Disclosed Chromium Security Bugs

Potential Use-After-Free in BluetoothSocketFloss::DoConnectionStateChanged

#516947491•Reporter: vm...@google.com
$0
9/10/2026

Durable Client-Hints persistence on connections with TLS certificate errors

#540046516•Reporter: vm...@google.com
$0
9/10/2026

Restricted port bypass and Cross-Protocol SSRF via P2PSocketManager

#511794959•Reporter: vm...@google.com
$0
9/10/2026

streamHTML fires CE constructor/attributeChangedCallback before sanitizer strips elements

#538197156•Reporter: el...@noma.security
$0
9/10/2026

Info leak of cross-origin URLs via activeTab due to event ordering mismatch

#496615345•Reporter: vi...@google.com
$0
9/10/2026

Sandbox Escape: File Scheme Origin Spoofing via Same-Document Navigation in WebView

#498730641•Reporter: rj...@google.com
$0
9/10/2026

URL fragment leak in Connection-Allowlist violation reports

#540082621•Reporter: vm...@google.com
$0
9/10/2026

Lack of SSL certificate validation in Use-As-Dictionary writer path allows MITM persistence

#540070236•Reporter: vm...@google.com
$0
9/10/2026

[v8] Debugger break fails to deoptimize OSR frames, retaining UAF/OOB vulnerability

#539453394•Reporter: jg...@chromium.org
$0
9/10/2026

Issue 1170584: UI/URL Spoofing by putting the page into fullscreen when a user opens the emoji dialog

#40058710•Reporter: li...@gmail.com
$500
9/10/2026
Showing 111-120 of 13222 bugs
1...111213...1323