Disclosed Chromium Security Bugs

GPU memory disclosure via unhandled multi-bit layout in Vulkan backend

#500162791•Reporter: vm...@google.com
$0
7/31/2026

Uninitialized GPU memory disclosure in RasterDecoderImpl::DoWritePixelsINTERNAL

#497546281•Reporter: vm...@google.com
$0
7/31/2026

Potential UAF in PDFium XFA due to broken cppgc finalization and CFWL_ComboEdit

#504548949•Reporter: vm...@google.com
$0
7/31/2026

Potential Information leak in ANGLE D3D11 Image11::copyFromFramebuffer

#500528706•Reporter: vm...@google.com
$0
7/31/2026

TURN session hijack via forged unauthenticated ALLOCATE success response

#504572664•Reporter: vm...@google.com
$0
7/31/2026

Potential weak password generation via spoofed Autofill network response

#503490678•Reporter: vm...@google.com
$0
7/31/2026

ASLR bypass: Browser-process heap address leak via CDP processPseudoId

#496705691•Reporter: vi...@google.com
$0
7/31/2026

UXSS in Reading Mode via unsanitized language string in ttsEngine API

#501823385•Reporter: vm...@google.com
$0
7/31/2026

ANGLE robust resource init bypass via state clobber in signalDirtyStorage

#501505198•Reporter: vm...@google.com
$0
7/31/2026

Potential stale shadow copy in ANGLE GL backend allows bypass of index validation and OOB GPU read

#500560764•Reporter: vm...@google.com
$0
7/31/2026
Showing 111-120 of 11922 bugs
1...111213...1193