Disclosed Chromium Security Bugs

Potential OOB write in GPU process via unvalidated H.264 first_mb_in_slice in VA-API

#500028989•Reporter: vm...@google.com
$0
7/16/2026

Potential Use-After-Free in AwPacProcessor via NetworkCallback Race Condition

#499238195•Reporter: vm...@google.com
$0
7/16/2026

Potential Sandbox Escape via Path Traversal with trailing whitespace on Windows

#498887785•Reporter: vm...@google.com
$0
7/16/2026

Potential cross-thread destruction of cppgc::Persistent in RTCPeerConnectionHandler leads to UAF

#498845284•Reporter: vm...@google.com
$0
7/16/2026

Extension Sandbox CSP bypass via form-feed parser differential

#498808432•Reporter: vm...@google.com
$0
7/16/2026

Potential Use-After-Free in ANGLE Vulkan ContextVk::mImagesWithTileMemory

#498371085•Reporter: vm...@google.com
$0
7/16/2026

Frame Tree Desynchronization via moveBefore() Synchronous Blur

#497964917•Reporter: vm...@google.com
$0
7/16/2026

Potential UXSS on Android via javascript: URL injection in Tab Group Sync

#497934980•Reporter: vm...@google.com
$0
7/16/2026

CSP and LNA bypass via dropped keep-alive handle in deferred popup navigations

#497595264•Reporter: vm...@google.com
$0
7/16/2026

Potential out-of-bounds D3D11 source rect via unvalidated DComp Overlay path

#497487755•Reporter: vm...@google.com
$0
7/16/2026
Showing 1741-1750 of 13102 bugs
1...174175176...1311