[Fixed] PowerVR: RGXCreateZSBufferKM2 error path frees object while on list About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-2-9 01:53:33 | 阅读: 5 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Arm Mali 5th Gen: dangling ATE via short alias of large page About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-2-7 21:44:12 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Arm Mali >=r45p0: broken KBASE_USER_BUF_STATE_* state machine for userspace mappings About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-1-19 07:30:4 | 阅读: 6 | 收藏 | project-zero issues - bugs.chromium.org monorail

[WontFix] Several wlan VFS read handlers don't check buffer size leading to userland memory corruption About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-12-15 08:25:0 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Google Pixel: Memory corruption in MFC H264 processing About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-12-14 09:31:9 | 阅读: 1 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows Kernel subkey list use-after-free due to mishandling of partial success in CmpAddSubKeyEx About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-12-13 23:58:29 | 阅读: 2 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux: io_uring: UAF due to broken unix GC interaction About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-12-5 02:43:58 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[WontFix] Windows Kernel information disclosure of the existence of arbitrary files, directories and registry keys About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-12-4 22:23:34 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux >=5.6: cred refcount overflow at ~39 GiB memory usage via io_uring About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-11-29 06:0:47 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Telegram for Android: Use-after-free in Connection::onReceivedData. About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-11-28 21:5:0 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux >=6.4: io_uring: page UAF via buffer ring mmap About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-11-28 03:12:18 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] io_uring: __io_uaddr_map() handles multi-page region dangerously About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-11-25 05:59:55 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] dav1d integer overflow leading to out-of-bounds write About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-11-22 17:30:15 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux >=4.20: ktls writes into spliced readonly pages About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-11-22 05:28:59 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Chrome: heap-use-after-free in content::NavigationURLLoaderImpl::FallbackToNonInterceptedRequest About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-11-4 01:2:51 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Chrome: chrome.pageCapture.saveAsMHTML() extension API can be used on blocked origins due to racy access check About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-10-21 04:48:51 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: several bugs in PowerVR GPU driver memory management About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-10-20 23:12:36 | 阅读: 11 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Chrome: Type confusion in `BindTextSuggestionHostForFrame`. About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-10-11 00:14:5 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows registry predefined keys may lead to confused deputy problems and local privilege escalation About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-10-6 17:44:5 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] macOS: Multiple vulnerabilities in AppleGVA when decoding HEVC videos on Intel Macs. About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2023-9-28 18:50:39 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail