Disclosed Chromium Security Bugs

Potential Device Attribute leak to HTTPS origins via IWA scope_extensions

#503594288Reporter: vm...@google.com
$0
7/28/2026

Potential ImageIO RCE via Image Sanitization Bypass in Gemini Image Remix

#503757500Reporter: vm...@google.com
$0
7/28/2026

DCHECK failure in !IsSmi(value) implies !Cast(value)->is_the_hole() in lookup.cc

#501224234Reporter: 24...@project.gserviceaccount.com
$0
7/28/2026

Potential cross-user TPM attestation impersonation via profile confusion in KeystoreService

#501448929Reporter: vm...@google.com
$0
7/28/2026

Vulnerability: CVE-2020-8910 affecting GitOnBorg::chrome-internal::chrome::zine-exp

#491191069Reporter: au...@google.com
$0
7/28/2026

open62541:fuzz_config_json: Use-of-uninitialized-value in PubsubConfigurationField_parseJson

#534238141Reporter: 87...@developer.gserviceaccount.com
$0
7/27/2026

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

#539042121Reporter: 87...@developer.gserviceaccount.com
$0
7/27/2026

Potential GPU UAF via early return in D3D12 Video Encode Accelerator

#500174874Reporter: vm...@google.com
$0
7/27/2026

DCHECK failure in instance_type != HOLE_TYPE in objects-inl.h

#504068140Reporter: 24...@project.gserviceaccount.com
$0
7/27/2026

Potential out-of-bounds write in GPU process via unvalidated subsample sizes in VA-API

#497125735Reporter: vm...@google.com
$0
7/27/2026
Showing 1411-1420 of 13102 bugs