Disclosed Chromium Security Bugs

Blind OOB Read in Browser via size_t Underflow in GLES2Implementation::UpdateProgramInfo

#498856565•Reporter: vm...@google.com
$0
7/21/2026

Potential Bypass of VulkanPolyfillF32Abs in Dawn/Tint leads to heap UAF in Mesa ACO optimizer

#493692702•Reporter: rj...@google.com
$0
7/21/2026

Microsecond timing leak in Long Animation Frame API durations

#502073069•Reporter: vm...@google.com
$0
7/21/2026

Attr-taint bypass in shorthand properties allows data exfiltration

#502035074•Reporter: vm...@google.com
$0
7/21/2026

Namespace Confusion in XML Fragment Parsing via Nested xmlns=""

#501740299•Reporter: vm...@google.com
$0
7/21/2026

Cross-origin tab origin disclosure via Hangout Services extension

#501541962•Reporter: vm...@google.com
$0
7/21/2026

Off-thread cppgc::Persistent destruction in RTCPeerConnection leads to memory corruption

#501424047•Reporter: vm...@google.com
$0
7/21/2026

UI Spoofing and Cross-Origin URL Leak via Missing IsActive Check in PrintViewManager

#500172365•Reporter: vm...@google.com
$0
7/21/2026

Type confusion in CSSGroupingRule::Reattach leading to OOB read and memory corruption

#499784386•Reporter: rj...@google.com
$0
7/21/2026

ORB bypass in extensions via declared activeTab / optional permissions

#497058611•Reporter: vm...@google.com
$0
7/21/2026
Showing 1631-1640 of 13102 bugs
1...163164165...1311