Disclosed Chromium Security Bugs

Potential Use-After-Free of web::DownloadTask in iOS DownloadManagerCoordinator

#504185107•Reporter: vm...@google.com
$0
7/29/2026

Missing return after ShutdownForBadMessage in SimpleDevToolsProtocolClient leads to past-end OOB read in the browser process

#504156069•Reporter: je...@gmail.com
$3,000
7/29/2026

Potential Use-after-free in HWNDMessageHandler::OnDpiChanged via nested message loops

#503645680•Reporter: vm...@google.com
$0
7/29/2026

Potential Cross-thread UAF in PipewireCaptureStream due to member destruction order

#504587882•Reporter: vm...@google.com
$0
7/29/2026

Renderer UAF in RTCEncodedVideoStreamTransformerDelegate via cross-thread WeakPtr usage

#504586599•Reporter: vm...@google.com
$0
7/29/2026

Potential UAF in RecentActivityCoordinator due to raw pointer capture bypassing BRP

#504106200•Reporter: vm...@google.com
$0
7/29/2026

Potential UAF via race condition in RTCVideoEncoder::Impl::SetSimulcastToSvcConverter

#504612429•Reporter: vm...@google.com
$0
7/29/2026

Potential cross-origin input redirection via unvalidated FrameSinkId in Viz hit-test

#495852034•Reporter: vi...@google.com
$0
7/29/2026

Potential TEE memory corruption via renderer-forged secure_handle in V4L2 video decoding

#497201783•Reporter: vm...@google.com
$0
7/29/2026

GPU Process UAF Write via Service ID Collision in VAO-Orphaned Buffers

#496284494•Reporter: rj...@google.com
$0
7/29/2026
Showing 1351-1360 of 13102 bugs
1...135136137...1311