Disclosed Chromium Security Bugs

Potential Stack Buffer Overflow in chromeos::onc::UnpackMessage via Unchecked HMAC Length

#503242701Reporter: vm...@google.com
$0
7/28/2026

Potential Use-After-Free in ExplainWithGeminiMediator via async block capture

#504069514Reporter: vm...@google.com
$0
7/28/2026

Potential Use-After-Free in Windows Remoting Host Job Object Draining

#501833981Reporter: vm...@google.com
$0
7/28/2026

Use-After-Free in Navigator::DidNavigate via ExitFullscreenModeForTab

#497769116Reporter: vm...@google.com
$0
7/28/2026

UAF in AnimationTrigger::PerformActivate due to synchronous promise resolution

#496285281Reporter: rj...@google.com
$0
7/28/2026

Security: Heap-use-after-free in PasskeyResetWebContentsObserver::MaybeRunCallback

#503420438Reporter: me...@gmail.com
$3,000
7/28/2026

GPU stack memory leak in DoGetTransformFeedbackVaryingsCHROMIUM

#498382925Reporter: vm...@google.com
$0
7/28/2026

Potential UAF in CPDFXFA_Page::DrawFocusAnnot due to raw pointer across JS execution

#504551617Reporter: vm...@google.com
$0
7/28/2026

Potential UAF in PDFium XFA via CFWL_ScrollBar/CFWL_Caret timer during cppgc sweeping

#504545544Reporter: vm...@google.com
$0
7/28/2026

Potential TOCTOU permission spoofing in Media Stream Bubble via navigation

#503614310Reporter: rj...@google.com
$0
7/28/2026
Showing 251-260 of 11922 bugs