Disclosed Chromium Security Bugs

Integer overflow in HarfBuzz gvar subsetting leads to heap buffer overflow

#504652855Reporter: vm...@google.com
$0
8/19/2026

IP allowlist bypass in ChromeDriver WebDriver-BiDi leads to potential RCE

#511744175Reporter: vm...@google.com
$0
8/19/2026

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_GPU_SingleOpReduce_fuzzer: Incorrect-function-pointer-type in pthreadpool_parallelize_3d_tile_1d_dynamic

#508865763Reporter: 24...@project.gserviceaccount.com
$0
8/19/2026

Potential OOB read in browser process via unvalidated content_rect in VideoConsumer

#496645393Reporter: vi...@google.com
$0
8/19/2026

Potential path injection in Boca API requests via unvalidated receiver_id

#502264727Reporter: vm...@google.com
$0
8/19/2026

Vulnerability: CVE-2026-1260 affecting GitOnBorg::chromium::chromium::src

#490280353Reporter: au...@google.com
$0
8/19/2026

Potential RCE via branch offset truncation in V8 Loong64 MacroAssembler

#511280494Reporter: vm...@google.com
$0
8/19/2026

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_CPU_SingleOpPool2d_fuzzer: Incorrect-function-pointer-type in xnn_compute_max_pooling

#509910783Reporter: 24...@project.gserviceaccount.com
$0
8/19/2026

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

#545676301Reporter: 87...@developer.gserviceaccount.com
$0
8/18/2026

janet:fuzz_dobytes: Heap-buffer-overflow in make_struct_n

#531106754Reporter: 87...@developer.gserviceaccount.com
$0
8/18/2026
Showing 441-450 of 12748 bugs