Disclosed Chromium Security Bugs

Integer overflow in BaselineCompiler instruction size estimation

#515431687Reporter: vm...@google.com
$0
9/2/2026

Write-After-Free in XRFrame::fillPoses via Synchronous JS execution

#513774197Reporter: vm...@google.com
$0
9/2/2026

Heap Buffer Overflow in FFmpeg Ogg Vorbis Demuxer via Integer Overflow

#514744613Reporter: vm...@google.com
$0
9/2/2026

Potential Cross-thread Use-After-Free in CastMirroringServiceHost::Pause and Resume

#514742747Reporter: vm...@google.com
$0
9/2/2026

ANGLE: Potential validation bypass for equality ops on sampler-only structs in ESSL 3.00+

#513135862Reporter: vm...@google.com
$0
9/2/2026

Use-After-Free in PDFiumEngine during destruction via re-entrant JavaScript

#515469283Reporter: vm...@google.com
$0
9/2/2026

VP9 k-SVC: Potential GPU information leak via improper render_rect clamping

#513762354Reporter: vm...@google.com
$0
9/2/2026

Potential Use-After-Free in DesktopWindowTreeHostPlatform::Maximize and Show

#515465685Reporter: vm...@google.com
$0
9/2/2026

DCHECK failure in !isolate->has_exception() in execution.cc

#516311623Reporter: 24...@project.gserviceaccount.com
$0
9/2/2026

Potential Heap Out-of-Bounds Write in Skia Graphite via Integer Overflow in FloatStorageManager

#515467789Reporter: vm...@google.com
$0
9/2/2026
Showing 161-170 of 12748 bugs