Disclosed Chromium Security Bugs

DCHECK failure in (checked_value()) == nullptr in maglev-known-node-aspects.h

#457657421•Reporter: 24...@project.gserviceaccount.com
$0
2/12/2026

DCHECK failure in properties().can_eager_deopt() || properties().is_deopt_checkpoint() in maglev-i

#457690464•Reporter: 24...@project.gserviceaccount.com
$0
2/12/2026

libdwarf:fuzz_set_frame_all: Heap-use-after-free in _dwarf_exec_frame_instr

#475563464•Reporter: 87...@developer.gserviceaccount.com
$0
2/11/2026

Windows download logic flaw: % triggers double extension sanitization bypass (.lnk .lnk, .scf .scf)

#444803530•Reporter: br...@gmail.com
$3,000
2/11/2026

the permission prompt is not in the correct position lead to spoofing

#379241460•Reporter: sa...@gmail.com
$500
2/11/2026

race condition on pip window lead to spoof address bar

#367475557•Reporter: sa...@gmail.com
$500
2/11/2026

Security: opens a new window at the same time as the previous window in fullscreen mode, (the window enters fullscreen mode which is closed by another new window) leads to spoof

#40074800•Reporter: sa...@gmail.com
$1,000
2/11/2026

Crash in v8::internal::compiler::turboshaft::MachineOptimizationReducer

#457457928•Reporter: 24...@project.gserviceaccount.com
$0
2/11/2026

DCHECK failure in (checked_value()) == nullptr in maglev-known-node-aspects.h

#457475186•Reporter: 24...@project.gserviceaccount.com
$0
2/11/2026

DCHECK failure in (float64()) == nullptr in maglev-known-node-aspects.h

#457475530•Reporter: 24...@project.gserviceaccount.com
$0
2/11/2026
Showing 1091-1100 of 10808 bugs
1...109110111...1081