Disclosed Chromium Security Bugs

Blank Address Bar Spoofing on Chrome for iOS

#470295118•Reporter: sa...@gmail.com
$2,000
7/14/2026

heap-use-after-free in VerticalTabDragHandlerImpl::ViewFromTabSlot(TabSlotView*)

#489109720•Reporter: ch...@gmail.com
$3,000
7/14/2026

Unlocked MetafilePlayer access in OOP SpoolDocument leads to heap-use-after-free in the browser process

#494764371•Reporter: je...@gmail.com
$1,000
7/14/2026

Potential UAF in BrowserAccessibilityManager::OnAccessibilityEvents via nested message loop

#495247950•Reporter: rj...@google.com
$0
7/14/2026

Potential Heap OOB Write in ChannelLayoutToAudioChannelLayout via CHANNEL_LAYOUT_5_1_4_DOWNMIX

#496607380•Reporter: vi...@google.com
$0
7/14/2026

Potential RCE in GPU process via unsynchronized static mutation in GpuVideoEncodeAcceleratorFactory

#498352423•Reporter: rj...@google.com
$0
7/14/2026

Potential Use-After-Free in Read Anything WebUI via unchecked AXTree::Unserialize

#498277368•Reporter: vm...@google.com
$0
7/14/2026

Use-After-Free in MenuController::StartDrag via nested message loop

#497736679•Reporter: vm...@google.com
$0
7/14/2026

UAF of WebNNTensorImpl via raw-pointer map across ThreadPool async boundary in CreateGraph

#496284085•Reporter: re...@chromium.org
$0
7/14/2026

binutils:fuzz_readelf: Heap-buffer-overflow in process_object

#533502631•Reporter: 87...@developer.gserviceaccount.com
$0
7/13/2026
Showing 1811-1820 of 13102 bugs
1...181182183...1311