Disclosed Chromium Security Bugs

Potential UAF in PopupViewViews::SetSelectedCell via synchronous Windows accessibility event pumping

#517023053Reporter: vm...@google.com
$0
9/5/2026

Potential Use-After-Free in PopupBnplFootnoteView::FocusSettingsLink on Windows

#516938039Reporter: vm...@google.com
$0
9/5/2026

Potential linear heap OOB write in macOS GPU process via integer truncation in AudioChannelLayout

#513396305Reporter: vm...@google.com
$0
9/5/2026

Potential UAF in BluetoothDevicesConnectListener on macOS due to uncancelled enqueued notifications

#516987814Reporter: vm...@google.com
$0
9/5/2026

Potential selection hijacking in DevTools Recorder due to index-based extension persistence

#517599864Reporter: vm...@google.com
$0
9/5/2026

Potential GPM alphanumeric PIN leakage to third-party ChromeOS IME extensions when revealed

#517464112Reporter: vm...@google.com
$0
9/5/2026

V8 Sandbox bypass via race condition in TrustedPointerTable publication

#511260586Reporter: vm...@google.com
$0
9/5/2026

dawn_wire_server_and_vulkan_backend_fuzzer: Heap-use-after-free in vk::CommandBuffer::submit

#503873145Reporter: 24...@project.gserviceaccount.com
$0
9/5/2026

Potential virtual camera spoofing and preference rank bypass on ChromeOS CfM

#517491796Reporter: vm...@google.com
$0
9/5/2026

Potential WebUSB security boundary bypass via OUTBOUND standard control transfers

#517453128Reporter: vm...@google.com
$0
9/5/2026
Showing 41-50 of 12748 bugs
1...456...1275