Disclosed Chromium Security Bugs

DCHECK failure in instance_type != HOLE_TYPE in objects-inl.h

#505028208•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

CHECK failure: IsJSReceiver(obj)

#505117976•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

DCHECK failure in IsPrimitiveMap(this) || instance_type() == WASM_NULL_TYPE in map-inl.h

#505118173•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

Potential UAF and RCE via re-entrant aura::Window destruction on Windows

#497548912•Reporter: vm...@google.com
$0
7/30/2026

Potential Information Leak in ANGLE GL backend via integer overflow in robust resource initialization

#495363705•Reporter: rj...@google.com
$0
7/30/2026

DCHECK failure in HasBytecodeArray() in shared-function-info-inl.h

#505181820•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026

Potential PostScript Injection in PDFium via Unsanitized CFF Font Names

#504420562•Reporter: vm...@google.com
$0
7/30/2026

Potential LPAC Sandbox Escape via No_Vary_Search Junction Replacement

#497726220•Reporter: vm...@google.com
$0
7/30/2026

ANGLE GL Stale PIXEL_PACK_BUFFER Binding causes Controlled Write

#502167391•Reporter: ci...@gmail.com
$0
7/30/2026

V8 sandbox violation in v8::internal::CommonFrameWithJSLinkage::GetParameter

#504284251•Reporter: 24...@project.gserviceaccount.com
$0
7/30/2026
Showing 1321-1330 of 13102 bugs
1...132133134...1311