Disclosed Chromium Security Bugs

Potential navigation provenance laundering in CastWebViewDefault::OpenURLFromTab

#502374993Reporter: vm...@google.com
$0
8/20/2026

Potential Heap OOB Read in MixerInput::RenderInterleaved via negative channel_selection

#500601345Reporter: vm...@google.com
$0
8/20/2026

Heap buffer overflow in Chromecast mixer due to integer truncation in CreateBufferPool

#500077014Reporter: vm...@google.com
$0
8/20/2026

Potential Integer overflow in CastAudioBus allocation allows heap overflow in Chromecast mixer

#500587568Reporter: vm...@google.com
$0
8/20/2026

Potential OOB Heap Read/Write in Chromecast CMA via Unvalidated DecryptConfig Subsamples

#499048914Reporter: vm...@google.com
$0
8/20/2026

Potential Integer Underflow and OOB Write in AudioSocket::ParseAudio

#491894115Reporter: rj...@google.com
$0
8/20/2026

State machine flaw in Dawn BufferBase::Unmap() leads to potential synchronization bypass

#511758373Reporter: vm...@google.com
$0
8/20/2026

Renderer Sandbox Escape via Heap Buffer Overflow in cast_service's AudioDecoderForMixer

#500055357Reporter: vm...@google.com
$0
8/20/2026

Potential UAF in PasswordGenerationAgent during cleanup via SetAutofillValue re-entrancy

#511774568Reporter: vm...@google.com
$0
8/20/2026

Potential Drag-and-Drop Reentrancy Protection Bypass via Multiple Windows

#503551154Reporter: rj...@google.com
$0
8/20/2026
Showing 391-400 of 12748 bugs