Disclosed Chromium Security Bugs

Dawn GLES: Bypassed SSBO limit via ShaderStage::None allows OOB GPU memory access

#511727159•Reporter: vm...@google.com
$0
9/1/2026

OOB array access in EncoderBitrateAdjuster via unvalidated Mojo temporal_idx

#514671098•Reporter: vm...@google.com
$0
9/1/2026

Sandbox Escape in GPU Process via Type Confusion in ANGLE RewriteStructSamplers

#500030250•Reporter: vm...@google.com
$0
9/1/2026

Renderer-supplied embedding_token can potentially hijack browser-process AXActionHandlerRegistry

#503333798•Reporter: vm...@google.com
$0
9/1/2026

[SPIR-V 1.4] libGLES_mali memory safety violation in DenseMapBase::FindAndConstruct

#498659375•Reporter: an...@gmail.com
$32,000
9/1/2026

Potential bypass of Secure Payment Confirmation (SPC) trusted transaction review UI

#514018717•Reporter: vm...@google.com
$0
9/1/2026

tarantool:uri_parse_test: Heap-use-after-free in cdata_setptr

#551018371•Reporter: 87...@developer.gserviceaccount.com
$0
8/31/2026

curl:curl_fuzzer_gopher: Heap-buffer-overflow in gid_cb

#530086148•Reporter: 87...@developer.gserviceaccount.com
$0
8/31/2026

DCHECK failure in !IsInitializing(store_mode) implies !value->is_conversion() in maglev-graph-buil

#515992451•Reporter: 24...@project.gserviceaccount.com
$0
8/31/2026

vlc:vlc-demux-dec-libfuzzer-gme: Heap-buffer-overflow in Ay_Emu::start_track_

#519260589•Reporter: 87...@developer.gserviceaccount.com
$0
8/30/2026
Showing 191-200 of 12748 bugs
1...192021...1275