Disclosed Chromium Security Bugs

Potential UAF in CRWContextMenuController via nested CFRunLoop and dangling WebState

#503781669Reporter: vm...@google.com
$0
7/29/2026

Bypass of Safe Browsing & PhishGuard via spoofed X-Country header in Variations fallback

#502318018Reporter: vm...@google.com
$0
7/29/2026

Potential Privileged Scheme Navigation via Tab Group Reopen

#502458903Reporter: vm...@google.com
$0
7/29/2026

Potential Browser Process UAF in VpnService::CreateConfigurationInternal via race condition

#503164383Reporter: vm...@google.com
$0
7/28/2026

Potential Browser heap corruption via off-thread PaymentApp destruction

#503619813Reporter: vm...@google.com
$0
7/28/2026

Potential Stack Buffer Overflow in chromeos::onc::UnpackMessage via Unchecked HMAC Length

#503242701Reporter: vm...@google.com
$0
7/28/2026

Potential Use-After-Free in ExplainWithGeminiMediator via async block capture

#504069514Reporter: vm...@google.com
$0
7/28/2026

Potential Use-After-Free in Windows Remoting Host Job Object Draining

#501833981Reporter: vm...@google.com
$0
7/28/2026

Use-After-Free in Navigator::DidNavigate via ExitFullscreenModeForTab

#497769116Reporter: vm...@google.com
$0
7/28/2026

UAF in AnimationTrigger::PerformActivate due to synchronous promise resolution

#496285281Reporter: rj...@google.com
$0
7/28/2026
Showing 1381-1390 of 13102 bugs