Disclosed Chromium Security Bugs

macOS .crwebloc file handler bypasses startup URL scheme allowlist

#502069297•Reporter: vm...@google.com
$0
7/22/2026

CSP nonce hijacking via missing '

#500099106•Reporter: vm...@google.com
$0
7/22/2026

Payment Method Manifest Default Applications Resolved Against Original Pre-Redirect URL

#497610654•Reporter: vm...@google.com
$0
7/22/2026

Tab hovercard doesn't show the origin correctly

#448421954•Reporter: sa...@gmail.com
$0
7/22/2026

Potential OOB Heap Write / RCE via Integer Overflow in CalculationValueHandleMap

#502322843•Reporter: vm...@google.com
$0
7/22/2026

Potential privilege escalation in Linux CRD via uncleared supplementary groups

#502322596•Reporter: vm...@google.com
$0
7/22/2026

Potential Renderer UAF via integer truncation and sentinel key collision in WTF::HashMap

#501676175•Reporter: vm...@google.com
$0
7/22/2026

Potential Use-After-Free via data race in ChromeSpeechRecognitionClient

#501546443•Reporter: vm...@google.com
$0
7/22/2026

Race Condition in cc::RefCountedBuffer via Canvas2dMesh leading to UAF

#501517520•Reporter: vm...@google.com
$0
7/22/2026

Potential GPU Memory Leak via MergeUV Under-write on Odd Dimensions

#500154880•Reporter: vm...@google.com
$0
7/22/2026
Showing 1591-1600 of 13102 bugs
1...159160161...1311