Disclosed Chromium Security Bugs

openexr:openexr_exrcheck_fuzzer: Segv on unknown address in ojph::local::param_qcd::~param_qcd

#444878558Reporter: 87...@developer.gserviceaccount.com
$0
10/28/2025

gstreamer:typefind: Heap-buffer-overflow in av1_is_valid_obu

#435086513Reporter: 87...@developer.gserviceaccount.com
$0
10/28/2025

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::SSLLayer::parseNextLayer

#435039894Reporter: 87...@developer.gserviceaccount.com
$0
10/28/2025

GPU process crash via WebGPU shader - heap-buffer-overflow in Mesa build_interference_graph

#419939693Reporter: a7...@gmail.com
$10,000
10/28/2025

Leaking contents of cross-origin images through canvas

#432661300Reporter: to...@google.com
$0
10/28/2025

Security: PiP window can obscure sensitive UI: External protocol dialog

#40067401Reporter: al...@alesandroortiz.com
$1,000
10/28/2025

AddressSanitizer: use-after-poison ng_physical_fragment.h:316 in blink::NGPhysicalFragment::HasSelfPaintingLayer

#40058133Reporter: m....@gmail.com
$5,000
10/28/2025

Security: the contents of iframe is placed outside of iframe when CSS "column-width" is defined in main frame.

#40057616Reporter: ss...@snu.ac.kr
$3,000
10/28/2025

Security: Heap-use-after-free in views::View::VisibilityChangedImpl

#40063861Reporter: ch...@gmail.com
$2,000
10/28/2025

openexr:openexr_exrcheck_fuzzer: Index-out-of-bounds in ojph::local::param_qcd::read_qcc

#444963190Reporter: 87...@developer.gserviceaccount.com
$0
10/27/2025
Showing 1191-1200 of 10175 bugs