Disclosed Chromium Security Bugs

Safe Browsing bypass via stale hash state during download resumption

#500510384Reporter: vm...@google.com
$0
7/29/2026

GPU memory leak via ANGLE ES2 texture validation typo

#500501226Reporter: vm...@google.com
$0
7/29/2026

Potential heap buffer overflow in ANGLE Vulkan via format mismatch in stageSubresourceUpdateFromFramebuffer

#500429259Reporter: vm...@google.com
$0
7/29/2026

32-bit size_t overflow in ANGLE's TIntermAggregate::getConstantValue leads to heap OOB write

#498400132Reporter: vm...@google.com
$0
7/29/2026

Potential UAF and Double-Free in Wayland Screen Capture due to data race on MouseCursor

#504551032Reporter: vm...@google.com
$0
7/29/2026

DCHECK failure in IsPrimitiveMap(this) || instance_type() == WASM_NULL_TYPE in map-inl.h

#503762708Reporter: 24...@project.gserviceaccount.com
$0
7/29/2026

DCHECK failure in dominating_frame_state.valid() in graph-builder.cc

#504712799Reporter: 24...@project.gserviceaccount.com
$0
7/29/2026

DCHECK failure in !IsTheHole(heap_object) in api.cc

#504424086Reporter: 24...@project.gserviceaccount.com
$0
7/29/2026

CHECK failure: IsJSReceiver(obj)

#503932626Reporter: 24...@project.gserviceaccount.com
$0
7/29/2026

Potential UI Spoofing and Persistent DoS in SharedTabGroupDataSyncBridge

#495985532Reporter: vm...@google.com
$0
7/29/2026
Showing 1371-1380 of 13102 bugs