Disclosed Chromium Security Bugs

WebXR DOM Overlay input suppression bypass allows cross-origin input sniffing

#507231605Reporter: vm...@google.com
$0
8/18/2026

Sandbox Escape via DevTools Child Session Attachment Bypass in Perfetto UI Extension

#505933538Reporter: vm...@google.com
$0
8/18/2026

Potential WebUSB protected-interface blocklist bypass via SetConfiguration TOCTOU

#499162550Reporter: vm...@google.com
$0
8/18/2026

Bypass of ANGLE WebGL validation via GpuChannel IPC leading to GPU info leak

#498820206Reporter: vm...@google.com
$0
8/18/2026

Potential Use-After-Unmap in SerialPortImpl destructor on Windows via overlapped ReadFile

#497610642Reporter: vm...@google.com
$0
8/18/2026

Potential WebHID enterprise policy bypass via GuestView/ControlledFrame

#496399913Reporter: vm...@google.com
$0
8/18/2026

UAF in AdTracker::IsAdScriptInStackHelper via V8 getter reentrancy

#511722207Reporter: vm...@google.com
$0
8/18/2026

Potential Use-After-Free in FileSelectHelper via double-release

#500416901Reporter: rj...@google.com
$0
8/18/2026

SpdyStream Use-After-Free in QueueNextDataFrame via PrefacePing drain

#507365348Reporter: ci...@gmail.com
$43,000
8/18/2026

Potential Use-After-Free in AXTree::CreateNode via AXTreeExtractor

#511731857Reporter: vm...@google.com
$0
8/18/2026
Showing 461-470 of 12748 bugs