Disclosed Chromium Security Bugs

Potential Use-After-Free and Wild Write in Graphite DrawBufferManager on Allocation Failure

#516981393•Reporter: vm...@google.com
$0
9/4/2026

use-after-poison in ViewTransitionSupplement::OnTransitionCaptured

#517168239•Reporter: tr...@gmail.com
$500
9/4/2026

Potential UAF in X11Window::OnWindowMapped after synchronous deletion during Maximize

#517050585•Reporter: vm...@google.com
$0
9/4/2026

Potential state desynchronization in GLES2DecoderImpl::TexStorageImpl leads to heap OOB write

#516794471•Reporter: vm...@google.com
$0
9/4/2026

Potential GPU Process Memory Corruption via Unvalidated DMA-BUF SharedTextureMemory Size

#516949298•Reporter: vm...@google.com
$0
9/4/2026

Frame-tree state confusion as OnUnloadACK inner-delegate branch omits ResetChildren

#517241992•Reporter: vm...@google.com
$0
9/4/2026

Process-global drag-and-drop guard bypass in Ozone/X11 allows cross-window drag hijacking

#517103584•Reporter: vm...@google.com
$0
9/4/2026

Potential off-thread destruction of same-thread cppgc::Persistent in VideoEncoder::isConfigSupported

#517129549•Reporter: vm...@google.com
$0
9/4/2026

Potential Browser UAF in ~NavigationRequest due to early-return in Navigator::DidNavigate

#516608438•Reporter: vm...@google.com
$0
9/4/2026

Site Isolation bypass via unauthorized webRequest listener registration

#513321171•Reporter: vm...@google.com
$0
9/4/2026
Showing 61-70 of 12748 bugs
1...678...1275