Disclosed Chromium Security Bugs

DCHECK failure in !IsSnapshot() in maglev-ir.h

#446947241•Reporter: 24...@project.gserviceaccount.com
$0
1/3/2026

heap-use-after-free in content::indexed_db::Database::connections_ when force_closing_ is true

#446722008•Reporter: so...@gmail.com
$100,000
1/2/2026

Spoof on virtual keyboard

#446463993•Reporter: sa...@gmail.com
$3,000
1/2/2026

Triggering screenshare from an unloading page in a cross-process navigation displays the wrong origin

#442860743•Reporter: do...@gmail.com
$10,000
1/2/2026

heap-use-after-free in wl_proxy_marshal_array_flags

#433027577•Reporter: yu...@gmail.com
$1,000
1/2/2026

DCHECK failure in v8_flags.assert_hole_checked_by_value implies !SafeIsAnyHole(obj) in heap-object

#447107750•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026

V8 sandbox violation in v8::internal::maglev::VirtualObject::set

#447219812•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026

Crash in v8::internal::MinorMarkSweepCollector::DrainMarkingWorklist

#447235294•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026

DCHECK failure in kCanBeWeak || (!IsSmi() == HAS_STRONG_HEAP_OBJECT_TAG(ptr_)) in tagged-impl.h

#447004458•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

#472084712•Reporter: 87...@developer.gserviceaccount.com
$0
1/1/2026
Showing 91-100 of 9388 bugs
1...91011...939