" } ], "v8": [] } }, { "cve": "CVE-2022-0459", "date": "Fri, 27 Aug 2021 15:40:15 GMT", "description": "Use after free in Screen Capture. Reported by raven (@raid_akame)", "issue_id": 1244205, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 13 Jan 2022 19:47:07 GMT", "id": "5853e2baadfb4d13a6c62b7187d5cf12b3ce9f18" }, { "date": "Fri, 21 Jan 2022 23:19:46 GMT", "id": "769587ca2c8b060dad88264e16c0a42442041411" } ], "v8": [] } }, { "cve": "CVE-2021-30629", "date": "Thu, 26 Aug 2021 04:24:43 GMT", "description": "Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1243646, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Sep 2021 11:57:02 GMT", "id": "58d05cfd21cd936120711f0337949eb6bc47e1c2" }, { "date": "Wed, 08 Sep 2021 08:25:24 GMT", "id": "af1bad5fb8d2c020c77a27f81244b690103bad67" }, { "date": "Wed, 08 Sep 2021 08:25:28 GMT", "id": "3617086618ea350a7b181ae349264b6b5f9007ef" }, { "date": "Sat, 04 Sep 2021 11:49:22 GMT", "id": "23ccfc423283b80da0f0beaa77f11d43ad4f7648" } ], "v8": [] } }, { "cve": "CVE-2021-37967", "date": "Thu, 26 Aug 2021 02:31:48 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1243622, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 07 Sep 2021 19:35:02 GMT", "id": "f2fd53c6d70614bdf1f38d7ff22a0299535dfed3" }, { "date": "Wed, 01 Sep 2021 18:12:45 GMT", "id": "d97b8b86be732448cbc57b47f6b46547c9866df3" }, { "date": "Wed, 29 Sep 2021 14:24:18 GMT", "id": "efd8e01ac1a6e8686cbf03f4f8e6d5a9a7160df6" } ], "v8": [] } }, { "cve": "CVE-2021-37956", "date": "Tue, 24 Aug 2021 16:59:35 GMT", "description": "Use after free in Offline use. Reported by Huyna at Viettel Cyber Security", "issue_id": 1243117, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 07 Sep 2021 21:25:59 GMT", "id": "31d14e25dc829f25a039a1c963ef0ad43157fff4" }, { "date": "Thu, 02 Sep 2021 21:26:00 GMT", "id": "3b3c8c1619e1f6d0323bd613128bfe7e003c3044" } ], "v8": [] } }, { "cve": "CVE-2022-0800", "date": "Tue, 24 Aug 2021 09:23:15 GMT", "description": "Heap buffer overflow in Cast UI. Reported by Khalil Zhani", "issue_id": 1242962, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$7000", "severity": "Medium", "commit": { "chromium": [ { "date": "Sat, 08 Jan 2022 05:28:27 GMT", "id": "823301b29d38ed1d393c1488c0f7069d229a2d74" } ], "v8": [] } }, { "cve": "CVE-2021-37996", "date": "Tue, 24 Aug 2021 00:00:00 GMT", "description": "Insufficient validation of untrusted input in Downloads. Reported by Anonymous", "issue_id": 1243020, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 31 Aug 2021 23:03:03 GMT", "id": "0894af410c4e02dca52e846fb76544f5d6d60285" } ], "v8": [] } }, { "cve": "CVE-2021-37986", "date": "Mon, 23 Aug 2021 07:32:05 GMT", "description": "Heap buffer overflow in Settings. Reported by raven (@raid_akame)\u00a0", "issue_id": 1242404, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$6000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 26 Oct 2021 13:49:04 GMT", "id": "73f05938f913cdd42142bc0bf2fe355b6d0e439e" }, { "date": "Thu, 02 Sep 2021 07:07:58 GMT", "id": "f59d2d874a6f757bf8c8c3297b39852b71ca701a" } ], "v8": [] } }, { "cve": "CVE-2021-38013", "date": "Mon, 23 Aug 2021 06:54:26 GMT", "description": "Heap buffer overflow in fingerprint recognition. Reported by raven (@raid_akame)", "issue_id": 1242392, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$10000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 10 Sep 2021 17:33:20 GMT", "id": "57def0f4c02587a7758edde865de044336193185" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 23 Aug 2021 03:56:12 GMT", "description": "internal security issue", "issue_id": 1242339, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Tue, 14 Dec 2021 13:58:43 GMT", "id": "fd38e83885bdcafb069d4f273609e2cec44b87a7" }, { "date": "Fri, 10 Dec 2021 12:59:31 GMT", "id": "6d7ed2e8707cb865408da6a04d645c65553cd0b1" }, { "date": "Tue, 14 Dec 2021 13:59:45 GMT", "id": "1c93e2afc8e81845b04aab43cfb821faad35df5c" } ] } }, { "cve": "CVE-2021-37995", "date": "Mon, 23 Aug 2021 02:03:02 GMT", "description": "Inappropriate implementation in WebApp Installer. Reported by Terence Eden", "issue_id": 1242315, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$1000", "severity": "Low", "commit": { "chromium": [ { "date": "Mon, 30 Aug 2021 03:52:59 GMT", "id": "b46122bc45580337bf682442a6251b11700aa000" }, { "date": "Thu, 26 Aug 2021 11:33:21 GMT", "id": "c6ff7cf538252086d2d14d8ba7a7a754be26aa67" } ], "v8": [] } }, { "cve": "CVE-2021-37957", "date": "Sun, 22 Aug 2021 21:24:53 GMT", "description": "Use after free in WebGPU. Reported by Looben Yang", "issue_id": 1242269, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 27 Aug 2021 22:15:12 GMT", "id": "412b407353a9801468abd04ff43be6e3783a9e0d" }, { "date": "Thu, 07 Oct 2021 16:33:12 GMT", "id": "f93276bd4ef5280180d4b342fb40c1d0b1adef89" }, { "date": "Tue, 31 Aug 2021 14:57:06 GMT", "id": "2f591523e5db5010b06b52cc1cdc72c1c233aec1" }, { "date": "Mon, 30 Aug 2021 18:11:13 GMT", "id": "db180784a4d3a704ca12f4475b35149d6af5174c" } ], "v8": [] } }, { "cve": "none", "date": "Sun, 22 Aug 2021 20:52:30 GMT", "description": "internal security issue", "issue_id": 1242257, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 07 Sep 2021 21:48:36 GMT", "id": "091d66b700aec94848927f46b7a5a4465d62ac16" }, { "date": "Thu, 02 Sep 2021 23:53:44 GMT", "id": "7c0b0577c3ac1060945b7d05ad69f0dec33479b4" }, { "date": "Wed, 08 Sep 2021 18:45:42 GMT", "id": "6215793f008fdf98124e695eca738c05db3f13b0" }, { "date": "Thu, 16 Sep 2021 11:34:12 GMT", "id": "30b6e9bf0a7cfe35ffa70c3377f25cbf13fd158e" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 20 Aug 2021 12:12:40 GMT", "description": "internal security issue", "issue_id": 1241912, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 23 Aug 2021 19:05:54 GMT", "id": "fafa9a5d96cb7fde50f1737712f224c5a861a603" }, { "date": "Tue, 26 Oct 2021 12:53:15 GMT", "id": "a30b5dbe9cb1054909dcf39a42874a0938212eff" } ], "v8": [] } }, { "cve": "CVE-2021-37985", "date": "Fri, 20 Aug 2021 08:32:10 GMT", "description": "Use after free in V8. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1241860, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 22 Nov 2021 12:05:43 GMT", "id": "d3001a648110af5b6816c53498f20e73b0532723" }, { "date": "Wed, 20 Apr 2022 18:36:13 GMT", "id": "5c69380bb74de237634211a133393fff9aa9caa0" }, { "date": "Wed, 15 Sep 2021 15:02:36 GMT", "id": "fe81bbc71b9893a4333a92fc82026d90a3b6c5de" }, { "date": "Thu, 09 Sep 2021 13:49:36 GMT", "id": "c8abd833c7f03877ae9082afe91db5862558625f" } ], "v8": [ { "date": "Tue, 12 Oct 2021 17:02:27 GMT", "id": "29be6884cb8ac974de67691e35951a827a4bb186" }, { "date": "Thu, 09 Sep 2021 15:29:54 GMT", "id": "25d5e5081280115348a237add544adfa0f43bc02" }, { "date": "Thu, 16 Sep 2021 08:45:11 GMT", "id": "7994004493df2c9a24372587312ef6c458c7ed2b" } ] } }, { "cve": "none", "date": "Thu, 19 Aug 2021 13:33:23 GMT", "description": "internal security issue", "issue_id": 1241585, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 18 Jan 2022 22:20:27 GMT", "id": "c24bde01e377a8be7742826891857312eec278a6" }, { "date": "Fri, 03 Dec 2021 01:20:12 GMT", "id": "43d9f115a8264e6a95840a233a6b971d9ad6d46f" }, { "date": "Tue, 18 Jan 2022 22:26:58 GMT", "id": "2f8ad20e36aae6083bfd7c95734313ea3b6d9da8" } ], "v8": [] } }, { "cve": "CVE-2022-0111", "date": "Wed, 18 Aug 2021 14:33:45 GMT", "description": "Inappropriate implementation in Navigation. Reported by garygreen", "issue_id": 1241188, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 29 Oct 2021 21:19:29 GMT", "id": "2d916566085e4f09bca93021f2b1650ea6237077" }, { "date": "Thu, 28 Oct 2021 19:19:49 GMT", "id": "da0a6501cf321579bd46a27ff9fba1bb8ea910bb" }, { "date": "Tue, 09 Nov 2021 15:48:30 GMT", "id": "579df7b562fd2a85591e44fd314a1710c93e6901" }, { "date": "Thu, 28 Oct 2021 22:04:50 GMT", "id": "a6601b2cf2bb7c0a0ffa3c795a0dbc730ef81d1a" } ], "v8": [] } }, { "cve": "CVE-2021-30628", "date": "Wed, 18 Aug 2021 11:30:14 GMT", "description": "Stack buffer overflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori", "issue_id": 1241123, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 16 Sep 2021 12:38:23 GMT", "id": "d272bf701fe2a448f58d6bcaecb0134a2acb9a7c" }, { "date": "Tue, 01 Feb 2022 03:31:37 GMT", "id": "0c51b54c2ff10a9e35144e4359825abd7246510f" }, { "date": "Fri, 03 Sep 2021 22:51:47 GMT", "id": "8ef1e4544ed5214608039d969940347d8f98e543" }, { "date": "Thu, 09 Sep 2021 19:57:17 GMT", "id": "5e71bf44897b6741994978e25315f7936ba848d5" }, { "date": "Thu, 09 Sep 2021 20:00:43 GMT", "id": "13842c96c2926db7b11c6851d959bc88d76956f3" }, { "date": "Thu, 09 Sep 2021 20:00:08 GMT", "id": "d5be352cb121d3836b075f500ae7977ad0d9b8fa" }, { "date": "Sat, 04 Sep 2021 05:17:14 GMT", "id": "13813150f6d357dea403b16b8162a1e813f782ab" } ], "v8": [] } }, { "cve": "CVE-2021-38005", "date": "Wed, 18 Aug 2021 10:28:42 GMT", "description": "Use after free in loader. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1241091, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 09 Nov 2021 09:03:17 GMT", "id": "bbca3704f97e10e0d8e44be4dee4ec7ad9cc0683" }, { "date": "Fri, 29 Oct 2021 16:54:36 GMT", "id": "fd794ad56432870e462aab9d62e4f059169c1a5f" }, { "date": "Tue, 09 Nov 2021 14:10:59 GMT", "id": "f2b0985ac3b197b4a74e2d334558130df6022029" }, { "date": "Tue, 09 Nov 2021 05:02:50 GMT", "id": "56de3b20046891a5c2ec1e68964bd482d841d1cf" }, { "date": "Tue, 02 Nov 2021 17:25:59 GMT", "id": "f0375e38d259b3651fd9f305ca2e723ca9c02c64" }, { "date": "Mon, 01 Nov 2021 13:03:19 GMT", "id": "dad0c0e5162bcc49b8f60354d3bca92224d8381b" } ], "v8": [] } }, { "cve": "CVE-2021-30626", "date": "Wed, 18 Aug 2021 07:40:08 GMT", "description": "Out of bounds memory access in ANGLE. Reported by Jeonghoon Shin of Theori", "issue_id": 1241036, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 02 Sep 2021 21:59:24 GMT", "id": "aa6d266ecd709a83d707a2212fa52135f7d02de4" } ], "v8": [] } }, { "cve": "CVE-2021-38006", "date": "Tue, 17 Aug 2021 06:08:37 GMT", "description": "Use after free in storage foundation. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1240593, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 10 Nov 2021 02:21:35 GMT", "id": "46205bfbeead3e4739a68ce1520f590fd2e07e5d" }, { "date": "Wed, 10 Nov 2021 02:05:50 GMT", "id": "7dc02206707362f3f92cea93f8eb2fa4af0d375f" }, { "date": "Thu, 11 Nov 2021 00:22:30 GMT", "id": "6bb320d134b18f992966d853d5b4a272d9bfd745" }, { "date": "Wed, 10 Nov 2021 22:38:27 GMT", "id": "db5702e2ef113053792fd617c70c6242f198c8f6" }, { "date": "Wed, 10 Nov 2021 04:12:11 GMT", "id": "ef1bddb45b72ec0cb9a9e513671d3b539ee10543" } ], "v8": [] } }, { "cve": "CVE-2022-0309", "date": "Mon, 16 Aug 2021 21:15:04 GMT", "description": "Inappropriate implementation in Autofill. Reported by Alesandro Ortiz", "issue_id": 1240472, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 18 Jan 2022 22:20:27 GMT", "id": "c24bde01e377a8be7742826891857312eec278a6" }, { "date": "Fri, 03 Dec 2021 01:20:12 GMT", "id": "43d9f115a8264e6a95840a233a6b971d9ad6d46f" }, { "date": "Tue, 18 Jan 2022 22:26:58 GMT", "id": "2f8ad20e36aae6083bfd7c95734313ea3b6d9da8" } ], "v8": [] } }, { "cve": "CVE-2021-4054", "date": "Fri, 13 Aug 2021 15:07:48 GMT", "description": "Incorrect security UI in autofill. Reported by Alesandro Ortiz", "issue_id": 1239760, "post_url": "https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 30 Nov 2021 21:31:46 GMT", "id": "92860f86a38c3b10fe142ff2beabfb559b97cf8a" }, { "date": "Tue, 30 Nov 2021 19:59:03 GMT", "id": "f601a5c8b59f1a4a78329c7ccce42096f9b73c53" }, { "date": "Thu, 02 Dec 2021 23:32:07 GMT", "id": "b0e7d9dceedcd003910d4cb7ea5b28f446d38620" }, { "date": "Wed, 24 Nov 2021 20:16:32 GMT", "id": "3fb0945de5e50b8e6d2f9b0dd8a65e3f7a767b14" } ], "v8": [] } }, { "cve": "CVE-2021-37965", "date": "Fri, 13 Aug 2021 12:58:45 GMT", "description": "Inappropriate implementation in Background Fetch API. Reported by Maurice Dauer\u00a0", "issue_id": 1239709, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 23 Aug 2021 21:01:15 GMT", "id": "32d5b602e41f0add9f31c357c19a626af4deecdf" }, { "date": "Mon, 23 Aug 2021 19:11:03 GMT", "id": "12da809487100d8335a6f50dd6a814cdc92daae4" }, { "date": "Fri, 20 Aug 2021 18:43:29 GMT", "id": "872af4e5af5d5ad03689ca643642720ecbad01dc" }, { "date": "Thu, 19 Aug 2021 19:46:41 GMT", "id": "e49b65794098938907203cc55978ac41f3d43d8b" }, { "date": "Tue, 07 Sep 2021 20:34:32 GMT", "id": "b835de9c65493eed076b88dad896e603386d1988" }, { "date": "Thu, 26 Aug 2021 17:26:27 GMT", "id": "ac6fd82797687ced97d2a1a720563f2eeb488764" }, { "date": "Thu, 19 Aug 2021 17:46:51 GMT", "id": "1979a70b5318d35200b65435bed9475be7e4a462" }, { "date": "Mon, 06 Sep 2021 15:44:27 GMT", "id": "978a8d2772dbab2ae7a7ccb974da6f6d4502533e" }, { "date": "Fri, 27 Aug 2021 12:37:46 GMT", "id": "83debf3955b418725b97f33c39023c05af6d694f" }, { "date": "Fri, 20 Aug 2021 17:27:49 GMT", "id": "6e18e0def715b5ccf65855963273dff0ec64871e" } ], "v8": [] } }, { "cve": "CVE-2021-30609", "date": "Fri, 13 Aug 2021 05:00:57 GMT", "description": "Use after free in Sign-In. Reported by raven (@raid_akame)\u00a0", "issue_id": 1239595, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 10 Sep 2021 12:42:19 GMT", "id": "f0c435c669c0ec2536b6ffa432d2c26179bbc051" }, { "date": "Fri, 20 Aug 2021 10:14:24 GMT", "id": "47aafec6a63fb33855fc044a963ea1d98582b4d4" }, { "date": "Mon, 16 Aug 2021 19:20:01 GMT", "id": "d710b5cdbb18ac8e880afd3c9340106006a9f744" }, { "date": "Fri, 20 Aug 2021 14:20:31 GMT", "id": "e6287018f202c1f29533c04fe2acef8682969c43" }, { "date": "Fri, 27 Aug 2021 07:01:15 GMT", "id": "b9aac92988ade33b262ab46bbf7727cc2f7207da" } ], "v8": [] } }, { "cve": "CVE-2022-0467", "date": "Thu, 12 Aug 2021 23:09:28 GMT", "description": "Inappropriate implementation in Pointer Lock. Reported by Alesandro Ortiz", "issue_id": 1239496, "post_url": "https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 08 Dec 2021 03:50:33 GMT", "id": "cf3e0d913e2374e2d783ceecbccc4b400d26fa39" }, { "date": "Wed, 24 Nov 2021 19:30:23 GMT", "id": "72ea510dc8941021f255a8b65d9f698c364c36b4" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 11 Aug 2021 22:49:48 GMT", "description": "internal security issue", "issue_id": 1239116, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Tue, 17 Aug 2021 09:25:37 GMT", "id": "7e80c0b159804ae3249294de345f1f5c99f0672c" }, { "date": "Tue, 17 Aug 2021 09:28:31 GMT", "id": "22ac64ccbdc0f74d0488884a7d35ef546727b6cc" }, { "date": "Tue, 17 Aug 2021 09:29:33 GMT", "id": "68cadfe8e718b350ecaa41eb8d7207afbeb17709" }, { "date": "Tue, 24 Aug 2021 06:00:13 GMT", "id": "70d7f116f7893678b78d4262a23b53fcf7fe7b98" }, { "date": "Fri, 13 Aug 2021 15:22:23 GMT", "id": "748ae7cbf4d747906eb34bbe5def5433734fbf7d" }, { "date": "Tue, 21 Sep 2021 09:37:17 GMT", "id": "72abfdc763f196563c0dede26d4947cb82f5394b" }, { "date": "Fri, 13 Aug 2021 15:48:46 GMT", "id": "4d0730084da9ee790363979b51f93d1465708e9e" }, { "date": "Tue, 17 Aug 2021 09:24:17 GMT", "id": "140da1cf0d80498ede8b8de918516ea4a8829e26" } ] } }, { "cve": "CVE-2021-37966", "date": "Wed, 11 Aug 2021 12:41:31 GMT", "description": "Inappropriate implementation in Compositing. Reported by Mohit Raj (shadow2639)\u00a0", "issue_id": 1238944, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 05 Feb 2019 18:21:38 GMT", "id": "deeaecd5d21a4e528ef82f50458a2c09df8e58b3" }, { "date": "Tue, 14 Sep 2021 19:36:56 GMT", "id": "6eaf3545f9900db8e6d626153f0d8d7d6467e8c6" }, { "date": "Wed, 01 Sep 2021 22:20:16 GMT", "id": "b4716d00f31a31f81bd2f2a464b88c3d9a38ad34" } ], "v8": [] } }, { "cve": "CVE-2022-0118", "date": "Tue, 10 Aug 2021 20:51:08 GMT", "description": "Inappropriate implementation in WebShare. Reported by Alesandro Ortiz", "issue_id": 1238631, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Thu, 04 Nov 2021 21:12:30 GMT", "id": "c829098b81e868baa40a8fe7d113fc17b37ee2d2" } ], "v8": [] } }, { "cve": "CVE-2022-0100", "date": "Mon, 09 Aug 2021 21:46:51 GMT", "description": "Heap buffer overflow in Media streams API. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.", "issue_id": 1238209, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 10 Dec 2021 11:58:29 GMT", "id": "fb6232ffb1fec14d64ec8815f7dfc2cea0887588" }, { "date": "Tue, 14 Dec 2021 21:17:06 GMT", "id": "d2bdf6fe2f821da478728b219b38cfb81843e63d" }, { "date": "Tue, 14 Dec 2021 16:35:05 GMT", "id": "5c41beab69428d8c3967cb12d31f921761b85fb4" }, { "date": "Tue, 14 Dec 2021 14:15:35 GMT", "id": "b54b3361b4b89e711e11f2053d7387a236090253" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 09 Aug 2021 17:49:39 GMT", "description": "internal security issue", "issue_id": 1238178, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 27 Aug 2021 02:56:32 GMT", "id": "094d85ffb5be107e3fbc563b7eae64d00a0886b9" }, { "date": "Wed, 29 Sep 2021 16:41:27 GMT", "id": "a745dcb91746ebf6d03e65b501e9979fa04a1320" }, { "date": "Fri, 03 Sep 2021 04:38:53 GMT", "id": "ddc4cf156505d62cb74868766c15628664cee4d8" }, { "date": "Mon, 23 Aug 2021 23:59:51 GMT", "id": "56489e04b7c39e7b6d2b3fb33549d2657dad23a9" }, { "date": "Thu, 26 Aug 2021 02:07:30 GMT", "id": "58eda7adb82e7fcc8001482334bfa6f9482aee78" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 09 Aug 2021 16:56:06 GMT", "description": "internal security issue", "issue_id": 1238158, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 26 Oct 2021 13:47:45 GMT", "id": "2f9b2177e6ad2e21f0d78810e7d5c3ac088d6d8c" }, { "date": "Mon, 23 Aug 2021 07:46:51 GMT", "id": "5a0ccd673d9af518013b35cb5b50c4a6d119affa" } ], "v8": [] } }, { "cve": "CVE-2021-30625", "date": "Fri, 06 Aug 2021 12:04:12 GMT", "description": "Use after free in Selection API. Reported by Marcin Towalski of Cisco Talos", "issue_id": 1237533, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 07 Sep 2021 21:21:46 GMT", "id": "6bf424362b615b227edf1d564555663b24bbccaf" }, { "date": "Wed, 29 Sep 2021 08:26:47 GMT", "id": "11ff9feda46c2d569bbf84f0e0614ed31e7a1df9" }, { "date": "Wed, 25 Aug 2021 20:50:40 GMT", "id": "2e2f1a09b9ea955912194c4dd4610b00b873efa4" }, { "date": "Tue, 24 Aug 2021 05:19:07 GMT", "id": "484bc1abffcdee33648695244c86daca15ab6539" }, { "date": "Tue, 07 Sep 2021 21:32:03 GMT", "id": "9723e3c13c8c3e72e0dfeacef00abc97e4a9e3b7" } ], "v8": [] } }, { "cve": "CVE-2022-0110", "date": "Thu, 05 Aug 2021 19:41:25 GMT", "description": "Incorrect security UI in Autofill. Reported by Alesandro Ortiz", "issue_id": 1237310, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 29 Oct 2021 20:28:32 GMT", "id": "33a92473a985268c5a1623e7cbe1a027d4b3520a" } ], "v8": [] } }, { "cve": "CVE-2022-1862", "date": "Wed, 04 Aug 2021 00:00:00 GMT", "description": "Inappropriate implementation in Extensions. Reported by Alesandro Ortiz", "issue_id": 1236325, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 24 Mar 2022 06:19:48 GMT", "id": "e2614a3e51ba8ad7dd25a6884d8a10aa1012fa0c" } ], "v8": [] } }, { "cve": "CVE-2021-37978", "date": "Tue, 03 Aug 2021 19:51:42 GMT", "description": "Heap buffer overflow in Blink. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1236318, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 03 Sep 2021 00:49:59 GMT", "id": "588cb74f661269a5b2b69f52619c0f7a09867d6f" }, { "date": "Mon, 04 Oct 2021 23:02:19 GMT", "id": "b2c4e4dc21e509207bfa4cfc6a32bd24fa3423d9" }, { "date": "Tue, 19 Oct 2021 08:35:51 GMT", "id": "7f0f370265cbf03329c7a2e22a12be0b3157047c" } ], "v8": [] } }, { "cve": "CVE-2021-30607", "date": "Mon, 02 Aug 2021 22:38:51 GMT", "description": "Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1235949, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 27 Aug 2021 16:02:01 GMT", "id": "0f8fb0ed80ec63dfe5969e0dd45499fba7aa8494" }, { "date": "Thu, 19 Aug 2021 11:10:45 GMT", "id": "c490819db1ce602f12bda83f55e12ba332fb57ff" }, { "date": "Mon, 23 Aug 2021 12:58:27 GMT", "id": "b0700526df65969f911e9cb8a8d3be70cb4badc4" }, { "date": "Fri, 27 Aug 2021 15:55:17 GMT", "id": "455b63779c76f8f171bf0d9b2909f7f962292a4e" } ], "v8": [] } }, { "cve": "CVE-2021-30619", "date": "Sun, 01 Aug 2021 23:15:57 GMT", "description": "UI Spoofing in Autofill. Reported by Alesandro Ortiz", "issue_id": 1235222, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 18:17:37 GMT", "id": "429a209f69cfb1736ff4bc2a4701f7be550887d3" }, { "date": "Tue, 10 Aug 2021 20:55:47 GMT", "id": "5ba7d1036f8c5eac49a0135ce6d79640951f0827" }, { "date": "Wed, 04 Aug 2021 20:12:13 GMT", "id": "c373e6393f376de7d3203a15dbfc3de80318c488" } ], "v8": [] } }, { "cve": "CVE-2021-30604", "date": "Fri, 30 Jul 2021 10:30:29 GMT", "description": "Use after free in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1234829, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 06 Aug 2021 21:52:13 GMT", "id": "e24e07aa7710da5a8b523fddf9d672ced8023113" }, { "date": "Sat, 14 Aug 2021 05:15:53 GMT", "id": "4b9a038fa410e5f4f03327451dafe545ad449702" } ], "v8": [] } }, { "cve": "CVE-2021-30599", "date": "Fri, 30 Jul 2021 06:49:10 GMT", "description": "Type Confusion in V8. Reported by Manfred Paul", "issue_id": 1234770, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$21000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Fri, 20 Aug 2021 15:47:44 GMT", "id": "a88e1f06e4fb5a3ef3a7c3d4166abd12e6718371" }, { "date": "Mon, 09 Aug 2021 08:42:15 GMT", "id": "2aee50cba1472d397f994760e46ecc7022359a37" }, { "date": "Tue, 03 Aug 2021 14:26:54 GMT", "id": "574ca6b71c6160d38b5fcf4b8e133bc7f6ba2387" }, { "date": "Mon, 09 Aug 2021 08:40:04 GMT", "id": "9418a915d91fc28f7b7dded0b460c111b28fb679" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" } ] } }, { "cve": "CVE-2021-30598", "date": "Fri, 30 Jul 2021 06:43:58 GMT", "description": "Type Confusion in V8. Reported by Manfred Paul", "issue_id": 1234764, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$21000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 10 Aug 2021 08:31:23 GMT", "id": "fc6818160b390034c249b7329f6c0be8e4f5b11b" }, { "date": "Mon, 09 Aug 2021 08:43:17 GMT", "id": "452d41efdf7107bd17e9b9887657a6e1018bccd8" }, { "date": "Tue, 03 Aug 2021 08:14:20 GMT", "id": "ca386a4b383165ccaed628c19a1366a273fa371e" }, { "date": "Mon, 23 Aug 2021 11:15:19 GMT", "id": "de534edddbe8e06ba060746375d296956cb40d5d" }, { "date": "Fri, 20 Aug 2021 15:48:46 GMT", "id": "fe05610f4425d1d79c79c16c68cfd308a115e56c" }, { "date": "Mon, 09 Aug 2021 08:41:13 GMT", "id": "e298903b7b05cb111b6ac2c02af1668097190af9" }, { "date": "Tue, 10 Aug 2021 08:30:20 GMT", "id": "85fcc01d0bfbf4de666cbb3a6ea3147b479a5a20" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" }, { "date": "Tue, 03 Aug 2021 08:27:21 GMT", "id": "65b20a0e65e1078f5dd230a5203e231bec790ab4" } ] } }, { "cve": "CVE-2021-30612", "date": "Thu, 29 Jul 2021 00:18:44 GMT", "description": "Use after free in WebRTC. Reported by Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab", "issue_id": 1234284, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$20000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 17:32:11 GMT", "id": "e7dcf6918690ec951bb501a1725be304fff6816c" }, { "date": "Fri, 20 Aug 2021 16:02:59 GMT", "id": "28c4d811e3191f7c7ec6daca3aa7f4e5485d3009" }, { "date": "Mon, 16 Aug 2021 12:48:52 GMT", "id": "ad3ed52c2e59e40a92193328f22dc7e3dfbaaf6d" }, { "date": "Fri, 20 Aug 2021 16:04:13 GMT", "id": "5936a8a5c08b4cdb8d4c6f4960dec4dddda83bde" } ], "v8": [] } }, { "cve": "CVE-2021-37972", "date": "Wed, 28 Jul 2021 22:55:37 GMT", "description": "Out of bounds read in libjpeg-turbo. Reported by Xu Hanyu and Lu Yutao from Panguite-Forensics-Lab of Qianxin", "issue_id": 1234259, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Tue, 10 Aug 2021 17:25:06 GMT", "id": "98907227c199b72fcfa1e179f0c1d528fa17e093" } ], "v8": [] } }, { "cve": "CVE-2021-30601", "date": "Wed, 28 Jul 2021 08:59:49 GMT", "description": "Use after free in Extensions API. Reported by koocola(@alo_cook) and Nan Wang(@eternalsakura13) of 360 Alpha Lab", "issue_id": 1234009, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 02 Aug 2021 07:10:35 GMT", "id": "18236a0db8341302120c60781ae3129e94fbaf1c" }, { "date": "Fri, 20 Aug 2021 17:21:48 GMT", "id": "d8f7a221d014da2d7b5a055c98a1e9acf418af32" }, { "date": "Tue, 10 Aug 2021 02:14:43 GMT", "id": "85c16cd71b8e2ea1de3c95c3b76caf86ac8d6474" }, { "date": "Tue, 21 Sep 2021 01:59:41 GMT", "id": "c5f9c40e9b106704130ffb8789ac68693152aedd" }, { "date": "Tue, 10 Aug 2021 01:37:34 GMT", "id": "c06871d5065b20777ab7e962f61e1d29f70cc3bc" } ], "v8": [] } }, { "cve": "CVE-2021-30606", "date": "Wed, 28 Jul 2021 07:03:48 GMT", "description": "Use after free in Blink. Reported by Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab", "issue_id": 1233975, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 17:32:58 GMT", "id": "2520b380018fbcf315bdc76b9b20f894def52f9e" }, { "date": "Wed, 28 Jul 2021 23:10:06 GMT", "id": "e5d028192c1491fd190e5b8366bccbcfd967ade2" }, { "date": "Mon, 02 Aug 2021 22:04:32 GMT", "id": "e35d2fb18347daba5191e3f98c3aeb087f4f2c3c" } ], "v8": [] } }, { "cve": "CVE-2021-30611", "date": "Wed, 28 Jul 2021 05:38:11 GMT", "description": "Use after free in WebRTC. Reported by Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab", "issue_id": 1233942, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$20000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 23 Aug 2021 16:39:49 GMT", "id": "4d99c9e2eeb012890d4581c64195accf3e44af45" }, { "date": "Fri, 13 Aug 2021 16:13:42 GMT", "id": "5c788f4a3cc0762f8a21a50ccbd1b407b3bdf520" }, { "date": "Wed, 18 Aug 2021 13:32:56 GMT", "id": "b668652bcd4bd9bfd55abcea22ca45460db5e21d" }, { "date": "Wed, 08 Sep 2021 18:27:57 GMT", "id": "d6106fc8fd0cd7c266a6127071744e313a138239" }, { "date": "Mon, 30 Aug 2021 15:21:52 GMT", "id": "61a77a0143056bb659b0087ffbcba2a525755467" } ], "v8": [] } }, { "cve": "CVE-2021-30603", "date": "Tue, 27 Jul 2021 09:42:26 GMT", "description": "Race in WebAudio. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1233564, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 04 Aug 2021 01:25:36 GMT", "id": "6811e850ee10847da16c4d5fdc0f845494586b65" }, { "date": "Tue, 21 Sep 2021 14:22:12 GMT", "id": "6f9d0f0e2c86440bdcfde5e41917634834aebd47" }, { "date": "Mon, 09 Aug 2021 18:43:22 GMT", "id": "033f0bdcbe538c61f532e97b03cb9c092a94b413" }, { "date": "Fri, 20 Aug 2021 17:19:58 GMT", "id": "ba7a4d0217412c58477362c5eb8e11b277ae961f" }, { "date": "Mon, 09 Aug 2021 18:25:50 GMT", "id": "e837bee8d83686969a3a1bcc300817e2cc21b90c" } ], "v8": [] } }, { "cve": "CVE-2021-38021", "date": "Mon, 26 Jul 2021 22:45:19 GMT", "description": "Inappropriate implementation in referrer. Reported by Prakash (@1lastBr3ath) and Jun Kokatsu", "issue_id": 1233375, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$500", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 23 Sep 2021 01:56:50 GMT", "id": "1eb5454949672457a4bc6fafa538da6486cdf3b8" } ], "v8": [] } }, { "cve": "CVE-2021-37989", "date": "Mon, 26 Jul 2021 09:41:37 GMT", "description": "Inappropriate implementation in Blink. Reported by Matt Dyas, Ankur Sundara", "issue_id": 1233067, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$2000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 04 Nov 2021 15:16:26 GMT", "id": "5077260de3eabb46737bb778b875b3e42426bed4" }, { "date": "Tue, 24 Aug 2021 15:01:17 GMT", "id": "8af66de55aad1b8230a6ec4f14fef8ba0f19a498" } ], "v8": [] } }, { "cve": "CVE-2021-30597", "date": "Fri, 23 Jul 2021 22:54:39 GMT", "description": "Use after free in Browser UI. Reported by raven (@raid_akame)\u00a0", "issue_id": 1232617, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Sat, 24 Jul 2021 21:53:55 GMT", "id": "78c7594b44c23a53a640331967df526865234ef7" }, { "date": "Mon, 26 Jul 2021 03:38:23 GMT", "id": "97a7169f23db55418d1d7a062792ead237343d70" }, { "date": "Fri, 30 Jul 2021 17:34:36 GMT", "id": "514c0377a6a1ff3c505b8ea0f3919d60f488e041" } ], "v8": [] } }, { "cve": "CVE-2021-30618", "date": "Thu, 22 Jul 2021 20:30:45 GMT", "description": "Inappropriate implementation in DevTools. Reported by @DanAmodio and @mattaustin from Contrast Security", "issue_id": 1232279, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Mon, 30 Aug 2021 16:54:52 GMT", "id": "74a4908b9e33ea73edb461c26fa6434c21e97ca4" }, { "date": "Fri, 10 Sep 2021 14:25:30 GMT", "id": "4256065890eda5825c1da6811a0aadcf7a7ad3e1" }, { "date": "Wed, 04 Aug 2021 02:27:50 GMT", "id": "8b2a2af62825bab8790135f41d3f7bcf25db513a" }, { "date": "Tue, 27 Jul 2021 04:38:39 GMT", "id": "8e23347b3e089cd00c9d3741b394b92c21f70f88" } ], "v8": [] } }, { "cve": "CVE-2021-37962", "date": "Thu, 22 Jul 2021 03:30:41 GMT", "description": "Use after free in Performance Manager. Reported by Sri", "issue_id": 1231933, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$10000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 28 Jul 2021 20:14:13 GMT", "id": "fd490a4d868a1596720185a36f67326b509de4c2" }, { "date": "Fri, 01 Oct 2021 13:12:18 GMT", "id": "bbcb0c00f648ddfa2257c90e1ebdffb85af9fa80" }, { "date": "Wed, 28 Jul 2021 14:13:17 GMT", "id": "cbb8d0d0e698ae0397aa8e959fda8ee22de904ba" } ], "v8": [] } }, { "cve": "CVE-2021-30616", "date": "Wed, 21 Jul 2021 00:35:05 GMT", "description": "Use after free in Media. Reported by Anonymous", "issue_id": 1231432, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 08 Sep 2021 18:59:28 GMT", "id": "c51d1ef1ee2bfa5a4b110dc7144773b1f1ddee44" }, { "date": "Wed, 21 Jul 2021 21:01:28 GMT", "id": "51ce1f3e2b091e3104a737996a388bca8f4c92a7" }, { "date": "Mon, 26 Jul 2021 19:22:20 GMT", "id": "f3a48dca66e5da514c76d6618151efca243b7ad6" } ], "v8": [] } }, { "cve": "CVE-2021-30600", "date": "Tue, 20 Jul 2021 08:12:04 GMT", "description": "Use after free in Printing. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1231134, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 10 Aug 2021 21:38:36 GMT", "id": "774dea8b445cb51cd2dccc560e4514369e197de6" }, { "date": "Mon, 23 Aug 2021 13:42:51 GMT", "id": "f4db5691eed7a664249639ed4f0b4c93c254a7a8" }, { "date": "Wed, 22 Sep 2021 22:41:35 GMT", "id": "d2758e3fc7e0b51b4b6e172aca312e499b0b7d4b" } ], "v8": [] } }, { "cve": "CVE-2022-0801", "date": "Tue, 20 Jul 2021 03:07:29 GMT", "description": "Inappropriate implementation in HTML parser. Reported by Micha\u0142 Bentkowski of Securitum", "issue_id": 1231037, "post_url": "https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 15 Dec 2021 01:51:28 GMT", "id": "c11809b8c0b9fe16955456110c9ec3723b5ff7b5" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 20 Jul 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1082258, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 19 May 2021 19:57:35 GMT", "id": "b88a33347e291e60e6af685c8695da85bcc59414" } ], "v8": [] } }, { "cve": "CVE-2021-30602", "date": "Mon, 19 Jul 2021 11:37:13 GMT", "description": "Use after free in WebRTC. Reported by Marcin Towalski of Cisco Talos\u00a0", "issue_id": 1230767, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 20 Aug 2021 17:27:48 GMT", "id": "010a318d585ca40546c29263579999aebaf92ee7" }, { "date": "Tue, 10 Aug 2021 10:49:27 GMT", "id": "654536e793760b23679131e9f8db45620e5636c7" }, { "date": "Fri, 13 Aug 2021 10:02:27 GMT", "id": "4e02776661c73ce26d04b70ca969063c9e7050e7" }, { "date": "Fri, 13 Aug 2021 10:03:33 GMT", "id": "19fd0487f0d178112985b5bc1572c5cf71fda890" }, { "date": "Tue, 21 Sep 2021 21:41:04 GMT", "id": "43c8a5a2bddd7c1bcb3e0ae1d1bb7ad23ee4395b" } ], "v8": [] } }, { "cve": "CVE-2021-30624", "date": "Mon, 19 Jul 2021 03:37:36 GMT", "description": "Use after free in Autofill. Reported by Wei Yuan of MoyunSec VLab", "issue_id": 1230513, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Thu, 22 Jul 2021 17:05:46 GMT", "id": "f15e0e905b169e2f6a09443db0888f418159572f" }, { "date": "Wed, 04 Aug 2021 21:24:40 GMT", "id": "df1ed39e67a804a5fabb1477b32e619fa4eef886" }, { "date": "Thu, 07 Oct 2021 11:14:31 GMT", "id": "903cf32bda772f3e11334814d8ca0096822dfcfc" } ], "v8": [] } }, { "cve": "CVE-2021-37959", "date": "Thu, 15 Jul 2021 07:42:53 GMT", "description": "Use after free in Task Manager. Reported by raven (@raid_akame)\u00a0", "issue_id": 1229625, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$1000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 06 Oct 2021 14:38:13 GMT", "id": "4a4f2093bba6131f6e856ba7da253cad2e5ea115" }, { "date": "Wed, 21 Jul 2021 23:02:27 GMT", "id": "51ab2b4b4702040ee12288d03fbc073d766c071f" } ], "v8": [] } }, { "cve": "CVE-2021-30591", "date": "Wed, 14 Jul 2021 11:50:10 GMT", "description": "Use after free in File System API. Reported by SorryMybad (@S0rryMybad) of Kunlun Lab", "issue_id": 1229298, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 10 Aug 2021 06:36:26 GMT", "id": "995064c730323afab2ab92fd1fef50f7d41b19f4" }, { "date": "Wed, 28 Jul 2021 03:01:32 GMT", "id": "f024e59f574ee3ca4297d35810e4c96ebd223173" }, { "date": "Wed, 28 Jul 2021 03:00:15 GMT", "id": "0f1eaba52798718df865c9cafd7fdafb880343df" }, { "date": "Tue, 27 Jul 2021 03:05:48 GMT", "id": "a498cfe6a2294c5e8023a31000605d62538b5c29" }, { "date": "Wed, 21 Jul 2021 09:11:13 GMT", "id": "e2123a8e0943b4399814bd530df401ed071b6d0f" } ], "v8": [] } }, { "cve": "CVE-2022-1855", "date": "Tue, 13 Jul 2021 00:00:00 GMT", "description": "Use after free in Messaging. Reported by Anonymous", "issue_id": 1228661, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 27 Apr 2022 20:51:50 GMT", "id": "2782c7bc5bbe0829ad39907866f59bad65777df5" }, { "date": "Tue, 05 Apr 2022 07:00:37 GMT", "id": "068f13cc5aa5f7a6e9faf28d8731275e64cb657b" }, { "date": "Tue, 05 Apr 2022 08:39:15 GMT", "id": "f9bba74f9a4c8e50af2f6ba4e447fd6bb43edc7d" } ], "v8": [] } }, { "cve": "CVE-2021-37961", "date": "Mon, 12 Jul 2021 19:51:18 GMT", "description": "Use after free in Tab Strip. Reported by Khalil Zhani", "issue_id": 1228557, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$10000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 29 Sep 2021 09:27:00 GMT", "id": "a5f9c80b3c4925df00f51b1397ec74c50569fd0b" }, { "date": "Wed, 04 Aug 2021 20:25:53 GMT", "id": "aff1dce7943a6b6969821dfd9ea6456a833f034b" } ], "v8": [] } }, { "cve": "CVE-2021-37988", "date": "Mon, 12 Jul 2021 07:44:48 GMT", "description": "Use after free in Profiles. Reported by raven (@raid_akame)\u00a0", "issue_id": 1228248, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 20 Aug 2021 14:40:50 GMT", "id": "56206060b562e43b49459aec7a7aaa39e2aae84e" } ], "v8": [] } }, { "cve": "CVE-2021-30563", "date": "Mon, 12 Jul 2021 00:00:00 GMT", "description": "Type Confusion in V8. Reported by Anonymous", "issue_id": 1228407, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Thu, 05 Aug 2021 11:49:01 GMT", "id": "40b87a2997685dd1162838e4304ce23a10bd5d92" }, { "date": "Tue, 13 Jul 2021 18:14:25 GMT", "id": "374354bfe4a30740b96936b33e522d6fcd1cda67" }, { "date": "Tue, 13 Jul 2021 18:48:24 GMT", "id": "99bc5881846d01f853e0e70124de408f00d932f3" }, { "date": "Wed, 14 Jul 2021 16:23:03 GMT", "id": "0e7f91956cecd8918ba4e8f721a59bae9f339b59" }, { "date": "Tue, 21 Sep 2021 09:17:38 GMT", "id": "db9c2e058b46594ffa101b059dad6d3d53a8aa9f" }, { "date": "Wed, 14 Jul 2021 16:42:52 GMT", "id": "66d208afeaf10cd8b1dd0fabcc2cc1501a0a40de" } ] } }, { "cve": "none", "date": "Sun, 11 Jul 2021 00:55:17 GMT", "description": "internal security issue", "issue_id": 1228036, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Mon, 02 Aug 2021 19:20:27 GMT", "id": "37d8ff509470f264e3bbb573ee4a8a69c91d56d1" }, { "date": "Wed, 11 Aug 2021 07:56:34 GMT", "id": "8b5646dab3504a0f42d3fd5252349fc813e72dbd" }, { "date": "Tue, 24 Aug 2021 09:36:42 GMT", "id": "be4665aa9975d97f187e6036e0180fb4b8f16d18" }, { "date": "Tue, 27 Jul 2021 07:34:33 GMT", "id": "b63a59619530cb26bf5d51f39ef4cb4c20952d5f" } ] } }, { "cve": "CVE-2022-1857", "date": "Sun, 11 Jul 2021 00:00:00 GMT", "description": "Insufficient policy enforcement in File System API. Reported by Daniel Rhea", "issue_id": 1227995, "post_url": "https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html", "reward": "$2000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 11 May 2022 17:12:45 GMT", "id": "988164c6c4a563c3d4c0dedba295d09472dfc15f" }, { "date": "Mon, 16 May 2022 18:20:27 GMT", "id": "f1dd785e021eee989af8fbe7570f424e96cb0b16" } ], "v8": [] } }, { "cve": "CVE-2021-30590", "date": "Fri, 09 Jul 2021 11:10:19 GMT", "description": "Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1227777, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$20000", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 10 Aug 2021 05:43:55 GMT", "id": "440b019fa3a718d146e30c50eff441de9d42c491" }, { "date": "Tue, 27 Jul 2021 23:31:44 GMT", "id": "dd7b6f26e4768664d743d3c7dd793b82bd814998" }, { "date": "Fri, 23 Jul 2021 00:01:38 GMT", "id": "d2e1d6871cf7ca9dbbc82a400be49234d20f98cf" }, { "date": "Mon, 26 Jul 2021 18:34:57 GMT", "id": "cb19602196e186a7d2ee5525ddb5d63a416fe9fd" }, { "date": "Tue, 27 Jul 2021 22:29:24 GMT", "id": "5c37324fc1f3e53a9f4c5fc2f3d17bd2b64c5730" } ], "v8": [] } }, { "cve": "CVE-2021-30574", "date": "Thu, 08 Jul 2021 01:00:27 GMT", "description": "Use after free in protocol handling. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1227315, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 13 Jul 2021 19:46:21 GMT", "id": "42a7279960cc97a1916daeffd7f1683db0e00db2" }, { "date": "Wed, 28 Jul 2021 08:57:56 GMT", "id": "c722a52c34e805e68671dc43a47dbf3980beb6da" }, { "date": "Fri, 09 Jul 2021 19:44:02 GMT", "id": "2738faaac807b46e8df16ddff8b60489aa816c40" }, { "date": "Wed, 28 Jul 2021 15:43:22 GMT", "id": "27e1ef2dedcc28b167e1c283829d4d55935628ed" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 07 Jul 2021 16:52:07 GMT", "description": "internal security issue", "issue_id": 1227228, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Thu, 08 Jul 2021 12:16:10 GMT", "id": "d727013bb543997e2acb30cbd6b67f28d6ddd15b" } ], "v8": [] } }, { "cve": "CVE-2021-38004", "date": "Wed, 07 Jul 2021 14:18:36 GMT", "description": "Insufficient policy enforcement in Autofill. Reported by Mark Amery", "issue_id": 1227170, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 27 Jul 2021 13:41:43 GMT", "id": "be292efb581a1e0c0c5ca45bf7c3fe0a99ae18dc" }, { "date": "Wed, 27 Oct 2021 12:19:55 GMT", "id": "f785fa7895f6e12e2c181f71d646828ef87e5dcb" }, { "date": "Thu, 21 Oct 2021 16:42:29 GMT", "id": "d3886012130816c950285b68ecce157d26676293" }, { "date": "Tue, 19 Oct 2021 08:58:30 GMT", "id": "b773c550412c39c69014a558015aafe447231039" }, { "date": "Mon, 22 Nov 2021 13:26:26 GMT", "id": "2a42048222665b97f9e9725ba87284b1d4717f64" } ], "v8": [] } }, { "cve": "CVE-2021-30617", "date": "Tue, 06 Jul 2021 17:17:37 GMT", "description": "Policy bypass in Blink. Reported by NDevTK", "issue_id": 1226909, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 15 Jul 2021 16:12:51 GMT", "id": "09bb76a2c6bec417761b51a45ace93bea6b75986" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 02 Jul 2021 00:56:43 GMT", "description": "internal security issue", "issue_id": 1225929, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 02 Jul 2021 21:36:39 GMT", "id": "4251e06c82eba2bf31e3edc61c283d6c0a3ad773" }, { "date": "Fri, 09 Jul 2021 07:31:38 GMT", "id": "f4b6b3ec3c186225749c2e09761faf7832a1fec0" }, { "date": "Wed, 08 Sep 2021 17:19:39 GMT", "id": "67765b8412a494db052dcd36c3d3e02e02505cd8" }, { "date": "Mon, 05 Jul 2021 05:19:15 GMT", "id": "c18001b35f000dd0435506fcc65da9cc44355ca9" } ], "v8": [] } }, { "cve": "CVE-2021-30622", "date": "Mon, 28 Jun 2021 09:12:32 GMT", "description": "Use after free in WebApp Installs. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research", "issue_id": 1224419, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$NA", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 08 Jul 2021 05:50:44 GMT", "id": "919b4590d9c960059a9f65d577e5fb2d0db6f29a" } ], "v8": [] } }, { "cve": "CVE-2022-1500", "date": "Fri, 25 Jun 2021 00:00:00 GMT", "description": "Insufficient data validation in Dev Tools. Reported by Hoang Nguyen", "issue_id": 1223475, "post_url": "https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html", "reward": "$TBD", "severity": "Low", "commit": { "chromium": [ { "date": "Tue, 15 Mar 2022 11:54:23 GMT", "id": "744d731b898cd068dd1b573194d6550ab5a11fad" }, { "date": "Mon, 14 Mar 2022 10:36:26 GMT", "id": "3451e19bb3b05f269df717fd8ddb7bd2cb6d7a65" } ], "v8": [] } }, { "cve": "CVE-2021-30623", "date": "Thu, 24 Jun 2021 21:17:56 GMT", "description": "Use after free in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1223667, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$10000", "severity": "Low", "commit": { "chromium": [ { "date": "Wed, 30 Jun 2021 17:10:23 GMT", "id": "f338ed52643716938d2bdb2c8c6e2699cd8789c5" } ], "v8": [] } }, { "cve": "CVE-2021-37958", "date": "Thu, 24 Jun 2021 00:00:00 GMT", "description": "Inappropriate implementation in Navigation. Reported by James Lee (@Windowsrcer)", "issue_id": 1223290, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$3000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 18 Aug 2021 19:47:41 GMT", "id": "5576e533a0da56df93242e2b361a306df2b6c1ec" }, { "date": "Thu, 26 Aug 2021 00:32:40 GMT", "id": "991fdfe396718b849fae45fb6419146327e4cc33" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 21 Jun 2021 18:37:59 GMT", "description": "internal security issue", "issue_id": 1222498, "post_url": "https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Wed, 06 Oct 2021 19:48:28 GMT", "id": "1459675360c1494ade8504e8147ce4df383bfbad" } ], "v8": [] } }, { "cve": "CVE-2021-30564", "date": "Thu, 17 Jun 2021 14:20:00 GMT", "description": "Heap buffer overflow in WebXR. Reported by Ali Merchant, iQ3Connect VR Platform", "issue_id": 1221309, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 23 Jun 2021 02:54:00 GMT", "id": "aafb32701cbbb58acd6625bc91e492052aaa242c" }, { "date": "Mon, 28 Jun 2021 19:58:23 GMT", "id": "6f7e7bca53c6eef25fdf57d566d7b6ce0bc28145" }, { "date": "Fri, 18 Jun 2021 01:15:29 GMT", "id": "673ab2da69084391ec1f6812f620ed096dbbd25f" }, { "date": "Wed, 23 Jun 2021 17:58:43 GMT", "id": "73f769d913fb74ca2e7b48103b69203ee1e57cca" } ], "v8": [] } }, { "cve": "none", "date": "Thu, 17 Jun 2021 01:11:53 GMT", "description": "internal security issue", "issue_id": 1221068, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Mon, 02 Aug 2021 15:17:01 GMT", "id": "0eb81e54e2087d221d6bd1ac58c7013235d26a67" }, { "date": "Tue, 10 Aug 2021 05:41:24 GMT", "id": "0cac041bcbeecf0314e687a1c58cfa0fda93eca6" }, { "date": "Tue, 03 Aug 2021 13:31:01 GMT", "id": "04d8f9b8ff6750d925d0ed2ff477c19249993fb6" }, { "date": "Tue, 10 Aug 2021 19:38:36 GMT", "id": "7a627eaaf13194157bcad41835abbdb55c03c0dd" }, { "date": "Mon, 23 Aug 2021 09:50:42 GMT", "id": "83ce432fe975c592529aba16ebd0e70379fb1f7e" }, { "date": "Tue, 21 Sep 2021 02:32:50 GMT", "id": "317411559b4eafde336b3858610182ad53f19e88" }, { "date": "Tue, 03 Aug 2021 19:42:01 GMT", "id": "1737623a5311badc6396e65503f802d6267b10be" }, { "date": "Mon, 02 Aug 2021 13:48:51 GMT", "id": "ad2959bc1d9a83b19461eb7177b42a43b0d9d259" } ], "v8": [] } }, { "cve": "CVE-2021-30562", "date": "Tue, 15 Jun 2021 00:00:00 GMT", "description": "Use after free in WebSerial. Reported by Anonymous", "issue_id": 1220078, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Mon, 28 Jun 2021 21:55:24 GMT", "id": "3feda02444909f1c713264a5740ae43c0258815c" }, { "date": "Sat, 19 Jun 2021 00:22:34 GMT", "id": "1d6359ea08c66fd0df2548aaf472a47a29b58a28" }, { "date": "Tue, 27 Jul 2021 16:05:11 GMT", "id": "62ba4b5a6541c3539fd0cc7b4272c4ead0a6f6f3" }, { "date": "Wed, 16 Jun 2021 16:43:45 GMT", "id": "4059ecc3a5352601a4d79196f90c8ca19262afe1" } ], "v8": [] } }, { "cve": "CVE-2021-30554", "date": "Tue, 15 Jun 2021 00:00:00 GMT", "description": "Use after free in WebGL. Reported by anonymous", "issue_id": 1219857, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 16 Jun 2021 21:47:09 GMT", "id": "b77b38a3380c7a5aa2a898cbf4b714e34d9baf70" }, { "date": "Thu, 17 Jun 2021 01:57:32 GMT", "id": "1057df9bef3674a3ccf232f77534ea6d98f7d7ae" }, { "date": "Tue, 22 Jun 2021 13:42:55 GMT", "id": "3a34580b063370b68e7f71c3fb06f108d1a45e4d" }, { "date": "Tue, 15 Jun 2021 18:25:57 GMT", "id": "01b6f7e0a70648d7c7302454993f0bf86d5a0241" }, { "date": "Tue, 22 Jun 2021 13:43:53 GMT", "id": "4105a1437e4fd2c462d72354aea5d05bb397b1fa" } ], "v8": [] } }, { "cve": "CVE-2021-30568", "date": "Mon, 14 Jun 2021 20:45:15 GMT", "description": "Heap buffer overflow in WebGL. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1219886, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$8500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 29 Jun 2021 01:17:03 GMT", "id": "e60cc80ff744a88da6076297dbb2b3ff3047d29f" }, { "date": "Tue, 27 Jul 2021 17:02:00 GMT", "id": "0cd64b399cc0321e6c6a996a50e22bc760647be7" }, { "date": "Thu, 24 Jun 2021 01:57:08 GMT", "id": "7d0a12ce19fed024d56b95a692d888fe3ef14e2f" } ], "v8": [] } }, { "cve": "CVE-2021-30608", "date": "Mon, 14 Jun 2021 19:52:23 GMT", "description": "Use after free in Web Share. Reported by Huyna at Viettel Cyber Security", "issue_id": 1219870, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 16 Jun 2021 06:30:24 GMT", "id": "b11d329df72b61188f8d7d35a7b7fcbf3421b899" } ], "v8": [] } }, { "cve": "CVE-2021-30561", "date": "Mon, 14 Jun 2021 10:49:04 GMT", "description": "Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero", "issue_id": 1219630, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 21 Jun 2021 09:48:45 GMT", "id": "6b5984783028c775dccf4f4a99a17c29fb2ca09d" }, { "date": "Wed, 16 Jun 2021 11:37:37 GMT", "id": "c0614e9bcef7266d2e4544602d668c01b5dcaa37" }, { "date": "Tue, 29 Jun 2021 06:16:49 GMT", "id": "0aa83644d478834b6657242c2360391e17c80571" } ] } }, { "cve": "CVE-2021-37971", "date": "Sun, 13 Jun 2021 15:36:46 GMT", "description": "Incorrect security UI in Web Browser UI. Reported by Rayyan Bijoora", "issue_id": 1219354, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$1000", "severity": "Low", "commit": { "chromium": [ { "date": "Wed, 21 Jul 2021 00:16:13 GMT", "id": "2f311f6b6df602d7e92d992293387ee55bc7cfeb" } ], "v8": [] } }, { "cve": "CVE-2021-30560", "date": "Sat, 12 Jun 2021 10:44:36 GMT", "description": "Use after free in Blink XSLT. Reported by Nick Wellnhofer", "issue_id": 1219209, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 16 Jun 2021 02:41:13 GMT", "id": "79fc7bcbc940a66f4edfd2c49a5e63106074836a" }, { "date": "Tue, 29 Jun 2021 00:39:04 GMT", "id": "d8558e4bbec758766c982b27386180e5fd76ce93" }, { "date": "Fri, 18 Jun 2021 15:52:33 GMT", "id": "137da3f36a0bd3fb9b7e0cc85032369dfa3a3789" }, { "date": "Wed, 28 Jul 2021 09:34:36 GMT", "id": "7741771f84bcc8ddbd2d568c65612af18e2e33fa" } ], "v8": [] } }, { "cve": "CVE-2021-30559", "date": "Fri, 11 Jun 2021 16:20:36 GMT", "description": "Out of bounds write in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1219082, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 25 Jun 2021 20:17:33 GMT", "id": "bb367dfcce5f2ff950bf1fc6ce5a7219f27579d6" } ], "v8": [] } }, { "cve": "CVE-2021-30569", "date": "Thu, 10 Jun 2021 21:23:48 GMT", "description": "Use after free in sqlite. Reported by Chris Salls (@salls) of Makai Security", "issue_id": 1218707, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$500", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 18 Jun 2021 22:51:26 GMT", "id": "009cada961a9a313aa208ffb9e2666457b275637" }, { "date": "Wed, 28 Jul 2021 11:05:46 GMT", "id": "c22f18b50b825f594cb1a9a429d9a6c5837f3ba8" }, { "date": "Tue, 22 Jun 2021 23:12:25 GMT", "id": "45278d955b0bfb186a9cfb8caaa8c3605d32e43b" } ], "v8": [] } }, { "cve": "CVE-2021-30594", "date": "Thu, 10 Jun 2021 09:45:54 GMT", "description": "Use after free in Page Info UI. Reported by raven (@raid_akame)\u00a0", "issue_id": 1218468, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$N/A", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 09 Jul 2021 09:39:02 GMT", "id": "1079ace4a2f90b600e639a64c692922cac3d03da" }, { "date": "Mon, 26 Jul 2021 12:07:22 GMT", "id": "b316d13bcc94ebf775a9196cea6832844c6266d2" }, { "date": "Tue, 27 Jul 2021 14:10:56 GMT", "id": "252df1b2c738e7da6dedc3a6749ac70f1008c884" }, { "date": "Tue, 10 Aug 2021 06:31:06 GMT", "id": "a9eab50a4301957424a651ae15dff7ed0f058535" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 08 Jun 2021 05:03:23 GMT", "description": "internal security issue", "issue_id": 1217598, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 29 Jun 2021 16:32:46 GMT", "id": "a57c4cc23d3f43db38e86774c66e76b0912b1472" }, { "date": "Wed, 28 Jul 2021 10:30:06 GMT", "id": "c957e924bdcb0e4008722877414783a36c213e03" }, { "date": "Thu, 24 Jun 2021 14:31:49 GMT", "id": "2621def5df030d97a789e2aec757c1c0e5e55c01" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 07 Jun 2021 04:21:22 GMT", "description": "internal security issue", "issue_id": 1217064, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Wed, 07 Jul 2021 12:02:07 GMT", "id": "cb6218cab029d7ab08bc6d24200a9a966db826ae" }, { "date": "Tue, 13 Jul 2021 15:09:56 GMT", "id": "e38d55313ad9c726fd20fb4c0baa2ec8a258f6b5" }, { "date": "Fri, 23 Jul 2021 18:03:46 GMT", "id": "b512aa657164d324ac56736d483bbbe6d3de5fb3" } ] } }, { "cve": "none", "date": "Sun, 06 Jun 2021 11:30:45 GMT", "description": "internal security issue", "issue_id": 1216898, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Sat, 10 Jul 2021 19:41:29 GMT", "id": "5c38a303b8c9e8b2c23705214026dd3cba52d3fa" }, { "date": "Wed, 08 Sep 2021 18:16:38 GMT", "id": "8fa238ddef36b966c3bb74cbc4eb45dbb82c45cd" } ], "v8": [] } }, { "cve": "CVE-2021-30573", "date": "Sat, 05 Jun 2021 18:18:39 GMT", "description": "Use after free in GPU. Reported by Security For Everyone Team - https://securityforeveryone.com", "issue_id": 1216822, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 07 Jul 2021 20:50:53 GMT", "id": "cd98d7c0dae974428f2b7692b010dd62aba3d3c4" }, { "date": "Tue, 22 Jun 2021 00:02:35 GMT", "id": "8d16f621fa982e656664077cdaa80d09a44de9ce" }, { "date": "Fri, 18 Jun 2021 21:20:09 GMT", "id": "38b4905f8d877b27bc2d4ccd4cfc0f82b636deea" }, { "date": "Tue, 17 Aug 2021 15:59:40 GMT", "id": "186264aa996c8ab8747824e30e1b43d7bb936b4e" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 04 Jun 2021 14:00:40 GMT", "description": "internal security issue", "issue_id": 1216595, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 04 Jun 2021 22:52:55 GMT", "id": "490c04beac03e0a6a635109d945af5c4cc915c0b" } ], "v8": [] } }, { "cve": "CVE-2021-30551", "date": "Fri, 04 Jun 2021 07:10:13 GMT", "description": "Type Confusion in V8. Reported by Clement Lecigne of Google's Threat Analysis Group and Sergei Glazunov of Google Project Zero", "issue_id": 1216437, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Mon, 07 Jun 2021 16:06:23 GMT", "id": "dcfea97b692303536ab52eb250ee82f5b1a0759c" }, { "date": "Tue, 08 Jun 2021 15:35:12 GMT", "id": "1936d568193b37d50d99218724ebbb76785a30d2" }, { "date": "Wed, 09 Jun 2021 09:16:42 GMT", "id": "368a20bcd75b5444aa50e387ccdbf3842ae38844" }, { "date": "Thu, 10 Jun 2021 11:32:49 GMT", "id": "9a9c936879c2c04c5ccd557c669d12846a698c6c" }, { "date": "Mon, 07 Jun 2021 19:21:37 GMT", "id": "8f273dedf10011a71964ae8778522de99798e086" }, { "date": "Thu, 10 Jun 2021 11:31:46 GMT", "id": "951a47c530b39fc01d97764a971d4fe3faea5f9a" }, { "date": "Tue, 08 Jun 2021 15:28:29 GMT", "id": "5d8866d5fa8d14daabe9b6ce3610fb9fb46dbd51" }, { "date": "Mon, 07 Jun 2021 19:20:34 GMT", "id": "1f5113816c514b45084e0c2f66ca06f030ae09c6" }, { "date": "Mon, 07 Jun 2021 16:00:34 GMT", "id": "f9857fdf743eeb263aec3944259ad811f564291b" } ] } }, { "cve": "none", "date": "Wed, 02 Jun 2021 13:41:40 GMT", "description": "internal security issue", "issue_id": 1215711, "post_url": "https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Wed, 21 Jul 2021 14:25:21 GMT", "id": "ee6ad641a05eac7e757ee6d287e7e4dfe38db6eb" } ] } }, { "cve": "CVE-2021-30555", "date": "Tue, 01 Jun 2021 00:22:50 GMT", "description": "Use after free in Sharing. Reported by David Erceg", "issue_id": 1215029, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 09 Jun 2021 09:00:01 GMT", "id": "4261abbb1403732528d36de5645abb788fea2ae5" }, { "date": "Fri, 04 Jun 2021 13:49:34 GMT", "id": "4b16a8bea2017486654aca28a361bbb5a0b5ae60" }, { "date": "Wed, 09 Jun 2021 09:09:49 GMT", "id": "eb6ddec9b4b448ef79c393860fdabfcf59386c57" }, { "date": "Tue, 22 Jun 2021 13:45:15 GMT", "id": "6f74d0a094fa6a758b323f3392cd1b4d7240e991" }, { "date": "Tue, 22 Jun 2021 13:48:53 GMT", "id": "61c58cf2c1558a429daae9624d683ae2468bf386" } ], "v8": [] } }, { "cve": "CVE-2021-30541", "date": "Mon, 31 May 2021 08:16:33 GMT", "description": "Use after free in V8. Reported by Richard Wheeldon", "issue_id": 1214842, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [], "v8": [ { "date": "Tue, 29 Jun 2021 14:34:28 GMT", "id": "e76178b896f2f51252c259123e3ec5eb9e81b753" }, { "date": "Thu, 05 Aug 2021 14:42:38 GMT", "id": "19bc8e73914d5b95fad302405f108d1c7ed78edd" } ] } }, { "cve": "CVE-2021-30596", "date": "Sat, 29 May 2021 10:30:48 GMT", "description": "Incorrect security UI in Navigation. Reported by Mohit Raj (shadow2639)\u00a0", "issue_id": 1214481, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$1000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 09 Jul 2021 18:53:23 GMT", "id": "904100f6ec3eda5042c5bdb9da142b077b14e8e5" }, { "date": "Wed, 28 Jul 2021 19:52:01 GMT", "id": "70a71e781d8d72aaee8c07d196457eb3efc8015f" } ], "v8": [] } }, { "cve": "CVE-2021-30572", "date": "Fri, 28 May 2021 03:29:20 GMT", "description": "Use after free in Autofill. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1214234, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 28 Jul 2021 09:18:06 GMT", "id": "090bb29f567ec34aeff85878f92025b9fd976bba" }, { "date": "Wed, 07 Jul 2021 20:02:45 GMT", "id": "24293de1553b49f74d0846d2c93fde07eec2d151" }, { "date": "Fri, 02 Jul 2021 17:36:12 GMT", "id": "48cf01e4039fecbe119d8223d1f6072aaf44f258" }, { "date": "Tue, 27 Jul 2021 20:09:16 GMT", "id": "84b97683080071a1d526b7c5d3727eb9db5681f3" } ], "v8": [] } }, { "cve": "CVE-2021-30584", "date": "Wed, 26 May 2021 01:03:07 GMT", "description": "Incorrect security UI in Downloads. Reported by @retsew0x01", "issue_id": 1213350, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$3000", "severity": "Medium", "commit": { "chromium": [ { "date": "Tue, 01 Jun 2021 15:36:48 GMT", "id": "e6039c6dad7d380f0d7c0866cb29f0bc4a589da0" }, { "date": "Tue, 15 Jun 2021 03:20:24 GMT", "id": "7e8ce4c0761bbbfdf629a5b33bdb6de9ceab392f" }, { "date": "Wed, 04 Aug 2021 21:05:00 GMT", "id": "86a9684977f0e5869d3b7a9f8f48f17c893ff52f" }, { "date": "Thu, 29 Jul 2021 21:58:24 GMT", "id": "7bec935d94d00ebca571b838bf593d337aac4397" } ], "v8": [] } }, { "cve": "CVE-2021-30575", "date": "Tue, 25 May 2021 20:34:14 GMT", "description": "Out of bounds read in Autofill. Reported by Leecraso and Guang Gong of 360 Alpha Lab", "issue_id": 1213313, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$15000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 05 Aug 2021 13:27:38 GMT", "id": "57b95ba2c39ae6a806cfe644ab0a5ac5ef30ac1b" }, { "date": "Wed, 09 Jun 2021 16:37:48 GMT", "id": "d805a11b69ccfc6376a1a5e05bfe603a4481c3a5" }, { "date": "Thu, 27 May 2021 17:01:40 GMT", "id": "05303a33a5a31d74709ddaff9e54fed2fd0ebaa8" }, { "date": "Fri, 28 May 2021 06:39:38 GMT", "id": "b58aa12c8cefee013d0ab82be4b78eb053e7c439" }, { "date": "Fri, 28 May 2021 12:02:23 GMT", "id": "624f194d9f2d988a7f8e450bc39f5f1120865312" }, { "date": "Thu, 05 Aug 2021 14:26:19 GMT", "id": "88c291f2388668bcf44d97d8259476cfc71f50ad" }, { "date": "Wed, 02 Jun 2021 20:36:58 GMT", "id": "be223652b6078b56540a6cb5db2d442674d0f073" } ], "v8": [] } }, { "cve": "CVE-2022-0298", "date": "Tue, 25 May 2021 00:33:40 GMT", "description": "Use after free in Scheduling. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1212957, "post_url": "https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 12 Jan 2022 04:28:13 GMT", "id": "3c60616245d4928ee89ad842e1031bd8d3a6121d" }, { "date": "Tue, 18 Jan 2022 18:11:43 GMT", "id": "f779b38a3fd3ef532075081dd918b4be398c8c1f" }, { "date": "Tue, 18 Jan 2022 19:36:05 GMT", "id": "b0cb408e775cb022a90f2632c4d6f3e1ea46e0de" }, { "date": "Tue, 18 Jan 2022 19:36:11 GMT", "id": "c05d486542abfa0def40dbdcf2ba79e19fb964f3" } ], "v8": [] } }, { "cve": "none", "date": "Tue, 25 May 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1150558, "post_url": "https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Fri, 14 May 2021 21:22:59 GMT", "id": "ffadd2b451831df0151e7c05f09326aba9bc486b" }, { "date": "Mon, 17 May 2021 20:36:50 GMT", "id": "2e7b6a100079f2474fdd8326cdbd8a693ed80d9a" } ], "v8": [] } }, { "cve": "CVE-2021-30544", "date": "Mon, 24 May 2021 04:16:04 GMT", "description": "Use after free in BFCache. Reported by Rong Jian and Guang Gong of 360 Alpha Lab", "issue_id": 1212618, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$25000", "severity": "Critical", "commit": { "chromium": [ { "date": "Thu, 10 Jun 2021 07:07:44 GMT", "id": "0e36d324d6ef42ddedf67bdd82001f31a47c994e" }, { "date": "Tue, 01 Jun 2021 06:51:57 GMT", "id": "be8d69148374f5f315b39e69d04cfe58946cc9a4" }, { "date": "Thu, 10 Jun 2021 07:03:17 GMT", "id": "34d5af37f9ac64b3d838facf975065a2d6ebd471" }, { "date": "Thu, 27 May 2021 11:19:58 GMT", "id": "a2414a05a486ca0ad18ba4caf78e883a668a0555" }, { "date": "Tue, 01 Jun 2021 17:45:57 GMT", "id": "7cd7f6741fc4491c2f7ef21052a370ee23887e37" } ], "v8": [] } }, { "cve": "CVE-2021-30556", "date": "Mon, 24 May 2021 02:35:40 GMT", "description": "Use after free in WebAudio. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1212599, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html", "reward": "$7500", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 22 Jun 2021 12:52:03 GMT", "id": "2a4354a12021affe58c951fa6a1d3679677dfa59" }, { "date": "Wed, 16 Jun 2021 02:27:08 GMT", "id": "0d0066a85064140025c868cff05a4cf61aebb8c3" }, { "date": "Wed, 02 Jun 2021 23:14:16 GMT", "id": "e34e28f6afc6844c95df347a19bca40496823979" }, { "date": "Tue, 08 Jun 2021 22:20:15 GMT", "id": "d2e1eeb7abe8011d78fc2eed2ca55d8ef54edccc" }, { "date": "Tue, 22 Jun 2021 12:46:05 GMT", "id": "87dfa1af321f6ac7b9c6cd61534f82be455be9d9" } ], "v8": [] } }, { "cve": "CVE-2021-30550", "date": "Sun, 23 May 2021 14:14:58 GMT", "description": "Use after free in Accessibility. Reported by David Erceg", "issue_id": 1212500, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 03 Jun 2021 23:25:28 GMT", "id": "ac8ca2ab03c64ac1bb06860d9a4d649c043680ad" }, { "date": "Wed, 26 May 2021 19:47:15 GMT", "id": "427728383657e6ccb06dbfcce0c5118bb557c0af" }, { "date": "Thu, 10 Jun 2021 07:43:04 GMT", "id": "2835c871c02585bba204806b7d5fbe2003d0515e" }, { "date": "Thu, 27 May 2021 21:59:00 GMT", "id": "2d3f7840d4e01d00b354187834595fdc442fcac9" }, { "date": "Thu, 10 Jun 2021 07:45:07 GMT", "id": "cc4e89eb5a743f24cdc2e4d4b667924ee8323402" } ], "v8": [] } }, { "cve": "CVE-2021-30549", "date": "Sun, 23 May 2021 13:54:24 GMT", "description": "Use after free in Spell check. Reported by David Erceg", "issue_id": 1212498, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 27 May 2021 22:29:20 GMT", "id": "fb043604930d22d5fb2e88045fd980523c7b5257" }, { "date": "Thu, 27 May 2021 18:15:43 GMT", "id": "b427418352dc5a2e095aaa3f3dcd3c55d91dfbd4" }, { "date": "Thu, 10 Jun 2021 07:20:34 GMT", "id": "536bcb2d708f12decb47d0454da0b95995145974" }, { "date": "Thu, 10 Jun 2021 07:06:47 GMT", "id": "90e0022e33af99c4e7320774c888af92c876d11b" }, { "date": "Thu, 03 Jun 2021 23:33:28 GMT", "id": "9f8ca0e35834223cb58ce777c9ccd49e903e7434" } ], "v8": [] } }, { "cve": "CVE-2021-30567", "date": "Thu, 20 May 2021 05:14:26 GMT", "description": "Use after free in DevTools. Reported by DDV_UA", "issue_id": 1211326, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Wed, 02 Jun 2021 19:34:31 GMT", "id": "5a63c928d01e2f4de4ff431ff594f2ee0aeae392" }, { "date": "Fri, 28 May 2021 05:22:20 GMT", "id": "3ee01e4fd442a1d6563e79be86d66c83a087cfb0" } ], "v8": [] } }, { "cve": "none", "date": "Wed, 19 May 2021 21:17:41 GMT", "description": "internal security issue", "issue_id": 1211215, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Wed, 02 Jun 2021 06:33:27 GMT", "id": "ac0605a1a486b8d074f116cc365de9d2b6d7c9e5" }, { "date": "Fri, 04 Jun 2021 12:16:57 GMT", "id": "8c0ca7a701e02d9d6bc96cd905c82d96933fdc70" }, { "date": "Tue, 29 Jun 2021 15:25:37 GMT", "id": "67cac2c51a47fd2ee05da59786f13071ffa0a259" }, { "date": "Thu, 10 Jun 2021 11:20:59 GMT", "id": "9da8fb7c4b805b22fb12bc41ea92a4840d43d04e" }, { "date": "Wed, 02 Jun 2021 16:02:13 GMT", "id": "022b312d55e75935cfa99cca7729ae2d3f795bd0" }, { "date": "Tue, 08 Jun 2021 06:10:09 GMT", "id": "8704c7c0b2f79cbe745f293b30d68f4505da7416" }, { "date": "Thu, 10 Jun 2021 11:19:56 GMT", "id": "d0aadee1a60ab0e9f73094464482047c8bf47b08" } ] } }, { "cve": "CVE-2021-30565", "date": "Wed, 19 May 2021 11:02:23 GMT", "description": "Out of bounds write in Tab Groups. Reported by David Erceg", "issue_id": 1210985, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$15000", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Jun 2021 22:15:34 GMT", "id": "05198700faf344500e765218ca96b161b010fc45" }, { "date": "Tue, 27 Jul 2021 19:50:03 GMT", "id": "eac37c18783def1328257489f633e3f562e30cc0" }, { "date": "Tue, 17 Aug 2021 15:53:41 GMT", "id": "3b96593da9517623119e4c5d501f4abd2d12acb6" }, { "date": "Wed, 23 Jun 2021 21:18:19 GMT", "id": "4e8d756caa45baf0465a69cbd4f49ceaf6628e45" } ], "v8": [] } }, { "cve": "CVE-2021-30548", "date": "Tue, 18 May 2021 06:50:27 GMT", "description": "Use after free in Loader. Reported by Yangkang(@dnpushme) & Wanglu of Qihoo360 Qex Team", "issue_id": 1210487, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Tue, 01 Jun 2021 06:17:17 GMT", "id": "d5c4282bc577aad7490407a1f15cc79f3ac24492" }, { "date": "Fri, 04 Jun 2021 16:50:25 GMT", "id": "e88c656a9fb4a7bb1c66ddcedae8049a448ebef4" }, { "date": "Tue, 25 May 2021 09:45:50 GMT", "id": "8097e73295a88e64d8318d982847a5e4f2bcc4d2" }, { "date": "Tue, 08 Jun 2021 07:29:38 GMT", "id": "7be6a34fe2f01af881bb074bc616bf5b6b5f7c31" }, { "date": "Fri, 11 Jun 2021 08:42:15 GMT", "id": "fad297a48aceb4efa1b43ea1e0fdfdbe25ecf515" }, { "date": "Fri, 11 Jun 2021 08:05:05 GMT", "id": "b7a1f498f17ef4a617ff7c1133c4b1d8785f9434" }, { "date": "Fri, 11 Jun 2021 08:07:55 GMT", "id": "1856470e257006c9a770d01ceb216f706683dcfd" }, { "date": "Thu, 20 May 2021 15:21:39 GMT", "id": "702f4d4ddb963cafb0d133972282dfc803510b75" }, { "date": "Fri, 11 Jun 2021 08:42:36 GMT", "id": "9037876f53217bb229b0998e5110bc5d30b59e37" } ], "v8": [] } }, { "cve": "CVE-2021-30547", "date": "Tue, 18 May 2021 01:42:33 GMT", "description": "Out of bounds write in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab", "issue_id": 1210414, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 21 May 2021 06:17:55 GMT", "id": "97c16fd4f4df507444e586ff6f9b1bd0b5fcddc7" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 17 May 2021 02:47:58 GMT", "description": "internal security issue", "issue_id": 1209792, "post_url": "https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [] } }, { "cve": "CVE-2021-30553", "date": "Mon, 17 May 2021 01:01:14 GMT", "description": "Use after free in Network service. Reported by Anonymous", "issue_id": 1209769, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$TBD", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 03 Jun 2021 19:58:13 GMT", "id": "33103b41f0d5ad35f8839455b1f28f1a3cab9cc4" }, { "date": "Fri, 04 Jun 2021 01:19:18 GMT", "id": "baf23e3c5b1394982cff718a0e055d4f239245ad" }, { "date": "Thu, 10 Jun 2021 07:05:07 GMT", "id": "910e9e40d3767d416a888d9c12b4c9d8a017750c" }, { "date": "Fri, 28 May 2021 20:30:47 GMT", "id": "2f49a3c69a2184c95f43a395e4f33a3959cb8dbc" }, { "date": "Thu, 10 Jun 2021 07:05:24 GMT", "id": "cdd1e87a933f094b3036c958c5a2c257a7e7dce4" } ], "v8": [] } }, { "cve": "CVE-2021-30613", "date": "Sun, 16 May 2021 08:03:04 GMT", "description": "Use after free in Base internals. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1209622, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$15000", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 29 Jul 2021 22:24:54 GMT", "id": "b32c57df33d3e6d3e090f9f10bc1ec69c2d09fdc" }, { "date": "Tue, 27 Jul 2021 13:08:03 GMT", "id": "84dc40483c5dde99e4c833d3afe166bdf2b4024a" }, { "date": "Fri, 10 Sep 2021 14:02:59 GMT", "id": "4ef5266d00ff8baafd1039d1bef1cfed87d554fa" }, { "date": "Wed, 04 Aug 2021 19:43:58 GMT", "id": "d535a10e66bd49b42d83d02ecb845924a9251626" }, { "date": "Thu, 22 Jul 2021 17:36:29 GMT", "id": "c91f42272129eca38cc3c6b85784c4bf9cddfe58" }, { "date": "Fri, 23 Jul 2021 20:56:53 GMT", "id": "6ff4fee50c9cd36c2f0f0463244e2ea2593e056c" }, { "date": "Tue, 27 Jul 2021 12:17:23 GMT", "id": "4929a06ef55d96c519523eedece8fa7dfee0e1f7" }, { "date": "Fri, 10 Sep 2021 19:21:53 GMT", "id": "52e1634ec29cb287fbe5ae829dfe67ac19465fe2" }, { "date": "Tue, 27 Jul 2021 01:17:38 GMT", "id": "62d89fe5f479354a579d8b5ca7a3bced36cdbc68" } ], "v8": [] } }, { "cve": "CVE-2021-30593", "date": "Sun, 16 May 2021 06:45:08 GMT", "description": "Out of bounds read in Tab Strip. Reported by David Erceg", "issue_id": 1209616, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$5000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 30 Jul 2021 18:01:28 GMT", "id": "f1e13ea0f18645899c534d15ed88c9ddf40b23d3" }, { "date": "Mon, 23 Aug 2021 11:57:31 GMT", "id": "916bf13dd983af62491c68ea1b6a39f8de6f65a6" }, { "date": "Tue, 13 Jul 2021 00:20:43 GMT", "id": "8c956ce0d96372940ec1702bbacec4b37cfa5357" }, { "date": "Thu, 29 Jul 2021 22:14:33 GMT", "id": "0bff00317ed3ada8009d62e0ce3c39eb144b8589" } ], "v8": [] } }, { "cve": "none", "date": "Sat, 15 May 2021 18:15:05 GMT", "description": "internal security issue", "issue_id": 1209558, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Tue, 25 May 2021 14:44:57 GMT", "id": "1bfa5139966fe0c9e8036fe6362b61c483675775" }, { "date": "Fri, 04 Jun 2021 10:50:37 GMT", "id": "0a4d66e7f7df047a5842cf37bc146c4c143e88b1" }, { "date": "Tue, 29 Jun 2021 15:25:37 GMT", "id": "67cac2c51a47fd2ee05da59786f13071ffa0a259" }, { "date": "Fri, 04 Jun 2021 06:52:27 GMT", "id": "638d1b238d510a349bdd38648add8d5c85bc5f7d" }, { "date": "Thu, 10 Jun 2021 11:22:26 GMT", "id": "b9ad6a864c79f06296a87b7747d932d84749daf6" }, { "date": "Thu, 27 May 2021 12:18:33 GMT", "id": "39b5e2d683b58da4d54e379ebd7f5f3df877dc27" }, { "date": "Thu, 10 Jun 2021 11:23:29 GMT", "id": "fd8cbdf7b888a90291d28a2d9260000309ef28d6" }, { "date": "Fri, 04 Jun 2021 11:09:57 GMT", "id": "73666e3f6d6bdbc93ab81cf8b3803dd04930e293" } ] } }, { "cve": "CVE-2021-30592", "date": "Sat, 15 May 2021 05:14:31 GMT", "description": "Out of bounds write in Tab Groups. Reported by David Erceg", "issue_id": 1209469, "post_url": "https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html", "reward": "$10000", "severity": "High", "commit": { "chromium": [ { "date": "Fri, 30 Jul 2021 18:33:48 GMT", "id": "35c7ba7daee91b9cbcdc5e805edb1f96336d2a59" }, { "date": "Thu, 29 Jul 2021 22:01:52 GMT", "id": "6411996ec3d8211269c1e3e4beabcecdc18dba68" }, { "date": "Tue, 13 Jul 2021 04:05:10 GMT", "id": "e06d6c59ec36066fa8ff9b9874b63c7e189fc1da" }, { "date": "Fri, 20 Aug 2021 17:37:48 GMT", "id": "4a94360783033db3b52d8a03f408e6839a25b660" } ], "v8": [] } }, { "cve": "none", "date": "Fri, 14 May 2021 22:20:30 GMT", "description": "internal security issue", "issue_id": 1209444, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [], "v8": [ { "date": "Tue, 08 Jun 2021 07:28:08 GMT", "id": "e58dca887dd2f5d07cc91aa363c9ab568ea33b73" }, { "date": "Wed, 02 Jun 2021 08:31:58 GMT", "id": "1ff04ccad466f883df65b7ec8e3648797cc39262" }, { "date": "Mon, 30 Aug 2021 16:44:15 GMT", "id": "3ac13ef5b0548bfd155f353f39d8d38c3a4033a6" }, { "date": "Mon, 07 Jun 2021 06:32:14 GMT", "id": "3eafc4a5c2e42cefce70e40bdf2aaa8743220b8f" } ] } }, { "cve": "CVE-2021-30615", "date": "Wed, 12 May 2021 00:00:00 GMT", "description": "Cross-origin data leak in Navigation. Reported by NDevTK", "issue_id": 1208614, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Wed, 30 Jun 2021 01:15:43 GMT", "id": "d7e7fe88854b5c329e4e8decc5bb70e8360372e0" }, { "date": "Mon, 28 Jun 2021 20:29:24 GMT", "id": "8a7a042842eb24101a4dbd38ce99e7fe6361da1a" } ], "v8": [] } }, { "cve": "CVE-2021-30614", "date": "Mon, 10 May 2021 03:50:38 GMT", "description": "Heap buffer overflow in TabStrip. Reported by Huinian Yang (@vmth6) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.\u00a0", "issue_id": 1207315, "post_url": "https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html", "reward": "$10000", "severity": "Medium", "commit": { "chromium": [], "v8": [] } }, { "cve": "CVE-2021-30579", "date": "Mon, 10 May 2021 00:44:13 GMT", "description": "Use after free in UI framework. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group", "issue_id": 1207277, "post_url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html", "reward": "$7500", "severity": "Medium", "commit": { "chromium": [ { "date": "Thu, 27 May 2021 23:27:44 GMT", "id": "4035926fc70b216a82a411cd84ca74e746e9d239" }, { "date": "Thu, 20 May 2021 19:25:20 GMT", "id": "dcea5da2b3813203fc36c2c9c695de107c712cdd" }, { "date": "Wed, 26 May 2021 23:46:54 GMT", "id": "3679eacb8cdd069ddc34b710d203b4f46cb6672a" } ], "v8": [] } }, { "cve": "none", "date": "Mon, 10 May 2021 00:00:00 GMT", "description": "internal security issue", "issue_id": 1203667, "post_url": "https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html", "reward": "$0", "severity": "unknown", "commit": { "chromium": [ { "date": "Tue, 18 May 2021 12:46:10 GMT", "id": "6fa5197d84d06ecfd2eae970cdd3871bf010e951" }, { "date": "Fri, 21 May 2021 16:00:05 GMT", "id": "04d42caee38895f4ebc2e656dd75a8c6b1862480" }, { "date": "Thu, 06 May 2021 07:34:35 GMT", "id": "e36e2fa1a6851a0e4ecac80f1b6311dbab8c05a8" }, { "date": "Tue, 04 May 2021 11:47:43 GMT", "id": "533bb3adcfe3499f90e2646fc60312f303b963ac" }, { "date": "Thu, 06 May 2021 06:38:10 GMT", "id": "793a17eaa7fcb096185062316960ca4be2a0480b" } ], "v8": [] } }, { "cve": "CVE-2021-37987", "date": "Fri, 07 May 2021 21:04:19 GMT", "description": "Use after free in Network APIs. Reported by Yangkang (@dnpushme) of 360 ATA", "issue_id": 1206928, "post_url": "https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html", "reward": "$5000", "severity": "Medium", "commit": { "chromium": [ { "date": "Fri, 17 Sep 2021 04:56:28 GMT", "id": "af84d38b5cf5ee24f432ae8273bc2dad1e075f0e" }, { "date": "Fri, 19 Nov 2021 13:10:32 GMT", "id": "9195f68df5e133aef84fde2363a2c905708438ae" }, { "date": "Thu, 30 Sep 2021 13:35:07 GMT", "id": "36028012d8977e3e226de641f561887f1f90e0e4" } ], "v8": [] } }, { "cve": "CVE-2021-30546", "date": "Fri, 07 May 2021 19:59:30 GMT", "description": "Use after free in Autofill. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research", "issue_id": 1206911, "post_url": "https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html", "reward": "$NA", "severity": "High", "commit": { "chromium": [ { "date": "Thu, 10 Jun 2021 07:34:37 GMT", "id": "19f847255af25e7e697f8421862bf025a5267a01" }, { "date": "Thu, 10 Jun 2021 07:34:24 GMT", "id": "0662717d698648a4a4becd8d23acb8ac3659eb6b" }, { "date": "Thu, 20 May 2021 13:50:51 GMT", "id": "46bed19e49ab2d941e6728c28a9b6fcb095a8da3" }, { "date": "Fri, 04 Jun 2021 13:43:45 GMT", "id": "331767c3797eb380295c41cbbbc553b3934d19f9" } ], "v8": [] } } ]