Disclosed Chromium Security Bugs

MV3 RCE via CSP Parser Differential and SW Sandbox Confusion

#499033012Reporter: vm...@google.com
$0
7/18/2026

ANGLE struct mangled-name collision enables invalid SPIR-V generation

#499031961Reporter: vm...@google.com
$0
7/18/2026

Potential integer overflow in ANGLE Metal glReadPixels leads to OOB read

#498724803Reporter: rj...@google.com
$0
7/18/2026

Potential cross-origin credential disclosure via stale biometric re-authentication observer

#497831111Reporter: rj...@google.com
$0
7/18/2026

Potential Sandbox Escape via Unvalidated EncryptionPattern in Mojo IPC

#497929481Reporter: vm...@google.com
$0
7/18/2026

Potential Type Confusion in ANGLE SPIR-V Compiler via Built-in Array Redeclaration

#499131214Reporter: vm...@google.com
$0
7/18/2026

Potential OOB Access in Android Mediaserver via DecryptConfig Validation Bypass

#495259842Reporter: rj...@google.com
$0
7/18/2026

V8 sandbox violation: IC handler using unverified Code objects

#501115746Reporter: 24...@project.gserviceaccount.com
$0
7/18/2026

Integer overflow in VisitedLinkWriter

#483112206Reporter: rj...@google.com
$0
7/18/2026

wolfmqtt:wolfmqtt-fuzzer: Use-of-uninitialized-value in MqttEncode_Connect

#533801477Reporter: 87...@developer.gserviceaccount.com
$0
7/17/2026
Showing 1681-1690 of 13102 bugs