Disclosed Chromium Security Bugs

Renderer RCE via OOB Read in AdTracker::GetAncestry missing end() iterator check

#501745798•Reporter: vm...@google.com
$0
7/22/2026

Privilege escalation via ScriptInjectionTracker poisoning in executeScript

#500053110•Reporter: vm...@google.com
$0
7/22/2026

Potential Use-after-free in libusb's darwin_release_interface on macOS via WebUSB

#499013281•Reporter: vm...@google.com
$0
7/22/2026

Potential Double-Free of VkCommandPool in Dawn Vulkan backend via error path

#501789156•Reporter: vm...@google.com
$0
7/22/2026

Potential Incognito tab injection via spoofed Reader Mode intent extra

#502502017•Reporter: vm...@google.com
$0
7/22/2026

Potential CM API Auto-Signin Bypass via Shared Passwords leads to Login CSRF

#502403953•Reporter: vm...@google.com
$0
7/22/2026

Potential cross-origin fill policy bypass via stale triggered_origin in AndroidAutofillProvider

#502346855•Reporter: vm...@google.com
$0
7/22/2026

Potential Missing Authorization and Integer Truncation in AwNetLogService

#502264647•Reporter: vm...@google.com
$0
7/22/2026

Cross-origin EXIF orientation leak in NinePieceImagePainter

#502239897•Reporter: vm...@google.com
$0
7/22/2026

Bypass of cross-origin EXIF-orientation clamp via CSS cross-fade()

#502231588•Reporter: vm...@google.com
$0
7/22/2026
Showing 1581-1590 of 13102 bugs
1...158159160...1311