Disclosed Chromium Security Bugs

Heap Use-After-Free and Stack UAR in Protected Audience Worklets via Stranded Microtasks

#516902973•Reporter: vm...@google.com
$0
9/4/2026

Potential GPU heap leak on ChromeOS-ARM due to disabled Mali multi-resolve workaround

#517033235•Reporter: vm...@google.com
$0
9/4/2026

Potential UAF in WaylandToplevelWindow::HandleToplevelConfigure via OnActivationChanged

#517046249•Reporter: vm...@google.com
$0
9/4/2026

History leak: SVG filter fast-path skips taint propagation for unresolved color functions

#517234388•Reporter: vm...@google.com
$0
9/4/2026

Occlusion check bypass via border-shape with box-shadow in BoxFragmentPainter

#517155893•Reporter: vm...@google.com
$0
9/4/2026

Clickjacking bypass via nested SVG viewport hit-test omission of visual overflow

#517114175•Reporter: vm...@google.com
$0
9/4/2026

Autofill preview data leak via CSS scroll-state container queries

#517110749•Reporter: vm...@google.com
$0
9/4/2026

Potential uninitialized GPU process memory leak in MediaFoundationVideoEncodeAccelerator

#516924151•Reporter: vm...@google.com
$0
9/4/2026

Origin spoofing in getDisplayMedia via queued requests after navigation

#514013849•Reporter: vm...@google.com
$0
9/4/2026

Potential Sandbox Escape via missing SQLite corruption guard in IndexedDB

#513858286•Reporter: vm...@google.com
$0
9/4/2026
Showing 71-80 of 12748 bugs
1...789...1275