Disclosed Chromium Security Bugs

RenderWidgetHostViewAura UAF during shutdown with focus change

#542565481•Reporter: ga...@microsoft.com
$0
9/10/2026

Potential VideoToolboxH265Accelerator state desync on SPS CTB size change inside non-IRAP frames

#540024134•Reporter: vm...@google.com
$0
9/10/2026

Stop treating navigations from chrome-untrusted:// as browser-initiated

#537466493•Reporter: al...@chromium.org
$0
9/10/2026

GPU OOB read in Vulkan BufferVk::getIndexRange via incorrect length parameter

#536598187•Reporter: aw...@chromium.org
$0
9/10/2026

Potential Metal API Validation Bypass via Divergent WGSL Workgroup Padding in Dawn

#536446354•Reporter: aw...@chromium.org
$0
9/10/2026

Potential V4L2 HEVC delegate narrowing truncation of tile dimensions before VIDIOC_S_EXT_CTRLS

#536423794•Reporter: aw...@chromium.org
$0
9/10/2026

Cross-origin cookie state leak via URLResponseHead.was_cookie_in_request

#533597592•Reporter: vm...@google.com
$0
9/10/2026

Potential IWA content script source leak to sibling guest processes

#533070113•Reporter: vm...@google.com
$0
9/10/2026

Forge of download source origin via renderer-hosted Blob and URLLoader redirection

#532957878•Reporter: vm...@google.com
$0
9/10/2026

Bypass of cross-IWA navigation restrictions via WindowOpenDisposition::NEW_POPUP

#532931962•Reporter: vm...@google.com
$0
9/10/2026
Showing 121-130 of 13222 bugs
1...121314...1323