Oskar L

Sandbox escape due to integer overflow in the Graphics: Canvas2D component

Cross-process information leaked due to malicious IPC messages

Out of bounds read/write in a privileged process triggered by WebGL textures

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component

Sandbox escape due to use-after-free in the Graphics: Canvas2D component

Same-origin policy bypass in the DOM: Workers component

Incorrect boundary conditions in the Graphics: WebGPU component

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Incorrect boundary conditions in the Graphics component