Disclosed Chromium Security Bugs

Potential Heap OOB Read/Write in libvpx VP9 Encoder via Cast Mirroring

#504587797•Reporter: vm...@google.com
$0
7/31/2026

Turboshaft: stale `PhiOp` replacement for Wasm arrays causes `array.len` bounds bypass and out-of-bounds array read/write

#505481948•Reporter: pj...@gmail.com
$55,000
7/31/2026

GPU Process RCE via Integer Overflow in Dawn Command Iterator

#499159695•Reporter: vm...@google.com
$0
7/31/2026

GPU Process RCE via Dawn CommandIterator Desync in WriteBuffer(size=0)

#500090141•Reporter: vm...@google.com
$0
7/31/2026

Stale renderTargetWidth in cached MTLRenderPassDescriptor leads to potential GPU OOB write

#498721316•Reporter: vm...@google.com
$0
7/31/2026

GPU memory disclosure via unhandled multi-bit layout in Vulkan backend

#500162791•Reporter: vm...@google.com
$0
7/31/2026

Uninitialized GPU memory disclosure in RasterDecoderImpl::DoWritePixelsINTERNAL

#497546281•Reporter: vm...@google.com
$0
7/31/2026

Potential UAF in PDFium XFA due to broken cppgc finalization and CFWL_ComboEdit

#504548949•Reporter: vm...@google.com
$0
7/31/2026

Potential Information leak in ANGLE D3D11 Image11::copyFromFramebuffer

#500528706•Reporter: vm...@google.com
$0
7/31/2026

TURN session hijack via forged unauthenticated ALLOCATE success response

#504572664•Reporter: vm...@google.com
$0
7/31/2026
Showing 1241-1250 of 13102 bugs
1...124125126...1311