Disclosed Chromium Security Bugs

Potential Iterator Invalidation UAF in TransientWindowManager::OnWindowHierarchyChanged

#503873388•Reporter: rj...@google.com
$0
7/30/2026

[Linux] Cross-Thread Use-After-Free in FontLoader::openStream via Non-Owning MappedFontFile Cache

#492374380•Reporter: je...@gmail.com
$11,000
7/30/2026

CanvasRenderingContext2D::drawFocusIfNeeded dangling `Path` use-after-free

#501646327•Reporter: qw...@gmail.com
$7,000
7/30/2026

Cross-thread UAF in DesktopCaptureDevice via ScopedWebrtcDebugLogging

#504710769•Reporter: vm...@google.com
$0
7/30/2026

Potential Use-After-Free in WebRtcAudioRenderer via dangling source_ pointer

#503502607•Reporter: rj...@google.com
$0
7/30/2026

Potential Use-After-Free in BluetoothL2capChannelDelegate on macOS

#505140741•Reporter: li...@chromium.org
$0
7/30/2026

Potential Use-After-Free Write in LegacyRenderWidgetHostHWND via Modal Loop

#503793153•Reporter: rj...@google.com
$0
7/30/2026

Potential Use of Uninitialized Memory in ExtensionOpenURL via NSInvocation

#505143241•Reporter: li...@chromium.org
$0
7/30/2026

Potential double free in libxslt via xsl:attribute and xml:space="preserve"

#503627446•Reporter: rj...@google.com
$0
7/30/2026

Potential Site Isolation bypass via StartDragging reentrancy in WebContentsViewAndroid

#498765082•Reporter: vm...@google.com
$0
7/30/2026
Showing 1281-1290 of 13102 bugs
1...128129130...1311