Disclosed Chromium Security Bugs

OS Command Injection in tools/update_browser_revision.mjs — unvalidated CDN revision field passed to execSync() enables secret exfiltration on GitHub Actions CI runner

#511299709•Reporter: su...@gmail.com
$0
8/18/2026

WebUI sandbox bypass via unvalidated icon_url in Affiliation API

#511816617•Reporter: vm...@google.com
$0
8/18/2026

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#511730261•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#511306254•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

Turboshaft WLE correctness bug: stale StringPrepareForGetCodeUnit result survives calls, leaks V8 heap pointers via charCodeAt

#488306299•Reporter: fl...@outlook.com
$1,000
8/18/2026

ANGLE Vulkan: Stale UBO descriptor range bypasses robustBufferAccess causing OOB read

#500063887•Reporter: vm...@google.com
$0
8/18/2026

Potential OOB Read in ChromeOS Video Capture Service via unvalidated HAL jpeg_size

#502782711•Reporter: vm...@google.com
$0
8/18/2026

DCHECK failure in state_ == kSpill in maglev-regalloc-node-info.h

#511210507•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

Potential Wasm debug OSR on non-x64 causes frame size mismatch and memory corruption

#511315478•Reporter: vm...@google.com
$0
8/18/2026

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in find_symbol

#531141584•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026
Showing 101-110 of 12354 bugs
1...101112...1236