Disclosed Chromium Security Bugs

Potential UAF in JsepTransportCollection::RollbackTransports due to short-circuit evaluation

#504597736•Reporter: vm...@google.com
$0
7/30/2026

V8 sandbox bypass: reuse unpublished WasmDispatchTable lead to reproduce of 483220222

#503422307•Reporter: pv...@gmail.com
$20,000
7/30/2026

GPU heap infoleak via TOCTOU in Dawn's ResolveQuerySet

#499211666•Reporter: vm...@google.com
$0
7/30/2026

ICU ubidi_getRuns integer truncation leads to Massive Heap OOB Write in Renderer

#504629701•Reporter: vm...@google.com
$0
7/30/2026

Potential Browser Process UAF in ChromeOsReimplNavigationCapturingThrottle via ClosePage

#501706715•Reporter: vm...@google.com
$0
7/30/2026

UAF in QualifiedNameCache via TrustedTypePolicyFactory Worker Thread Race

#503618702•Reporter: vm...@google.com
$0
7/30/2026

DCHECK failure in i < this ->context_local_count() in scope-info-tq-inl.inc

#501676158•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

Renderer Sandbox Bypass via Spoofed EventRouter Listener URL

#496614553•Reporter: vm...@google.com
$0
7/30/2026

UAF write in GPU process via unaligned vertex draw on mapped buffers

#500536458•Reporter: vm...@google.com
$0
7/30/2026

Potential GPU OOB Write via ANGLE Vulkan External Memory Format Fallback

#497637277•Reporter: vm...@google.com
$0
7/30/2026
Showing 1271-1280 of 13102 bugs
1...127128129...1311