Tag: 0day

[dos] Microsoft Edge Chakra JIT – ImplicitCallFlags Checks Bypass

[dos] Pdfium – Out-of-Bounds Read with Shading Pattern Backed by Pattern Colorspace

[dos] Microsoft Edge Chakra JIT – 'Array.prototype.reverse' Array Type Confusion

[dos] Pdfium – Pattern Shading Integer Overflows

[dos] Microsoft Edge Chakra JIT – 'NewScObjectNoCtor' Array Type Confusion

[dos] Microsoft Edge Chakra JIT – 'LdThis' Type Confusion

[dos] Microsoft Edge Chakra JIT – Array Type Confusion via InitProto Instructions

[dos] Microsoft Edge Chakra JIT – Memory Corruption

[dos] Microsoft Edge Chakra JIT – 'GlobOpt::OptTagChecks' Must Consider IsLoopPrePass Properly (2)

[dos] Chrome V8 – 'Runtime_RegExpReplace' Integer Overflow