Disclosed Chromium Security Bugs

Potential use-after-free in WebUSB alternate interface selection on macOS

#516949173•Reporter: vm...@google.com
$0
9/5/2026

Potential iOS Reading List offline fallback allows navigation to arbitrary chrome:// WebUI

#517249866•Reporter: vm...@google.com
$0
9/5/2026

Potential Path Traversal in PairingRegistryDelegateLinux::Save via unvalidated client_id

#517607716•Reporter: vm...@google.com
$0
9/5/2026

Prefill consent bypass via input keystroke in Perfetto UI Extension Servers

#517576726•Reporter: vm...@google.com
$0
9/5/2026

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

#537432125•Reporter: 87...@developer.gserviceaccount.com
$0
9/4/2026

fast-dds:fuzz_proxy_cdr: Crash in eprosima::fastdds::dds::QosPoliciesSerializer

#532839120•Reporter: 87...@developer.gserviceaccount.com
$0
9/4/2026

CHECK failure: length == previously_materialized_objects->ulength().value() in translated-state

#516833326•Reporter: 24...@project.gserviceaccount.com
$0
9/4/2026

DCHECK failure in !pending_splice_.has_value() in maglev-reducer.h

#517243137•Reporter: 24...@project.gserviceaccount.com
$0
9/4/2026

Stale static router state and zeroed COEP on controller change bypasses CORP check

#516827905•Reporter: vm...@google.com
$0
9/4/2026

Use-After-Free in PostMessageSupport::PostJavaScriptMessage via synchronous getter

#516910450•Reporter: vm...@google.com
$0
9/4/2026
Showing 51-60 of 12748 bugs
1...567...1275