Disclosed Chromium Security Bugs

Potential Use-After-Free in Dawn Metal backend via notify-after-unlock race

#517303276Reporter: vm...@google.com
$0
9/4/2026

Potential GPU Use-After-Free in D3D12VideoEncodeAccelerator via unsynced COPY queue on early error

#516997135Reporter: vm...@google.com
$0
9/4/2026

Potential stale D3D12 root descriptor tables after cross-pass heap switch in Dawn

#513945813Reporter: vm...@google.com
$0
9/4/2026

OOB write via missing equality check in CheckFloat64SameValue on loong64

#516520729Reporter: aw...@chromium.org
$0
9/4/2026

DCHECK failure in replacement.outputs_rep()[0] == load.outputs_rep()[0 in late-load-elimination-re

#517301497Reporter: 24...@project.gserviceaccount.com
$0
9/4/2026

Potential Use-After-Free in iOS share sheet activities during incognito profile teardown

#517392905Reporter: vm...@google.com
$0
9/4/2026

Potential security guard bypass in CommandDispatcher redispatch on remote_cocoa path

#517173918Reporter: vm...@google.com
$0
9/4/2026

Potential TOCTOU defense bypass and browser crash in Glic Actor for non-normal windows

#506145486Reporter: vm...@google.com
$0
9/4/2026

Potential Parent Access PIN bypass via 32-bit loop counter overflow

#513606986Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in iOS Bookmarks UI via Sync Deletion

#504069178Reporter: vm...@google.com
$0
9/4/2026
Showing 101-110 of 12748 bugs