Disclosed Chromium Security Bugs

Security: T0 Heap-Use-After-Free in views::Widget during Browser Teardown

#496456528Reporter: ba...@gmail.com
$3,000
8/14/2026

Potential GPU Sandbox Escape via unvalidated VulkanYCbCrInfo in IPC

#496282591Reporter: vm...@google.com
$0
8/14/2026

Use-After-Free Read in WebGL multi-draw via ArrayBuffer detachment

#499365904Reporter: rj...@google.com
$0
8/14/2026

ANGLE Vulkan: Potential OOB read in reformatStagedBufferUpdates due to layerCount mismatch

#499091328Reporter: vm...@google.com
$0
8/14/2026

Potential bypass of ANGLE Metal forward-progress mitigation via incomplete AST traversal

#500046096Reporter: vm...@google.com
$0
8/14/2026

Chrome Android address bar shows stale eTLD when navigating to longer attacker-controlled domains

#472892246Reporter: ga...@gmail.com
$2,000
8/14/2026

CHECK failure: !data_->register_allocation_data()->ExistsUseWithoutDefinition()

#510625819Reporter: 24...@project.gserviceaccount.com
$0
8/14/2026

Maglev `LoadDictionaryField` deferred fallback lazy-deopt/safepoint corruption.

#510024520Reporter: li...@gmail.com
$0
8/14/2026

Missing Authorization in BocaAppHandler::StartSpotlight allows browser-process CRD hijacking & DoS

#501891891Reporter: vm...@google.com
$0
8/14/2026

Potential local file disclosure in Boca OnTask via navigation throttle bypass

#501853760Reporter: vm...@google.com
$0
8/14/2026
Showing 161-170 of 12354 bugs