Disclosed Chromium Security Bugs

freerdp:TestFuzzChannelRail: Heap-buffer-overflow in _wcsnlen

#533963816Reporter: 87...@developer.gserviceaccount.com
$0
7/13/2026

Potential Use-After-Free Write in TransientWindowManager via AutoReset

#499065126Reporter: vm...@google.com
$0
7/13/2026

Potential UAF write in GPU process via glBufferData OOM on Android

#498715368Reporter: vm...@google.com
$0
7/12/2026

[CWE-377][linux] Don't create named mojo sockets in /tmp

#499154022Reporter: yu...@google.com
$0
7/12/2026

DCHECK failure in !IsUndefined(*queue, isolate) in isolate.cc

#499329887Reporter: 24...@project.gserviceaccount.com
$0
7/12/2026

open62541:fuzz_config_json_15: Use-of-uninitialized-value in parseJSONConfig

#504148834Reporter: 87...@developer.gserviceaccount.com
$0
7/11/2026

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

#532827411Reporter: 87...@developer.gserviceaccount.com
$0
7/11/2026

can end up granting permissions not accepted by the user in the prompt

#522845814Reporter: an...@chromium.org
$0
7/11/2026

SpeculationHostImpl::OnLCPPredicted() missing IsActive() and GetParent() checks - same class as S1 InitiatePreview bug #487987022

#489033320Reporter: so...@gmail.com
$0
7/11/2026

Potential cross-origin PWA identity spoofing via metadata and icon fallback bypass

#498353173Reporter: rj...@google.com
$0
7/11/2026
Showing 1821-1830 of 13102 bugs