Disclosed Chromium Security Bugs

XNNPACK Workspace Size Overflow — Heap Buffer Overflow from WebNN

#498494630Reporter: to...@gmail.com
$42,000
7/24/2026

Potential GPU process memory info leak via V4L2 USERPTR and undersized VideoFrame mappings

#498701127Reporter: er...@chromium.org
$0
7/24/2026

Enterprise policy & PermissionsPolicy bypass in Built-in AI APIs via direct Mojo calls

#497970403Reporter: vm...@google.com
$0
7/24/2026

Potential Sandbox Escape to Root via Unvalidated ADDRESS in brltty Upstart Job

#501745204Reporter: vm...@google.com
$0
7/24/2026

Potential AutofillAI obfuscation bypass via spoofed select elements

#500436879Reporter: vm...@google.com
$0
7/24/2026

ffmpeg:ffmpeg_AV_CODEC_ID_TDSC_fuzzer: Crash in tdsc_decode_frame

#519649309Reporter: 87...@developer.gserviceaccount.com
$0
7/23/2026

ffmpeg:ffmpeg_dem_W64_fuzzer: Use-of-uninitialized-value in ff_adts_header_parse

#528525234Reporter: 87...@developer.gserviceaccount.com
$0
7/23/2026

Potential Cross-IWA content disclosure via DedicatedWorker script fetch

#496239657Reporter: vi...@google.com
$0
7/23/2026

Network Partitioning Bypass via AnchorElementInteractionHostImpl::OnPointerDown

#496093673Reporter: vm...@google.com
$0
7/23/2026

Signature-based SRI bypass via unsupported hash algorithms in Unencoded-Digest

#498080391Reporter: vm...@google.com
$0
7/23/2026
Showing 1501-1510 of 13102 bugs