Disclosed Chromium Security Bugs

GPU-to-Browser Sandbox Escape via Unvalidated get_offset in CommandBufferHelper

#498782145•Reporter: vm...@google.com
$0
7/16/2026

Cross-domain password leak via manual-fallback preview in PasswordManualFallbackFlow

#498269651•Reporter: vm...@google.com
$0
7/16/2026

Potential GPU Process OOB Read/Write via unvalidated IOSurface per-plane geometry

#495850837•Reporter: vi...@google.com
$0
7/16/2026

Potential type confusion in CompoundImageBacking::GetSharedMemoryPixmaps

#498834967•Reporter: vm...@google.com
$0
7/16/2026

TOCTOU in Storage Access bubble allows permission spoofing

#498397912•Reporter: vm...@google.com
$0
7/16/2026

Cross-origin content spoofing in Lens via unguarded PdfHost

#499262832•Reporter: vm...@google.com
$0
7/16/2026

Cross-thread destruction of cppgc::Persistent in WebRTC getStats

#498841456•Reporter: vm...@google.com
$0
7/16/2026

Cross-origin info leak of JS settings via PluginInfoHost::GetPluginInfo

#497385823•Reporter: vm...@google.com
$0
7/16/2026

Path traversal in CRD Linux native host allows arbitrary .json file deletion

#500541413•Reporter: vm...@google.com
$0
7/16/2026

Potential Browser Process UAF in PermissionRequestHandler::CancelRequestInternal

#500032538•Reporter: vm...@google.com
$0
7/16/2026
Showing 1731-1740 of 13102 bugs
1...173174175...1311