Disclosed Chromium Security Bugs

HLS SOP bypass via cross-origin init segment decryption oracle

#500508725Reporter: vm...@google.com
$0
7/23/2026

Profile-wide cross-origin blob metadata leak via chrome-search://blob-internals

#500505339Reporter: vm...@google.com
$0
7/23/2026

Potential OAuth2 token leak in ExtensionDownloader via open redirect

#497440270Reporter: vm...@google.com
$0
7/23/2026

Potential Origin Spoofing in Android PaymentRequest via BFCached RenderFrameHost

#497344640Reporter: vm...@google.com
$0
7/23/2026

Potential enterprise policy bypass via redirect in LoadAndExtractContentTool

#497342466Reporter: vm...@google.com
$0
7/23/2026

Potential Enterjacking in PaymentSheetViewController due to input protection bypass

#493691489Reporter: rj...@google.com
$0
7/23/2026

DCHECK failure in dominating_frame_state.valid() in graph-builder.cc

#502439789Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026

DCHECK failure in instance_type != HOLE_TYPE in objects-inl.h

#501898683Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026

V8: Incorrect Address Computation in Int64LoweringReducer via IncreaseOffset element_scale Mishandling

#502030575Reporter: ca...@gmail.com
$8,000
7/23/2026

DCHECK failure in IsResumableFunction(function->shared()->kind()) in accessors.cc

#502721862Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026
Showing 1541-1550 of 13102 bugs