Reports

A WebGL2 page could get the GPU process to paint stale heap where its frame belonged.; A compromised renderer could put any site's name on the system credential chooser.; Feed WebCodecs a 10-bit frame and its encoder ships uninitialized heap as video.

A compromised renderer could take another navigation's response just by naming it.; CSP blocked the style attribute, unless it was parsed somewhere with no policy.; Under Site Isolation, the UI process relayed postMessage origins it never checked.

Two iframes, two Set prototypes, and the compiled code watching the wrong one.; Instruction selection sank an atomic past memory.grow, onto memory already freed.; The canvas save stack hit its cap, and the cap stopped being a resource limit.

A cookie check that only asked whether the message agreed with itself.; Renderer bytes reached the host app's full codec set — PSD, RAW, EXR.; The blocklist compared strings while AppKit compared identities.

The callback kept the speech engine alive and let its listener die.; The history check read one node and vouched for the entire tree.; A queue that quietly declines work picks the thread your destructor runs on.

Constant folding deleted the one check the rest of the compile had already spent; A number crossed the IPC boundary and came back out as a pointer; The filter ran first, then the worklist quietly put the candidates back

A prior fix taught one `End` handler to widen. The parser has two.; DFG liveness is a union over CFG successors. A catch handler isn't one.; A cross-instance tail call installs the callee's bounds limit, then overwrites it.

The detach that guarantees no compiled code survives missed one cache.; The APNG geometry check authorised the compositing loop, not the transform after it.; The privileged process took the sandboxed one's word for a buffer's shape.

Sixteen storage handlers took an integer as proof you owned the file.; Another site's cache will happily serve back what you wrote into it.; A shadow-DOM cache that outlived the table it was stored inside.

Three WebAuthn replies came back on a queue WebKit didn't choose.; Two array opcodes shared one case label in JSC's write-barrier phase.; The memory64 check that only looked at the memory it was holding.

An ordinary indexOf call writes one int past a heap search table.; Wasm table linking checked type, size, and max — everything but the address width.

The hash check that ran before the script even existed.; A hot defineProperty fold kept a shape but dropped the check it was an object.; A recorded font stays safe on one thread — until a canvas hands it to two.

The JIT proved a broad type and treated it as proof of the exact one.; A lock refactor let a shared object's last reference escape the lock.; The privileged process trusted the sandbox to say the user tapped.

The per-thread isolation held at every level except the one that made levels.; Overwriting a callback was a free, and a real-time thread was inside it.; Three code paths dropped the pointer. Only the destructor remembered to detach.

Omit one argument and the promise-pair bindings hand you an exception cell.; A buffer you can free between assigning it and pressing play.; A compromised renderer names a file it can't read, and Safari hands it back.

The UI process asked the sandbox which site it was talking to.; Two threads, one easing curve, and a reference count that couldn't count.; A frame ID is a name, not a permission — the pasteboard disagreed.

Two of four sibling access types never told the collector what they held.; The literal parser knew __proto__ could run script, and guarded the wrong thing.; The dialog handed back a return value from memory the page just freed.

Closing a page freed the <html> element out from under its own shadow trees.; A scope guard that pinned the string cell but not the bytes you were reading; Streams' pipeTo checked for a fake promise with a cast that never fails

The CORS policy took a detour through the process it was written to contain.; The eval cache kept a raw pointer that nothing was keeping alive.; The array that came back from an OSR exit disagreed with itself about its layout.

B3 was right that the value was dead — the collector agreed, and freed it.; The DFG certified a property absent from an object that owned it outright.; An IC exit undid a stack adjustment that had never happened.

The collector was never told where the exit stub parked its pointers; Nine arguments, six registers, and zero bytes reserved for the overflow; A private field read that answers with the prototype's value

The Metal validator turned an attacker-sized upload into a crash — where it runs.; A modal context menu that never stopped listening to the web process.; It shipped as a hit-rate fix, on eight cache slots of live CoreGraphics handles.

A stylesheet and one getComputedStyle() call read freed token storage.; The object-src spelling that looks like deny-all was the permissive one.; The GPU process let the renderer vote on which draft extensions it could use.