Disclosed Chromium Security Bugs

Potential Use-After-Free in Cast PlaybackCommandDispatcher via delayed task

#500075522•Reporter: vm...@google.com
$0
7/30/2026

Potential Heap OOB Write in Skia's populate_glyph_to_unicode_slow during PDF generation

#500071763•Reporter: vm...@google.com
$0
7/30/2026

Local file disclosure via loading historical DevTools frontends

#499164652•Reporter: vm...@google.com
$0
7/30/2026

Arbitrary Write in ANGLE via EXT_texture_norm16 Readback Workaround

#499129768•Reporter: vm...@google.com
$0
7/30/2026

CHECK failure: scope_info.scope_type() != ScopeType::SCRIPT_SCOPE in maglev-graph-builder.cc

#503869336•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

Renderer-to-GPU sandbox escape via Skia SPIR-V injection

#502636904•Reporter: qq...@calif.io
$25,000
7/30/2026

Potential UAF in ModalDialogWrapper during 200ms exit animation

#502139310•Reporter: vm...@google.com
$0
7/30/2026

DCHECK failure in i < context_local_count() in scope-info-inl.h

#503411275•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

CHECK failure: IsJSReceiver(obj)

#505118175•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

DCHECK failure in disposable_stack->state() == DisposableStackState::kDisposed implies static_cast

#505178419•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026
Showing 1311-1320 of 13102 bugs
1...131132133...1311