Disclosed Chromium Security Bugs

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#511306254•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

Turboshaft WLE correctness bug: stale StringPrepareForGetCodeUnit result survives calls, leaks V8 heap pointers via charCodeAt

#488306299•Reporter: fl...@outlook.com
$1,000
8/18/2026

ANGLE Vulkan: Stale UBO descriptor range bypasses robustBufferAccess causing OOB read

#500063887•Reporter: vm...@google.com
$0
8/18/2026

Potential OOB Read in ChromeOS Video Capture Service via unvalidated HAL jpeg_size

#502782711•Reporter: vm...@google.com
$0
8/18/2026

DCHECK failure in state_ == kSpill in maglev-regalloc-node-info.h

#511210507•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

Potential Wasm debug OSR on non-x64 causes frame size mismatch and memory corruption

#511315478•Reporter: vm...@google.com
$0
8/18/2026

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in find_symbol

#531141584•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in read_irep_record

#531123005•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026

ogre:script_fuzz: Container-overflow in Ogre::TextureUnitState::_unload

#547161251•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026

janet:fuzz_dobytes: Heap-use-after-free in janet_hash

#543115518•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026
Showing 481-490 of 12748 bugs
1...484950...1275