Disclosed Chromium Security Bugs

DCHECK failure in dominating_frame_state.valid() in graph-builder.cc

#503622403Reporter: 24...@project.gserviceaccount.com
$0
7/26/2026

V8: Inline Array.prototype.sort stale-elements heap corruption

#503180648Reporter: am...@openai.com
$0
7/26/2026

Crash in v8::internal::compiler::turboshaft::UniformReducerAdapter

#503310032Reporter: 24...@project.gserviceaccount.com
$0
7/26/2026

Potential browser process heap buffer overflow in ChromeOS File System Provider

#497242029Reporter: vm...@google.com
$0
7/25/2026

HttpFlagsLoader MATCH_SYSTEM_ONLY bypass allows flag injection on Android API 23

#502024633Reporter: vm...@google.com
$0
7/25/2026

Security: Heap-use-after-free in CastActivityManager::FindActivityForSessionJoin

#502449857Reporter: me...@gmail.com
$1,000
7/25/2026

Potential Use-After-Free in AXPlatformNodeWin via reentrant accessibility event firing

#503419515Reporter: vm...@google.com
$0
7/25/2026

Potential Use-After-Free in RealizedWebState via synchronous NavigationContext destruction

#493221953Reporter: rj...@google.com
$0
7/25/2026

[Android] Security: Chrome Page Preview Bypass SameSite Strict Cookies

#385662278Reporter: ja...@gmail.com
$2,000
7/25/2026

Heap OOB read on 32-bit via integer wraparound in Buffer::ReadU8 bounds check with crafted TTC font offset.

#502598424Reporter: sh...@gmail.com
$0
7/25/2026
Showing 1431-1440 of 13102 bugs