[Fixed] AppleAVD: Memory Corruption in AppleAVDUserClient::decodeFrameFig About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-14 09:24:46 | 阅读: 7 | 收藏 | bugs.chromium.org monorail

[Fixed] WebKit use-after-free in HTMLSelectElement About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-3 06:9:11 | 阅读: 9 | 收藏 | bugs.chromium.org monorail

[Fixed] AppleAVD: Missing surface lock in deallocateKernelMemoryInternal About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-3 05:44:5 | 阅读: 7 | 收藏 | bugs.chromium.org monorail

[Fixed] evernote: extension allows cross-origin iframe communication About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-31 06:7:4 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux >=3.19: anon_vma UAF through bogus merge of VMAs caused by double-reuse of leaf anon_vma because of ->degree misinterpretation About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-30 06:56:55 | 阅读: 10 | 收藏 | bugs.chromium.org monorail

[Fixed] Linux: munmap() race with pagemap_read() leads to page UAF About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-19 05:16:31 | 阅读: 6 | 收藏 | bugs.chromium.org monorail

[Fixed] Chrome: heap-use-after-free in password_manager::WellKnownChangePasswordState::SetChangePasswordResponseCode About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-12 19:52:30 | 阅读: 3 | 收藏 | bugs.chromium.org monorail

[Fixed] Linux stable 5.4/5.10: page UAF via stale TLB caused by rmap lock not held during PUD move About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-12 10:12:28 | 阅读: 9 | 收藏 | bugs.chromium.org monorail

[Fixed] Windows: HTTP.SYS Kerberos PAC Verification Bypass EoP About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-10 09:31:44 | 阅读: 9 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Integer overflow in pixman_sample_floor_y leads to heap out-of-bounds write About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-6 09:40:5 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows Kernel out-of-bounds reads and other issues when operating on long registry key and value names About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-5 16:40:59 | 阅读: 6 | 收藏 | bugs.chromium.org monorail

[Fixed] XNU vm_object use-after-free due to invalid error handling in vm_map_enter About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-5 04:51:41 | 阅读: 4 | 收藏 | bugs.chromium.org monorail

[Fixed] Chrome: heap-buffer-overflow in offline_items_collection::OfflineContentAggregator::OnItemRemoved About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-4 20:42:24 | 阅读: 4 | 收藏 | bugs.chromium.org monorail

[Fixed] Windows Kernel multiple memory corruption issues when operating on very long registry paths About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-3 20:57:47 | 阅读: 4 | 收藏 | bugs.chromium.org monorail

[Fixed] Chrome: heap-use-after-free in AccountSelectionBubbleView::OnAccountImageFetched About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-8-2 19:22:15 | 阅读: 4 | 收藏 | bugs.chromium.org monorail

[Fixed] XNU dangling PTE entry due to integer truncation when collapsing vm_object shadow chains About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-7-29 22:54:51 | 阅读: 8 | 收藏 | bugs.chromium.org monorail

[Fixed] libxml2: Integer overflow in xmlParseNameComplex About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-7-22 21:38:37 | 阅读: 2 | 收藏 | bugs.chromium.org monorail

[Fixed] Double-free in libxml2 when parsing default attributes About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-7-22 05:41:49 | 阅读: 5 | 收藏 | bugs.chromium.org monorail

[Fixed] Arm Mali CSF: VFS read handler doesn't check buffer size About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-7-14 05:36:12 | 阅读: 7 | 收藏 | bugs.chromium.org monorail

[Fixed] Arm Mali (mostly >=R34P0): page tables freed before PTE removal About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-7-13 00:56:23 | 阅读: 8 | 收藏 | bugs.chromium.org monorail