Disclosed Chromium Security Bugs

DevTools bypass in Fetch.fulfillRequest allows cookie injection on restricted hosts

#500170887•Reporter: vm...@google.com
$0
8/13/2026

Potential Use-After-Free in ANGLE Vulkan via swallowed OOM error

#499093536•Reporter: vm...@google.com
$0
8/13/2026

GPU Process Heap Leak via SkScalerContextProxy

#498951946•Reporter: vm...@google.com
$0
8/13/2026

Cross-Origin Information Leak in Skia AAHairlineOp via Stale Vertex Buffers

#498204112•Reporter: vm...@google.com
$0
8/13/2026

ExtensionNavigationRegistry::CanRedirect logic bug allows cross-extension WAR bypass

#497599683•Reporter: vm...@google.com
$0
8/13/2026

Potential stack buffer overflow in SkEdgeClipper::clipCubic due to undersized buffers

#497591594•Reporter: vm...@google.com
$0
8/13/2026

Heap-buffer-overflow in skcms::select_curve_ops via a PNG iCCP mAB tag on the default Rust ICC path

#504160794•Reporter: oj...@gmail.com
$2,000
8/13/2026

Potential UAF in UIView+WindowCoordinates; Change OBJC_ASSOCIATION_ASSIGN to RETAIN

#508281950•Reporter: li...@chromium.org
$0
8/13/2026

Potential cross-context UAF/OOB write in GPU process via uninitialized VAImage

#507258786•Reporter: vm...@google.com
$0
8/13/2026

UAF in SelectTool::Execute due to synchronous DOM events

#506377279•Reporter: vm...@google.com
$0
8/13/2026
Showing 1071-1080 of 13102 bugs
1...107108109...1311