PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Finding Bugs in Chrome with CodeQL

bughunters.google.com | blog | #vulnerability-research | #chrome | #static-analysis | #google | #codeql | #code-audit
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A practical guide to using CodeQL, a semantic static analysis tool, to search for security vulnerabilities in the Chrome codebase.
Published
Collected

Related coverage

research · bughunters.google.com
Changes to the Chrome VRP
Today we are announcing changes to the [Chrome Vulnerability Rewards Program](about/rules/chrome-friends/chrome-vulnerability-reward-program-rules), adjusting our reward amounts and program categories to reward deeper security research, recognize high-value fixes across more severity tiers, and provide new opportunities for researcher recognition.
research · theori.io
Offensive Security with Large Language Models (2)
Part two of Xint’s LLM offensive-security series: how LLMs assist static analysis where CodeQL falls short on third-party taint specs, plus injection risks in LLM-integrated web apps.
blog · bughunters.google.com
ESCAL8 2026: Agentic Hacking in the Lion City
Check out this post to learn more about ESCAL8 2026, Google’s annual flagship security conference, coming to Singapore from October 23–25, 2026!
blog · bughunters.google.com
Breaking into Google's GFile for $100k
This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.
blog · bughunters.google.com
Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bughunters.google.com
More Cryptanalysis Makes Us All Safer
This post analyzes results published by Anthropic and argues that these recent advances do not signal the downfall of cryptography.
Back