Disclosed Chromium Security Bugs

Cross-world Promise leak in navigator.keyboard.getLayoutMap() allows isolated world bypass

#501485453•Reporter: vm...@google.com
$0
7/24/2026

Crash in v8::internal::Heap::Contains

#498818402•Reporter: 24...@project.gserviceaccount.com
$0
7/24/2026

UAF in RootView::HandleMouseEnteredOrMoved via synchronous exit event dispatch

#498720094•Reporter: vm...@google.com
$0
7/24/2026

Potential path traversal in DropDataProvider via unsanitized filename_extension

#497651688•Reporter: vm...@google.com
$0
7/24/2026

Potential Use-After-Free in OOPVideoDecoderFactoryProcessService via TOCTOU race

#497627277•Reporter: rj...@google.com
$0
7/24/2026

Potential Cross-Frame Confused Deputy in Automated Password Change via IPC Misdirection

#502651056•Reporter: rj...@google.com
$0
7/24/2026

Missing write barrier in Array slice for sloppy arguments due to allocation folding threshold mismatch

#502830119•Reporter: rj...@google.com
$0
7/24/2026

DCHECK failure in !IsAnyHole(*value) in objects.cc

#503099295•Reporter: 24...@project.gserviceaccount.com
$0
7/24/2026

RenderFrameHostImpl::RunJavaScriptDialog() missing browser-side allow-modals sandbox flag check

#491676472•Reporter: os...@gmail.com
$2,000
7/24/2026

HLS key redirect bypasses origin restriction

#501254242•Reporter: oj...@gmail.com
$1,000
7/24/2026
Showing 1491-1500 of 13102 bugs
1...149150151...1311