Disclosed Chromium Security Bugs

Potential index desync in Dawn D3D12 compute dispatch allows lazy-clear bypass

#516925829•Reporter: vm...@google.com
$0
9/6/2026

DCHECK failure in replacement.outputs_rep()[0] == load.outputs_rep()[0 in late-load-elimination-re

#518000777•Reporter: 24...@project.gserviceaccount.com
$0
9/6/2026

Potential administrative certificate shadowing via duplicate Subject CN in ARC CertStoreService

#517482134•Reporter: vm...@google.com
$0
9/6/2026

grok:grk_decompress_mercury_fuzzer: Use-of-uninitialized-value in bool grk::WaveletReverse::partial_tile

#556789105•Reporter: 87...@developer.gserviceaccount.com
$0
9/5/2026

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Crash in renumber_by_map

#557283672•Reporter: 87...@developer.gserviceaccount.com
$0
9/5/2026

vlc:vlc-demux-dec-libfuzzer-aac: Global-buffer-overflow in DecodeBlock

#554165823•Reporter: 87...@developer.gserviceaccount.com
$0
9/5/2026

cmake:cmJSONParserFuzzer: Stack-buffer-overflow in cmJSONState::AddErrorAtOffset

#555826841•Reporter: 87...@developer.gserviceaccount.com
$0
9/5/2026

Query parameter injection in OneGoogleBarLoaderImpl via unescaped async parameter

#517585486•Reporter: vm...@google.com
$0
9/5/2026

Persistent cross-origin cookie-write oracle via RestrictedCookieManager leak

#517791835•Reporter: vm...@google.com
$0
9/5/2026

[Potential] Cross-origin password disclosure in iOS CPE via Android package hostname collision

#513755126•Reporter: vm...@google.com
$0
9/5/2026
Showing 11-20 of 12748 bugs
1234...1275