Disclosed Chromium Security Bugs

Bypass of PEPC / IO-v2 Visibility Checks via Sibling Occluder with 3D Transform

#518039263•Reporter: vm...@google.com
$0
9/10/2026

VerifyNavigationHeaders allowlist bypass via bare linefeed injection in OpenURL

#518002426•Reporter: vm...@google.com
$0
9/10/2026

Background clipboard exfiltration via IsClipboardPasteAllowed when permission is granted

#517732336•Reporter: vm...@google.com
$0
9/10/2026

Potential IWA warning quota exhaustion via initiator fallback scope extension mismatch

#517721914•Reporter: vm...@google.com
$0
9/10/2026

FedCM Disconnect CSRF bypass via missing opaque-origin and fenced-frame gates

#517602176•Reporter: vm...@google.com
$0
9/10/2026

PDF Sandbox Bypass via FileSystemManagerImpl Sibling Methods

#517597701•Reporter: vm...@google.com
$0
9/10/2026

Potential Geolocation manifest permission bypass in standard

#517432155•Reporter: vm...@google.com
$0
9/10/2026

Information disclosure of LoadTimingInternalInfo and SSLInfo via RaceNetworkRequest

#517415433•Reporter: vm...@google.com
$0
9/10/2026

Safe Browsing RAR analyzer bypass via large dictionary size header

#517369256•Reporter: vm...@google.com
$0
9/10/2026

Precursor origin spoofing in MHTML subframes via early-return in CanCommitOriginAndUrl

#517215407•Reporter: vm...@google.com
$0
9/10/2026
Showing 141-150 of 13222 bugs