Disclosed Chromium Security Bugs

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#505413738Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026

UAF in RenderFrameHostImpl::ExitFullscreen() — missing WeakPtr guard (variant of EnterFullscreen fix 91d5baaef742)

#505045913Reporter: mi...@minico.ai
$2,000
8/13/2026

Potential integer truncation in ANGLE TextureGL leads to OOB PBO read

#499205491Reporter: vm...@google.com
$0
8/13/2026

Use-after-poison in cppgc::LivenessBroker::IsHeapObjectAliveImpl

#508082779Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026

DCHECK failure in ValidInputs(result) in assembler.h

#505610970Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026

Potential state desync in GLES2 decoder via Adreno MSAA resize workaround on OOM

#501461853Reporter: vm...@google.com
$0
8/13/2026

Android Chrome: Out of bound in Vulkan Samsung driver

#401546699Reporter: pw...@gmail.com
$2,000
8/13/2026

Potential Dawn D3D12 OOB Read via Coordinate Collision in Robustness Transform

#499091269Reporter: vm...@google.com
$0
8/13/2026

Use-After-Free in AsyncTaskManager::WaitAllPendingTasks Due to Early Task Destruction in GPU Process

#492735369Reporter: se...@gmail.com
$11,000
8/13/2026

OOB VRAM access via RenderBundle indirect draw command mutation

#495489174Reporter: rj...@google.com
$0
8/13/2026
Showing 1001-1010 of 13102 bugs