Disclosed Chromium Security Bugs

Security: Heap-use-after-free in PasskeyResetWebContentsObserver::MaybeRunCallback

#503420438•Reporter: me...@gmail.com
$3,000
7/28/2026

GPU stack memory leak in DoGetTransformFeedbackVaryingsCHROMIUM

#498382925•Reporter: vm...@google.com
$0
7/28/2026

Potential UAF in CPDFXFA_Page::DrawFocusAnnot due to raw pointer across JS execution

#504551617•Reporter: vm...@google.com
$0
7/28/2026

Potential UAF in PDFium XFA via CFWL_ScrollBar/CFWL_Caret timer during cppgc sweeping

#504545544•Reporter: vm...@google.com
$0
7/28/2026

Potential TOCTOU permission spoofing in Media Stream Bubble via navigation

#503614310•Reporter: rj...@google.com
$0
7/28/2026

Potential cross-listener message spoofing in WebView via shared prerender queue

#502444677•Reporter: vm...@google.com
$0
7/28/2026

Potential silent external app launch from CCT via OpenURL with NEW_BACKGROUND_TAB

#502173136•Reporter: vm...@google.com
$0
7/28/2026

Potential bypass of biometric re-authentication for passwords via Credential Management API

#503642586•Reporter: rj...@google.com
$0
7/28/2026

Heap-use-after-free in `remoting::PamAuthorizer::GetNextMessage` / `OnMessageProcessed`

#502461760•Reporter: da...@gmail.com
$500
7/28/2026

SkSL Compilation Privilege Bypass in PaintOpReader via Non-kSkSLCommand Shader Types

#496419374•Reporter: vm...@google.com
$0
7/28/2026
Showing 1391-1400 of 13102 bugs
1...139140141...1311