Disclosed Chromium Security Bugs

Renderer Heap Buffer Overflow in CSS Paint Worklet

#497078143Reporter: rj...@google.com
$0
7/15/2026

IntentHandler.intentHasUnsafeInternalScheme() should reject devtools:// URLs

#498454478Reporter: ha...@google.com
$0
7/15/2026

CORS preflight bypass via renderer-controlled cors_preflight_policy

#497432281Reporter: vm...@google.com
$0
7/15/2026

Potential Integer Overflow leading to OOB Write in CFX_PSRenderer::DrawDIBits

#500036290Reporter: vm...@google.com
$0
7/15/2026

DCHECK failure in i < this ->context_local_count() in scope-info-tq-inl.inc

#498199197Reporter: 24...@project.gserviceaccount.com
$0
7/15/2026

webnn_graph_impl_fuzzer: Incorrect-function-pointer-type in create_dwconv_path

#498457489Reporter: 24...@project.gserviceaccount.com
$0
7/15/2026

DCHECK failure in assigned == kMaybeAssigned in maglev-graph-builder.cc

#497831280Reporter: 24...@project.gserviceaccount.com
$0
7/15/2026

Potential UAF in Cast Streaming StreamConsumer during Renegotiation

#498950349Reporter: vm...@google.com
$0
7/15/2026

Bad-cast to views::BoxLayout from views::FlexLayout in TabStripFlatEdgeButton::CalculatePreferredSize

#499485761Reporter: 24...@project.gserviceaccount.com
$0
7/15/2026

Vulnerability: CVE-2024-2410 affecting GitOnBorg::chrome-internal::chrome::zine

#489322986Reporter: au...@google.com
$0
7/15/2026
Showing 1791-1800 of 13102 bugs