Disclosed Chromium Security Bugs

DCHECK failure in !backing_store->is_the_hole(isolate, i) in elements.cc

#502199235•Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026

CHECK failure: !IsAnyHole(raw_cell->value())

#501557806•Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026

DCHECK failure in Holder __cdecl v8::internal::TrustedCast(Holder, SourceLocation) [To =

#501714452•Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026

DCHECK failure in Holder __cdecl v8::internal::TrustedCast(Holder, SourceLocation) [To =

#501676099•Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026

DCHECK failure in IsHole(raw_exception) implies raw_exception == ReadOnlyRoots{this}.termination_e

#502530389•Reporter: 24...@project.gserviceaccount.com
$0
7/23/2026

A compromised renderer process can circumvent the popup blocker

#489023922•Reporter: sz...@chromium.org
$0
7/23/2026

V8 Sandbox Bypass: JSPI suspender EPT not cleared in exception-unwind path

#501147587•Reporter: qq...@calif.io
$5,000
7/23/2026

Potential GPU Process OOB Write in GenericDmaBufVideoFrameMapper via crafted VideoFrame

#498367174•Reporter: vm...@google.com
$0
7/23/2026

Potential UAF in V4L2VideoEncodeAccelerator bypassing MiraclePtr via cross-thread WeakPtr destruction

#500139116•Reporter: vm...@google.com
$0
7/23/2026

Potential Race Condition in VmaAllocator with VulkanFromANGLE and DrDc

#500083376•Reporter: vm...@google.com
$0
7/23/2026
Showing 1561-1570 of 13102 bugs
1...156157158...1311