Disclosed Chromium Security Bugs

Potential UAF in NativeWidgetNSWindowBridge::FullscreenControllerTransitionComplete

#517040438Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in MediaFoundationProtectionManager due to cross-thread destruction

#517004487Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in ui::HeadlessWindow via Synchronous Deletion during State Changes

#516674532Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in RenderWidgetHostViewAura::ShowWithVisibility on Windows

#516691130Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in PrintViewManager::OnScriptedPrintPreviewCallback via ExitFullscreen

#517047197Reporter: vm...@google.com
$0
9/4/2026

Potential Browser Use-After-Free in HWNDMessageHandlerHeadless on Windows

#513748868Reporter: vm...@google.com
$0
9/4/2026

Potential bypass of AiAgent cross-origin navigation guard via SIDE_EFFECT confirmation race

#517035706Reporter: vm...@google.com
$0
9/4/2026

Potential SEV-SNP Memory Aliasing via E820 ROM Overlap and Swallowed PVALIDATE Error

#506379386Reporter: vm...@google.com
$0
9/4/2026

Potential transform feedback state desynchronization in validating decoder copy texture blitters

#516793727Reporter: vm...@google.com
$0
9/4/2026

Potential validation bypass in validating command decoder via GL_SAMPLER_EXTERNAL_2D_Y2Y_EXT

#517095639Reporter: vm...@google.com
$0
9/4/2026
Showing 91-100 of 12748 bugs