Disclosed Chromium Security Bugs

Potential OOB descriptor write and allocator corruption in Dawn D3D12 SamplerHeapCache

#514739490Reporter: vm...@google.com
$0
9/3/2026

DCHECK failure in CanBeTaggedPointer(rep) in instruction-selector-ia32.cc

#516833323Reporter: 24...@project.gserviceaccount.com
$0
9/3/2026

CHECK failure: force_heap_number implies phi->value_representation() != ValueRepresentation::kI

#516833324Reporter: 24...@project.gserviceaccount.com
$0
9/3/2026

Potential WebUSB TOCTOU policy bypass via concurrent DeviceImpl Mojo pipes

#516605426Reporter: vm...@google.com
$0
9/3/2026

DCHECK failure in replacement.outputs_rep() == load.outputs_rep() in late-load-elimination-reducer

#513009811Reporter: 24...@project.gserviceaccount.com
$0
9/3/2026

Potential Use-After-Free in LogOpenExtensionMetrics via KVC on App-Group NSUserDefaults

#516969229Reporter: vm...@google.com
$0
9/3/2026

PEPC anti-clickjacking bypass via negative z-offset in IsHitCandidateForDepthOrder

#517176673Reporter: vm...@google.com
$0
9/3/2026

DCHECK failure in compilation_info()->zone()->Contains(target) in maglev-assembler-arm64-inl.h

#516906222Reporter: 24...@project.gserviceaccount.com
$0
9/3/2026

Vulnerability: multiple vulnerabilities affecting GitOnBorg::chrome-internal::clank::third_party::android_tools

#489384030Reporter: au...@google.com
$0
9/3/2026

libssh2:ssh2_client_fuzzer: Null-dereference READ in kex_diffie_hellman_sha

#537105611Reporter: 87...@developer.gserviceaccount.com
$0
9/2/2026
Showing 141-150 of 12748 bugs