Disclosed Chromium Security Bugs

CSS mXSS via Missing Serialization Escaping in CSSImageSetTypeValue

#502805170•Reporter: vm...@google.com
$0
7/23/2026

ORB bypass: HasNoSniff fails on duplicate X-Content-Type-Options headers leaking JSON arrays

#502615170•Reporter: vm...@google.com
$0
7/23/2026

Privilege escalation via spoofed WatchedPageChange IPC in declarativeContent

#497025738•Reporter: vm...@google.com
$0
7/23/2026

Potential persistent state-locking in Shared Tab Groups via missing group cache

#495981782•Reporter: vm...@google.com
$0
7/23/2026

Potential File Descriptor reuse in AwPrintManager allows unsandboxed write

#502228856•Reporter: vm...@google.com
$0
7/23/2026

UXSS via synchronous JS execution in SVGScriptElement during moveBefore

#502118936•Reporter: vm...@google.com
$0
7/23/2026

Potential Use-After-Free in MidiManagerMac on iOS via CoreMIDI callback race

#502099949•Reporter: vm...@google.com
$0
7/23/2026

Potential Heap OOB Read and Info Leak in DeviceDataManagerX11

#501862016•Reporter: vm...@google.com
$0
7/23/2026

Potential cache poisoning in PaymentManifestVerifier via GURL.toString() hash collision

#501738451•Reporter: vm...@google.com
$0
7/23/2026

Heap OOB Read in Cast Mixer Service via negative playback rate

#501659253•Reporter: vm...@google.com
$0
7/23/2026
Showing 1531-1540 of 13102 bugs
1...153154155...1311