Disclosed Chromium Security Bugs

Information Leak via Incomplete Script Stripping in FrameSerializer (MHTML)

#499194407Reporter: vm...@google.com
$0
7/11/2026

Argument Injection/RCE in Linux Desktop Shortcuts via Unescaped %c

#499067529Reporter: vm...@google.com
$0
7/11/2026

Heap OOB Read in crabbyavif via incremental decode state loss and oversized slice

#497926602Reporter: vm...@google.com
$0
7/11/2026

Cross-origin response length and verification oracle via HLS EXT-X-KEY

#497722578Reporter: vm...@google.com
$0
7/11/2026

DCHECK failure in !IsUndefined(*queue, isolate) in isolate.cc

#499043868Reporter: 24...@project.gserviceaccount.com
$0
7/11/2026

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_CPU_SingleOpPool2d_fuzzer: Crash in tflite::Subgraph::InvokeImpl

#499126216Reporter: 24...@project.gserviceaccount.com
$0
7/11/2026

Use-After-Free in VerticalTabDragHandlerImpl::ContinueDrag via nested message loop

#495973592Reporter: vm...@google.com
$0
7/11/2026

Potential Parameter Injection in FedCM SendDisconnectRequest due to missing URL encoding

#497032290Reporter: rj...@google.com
$0
7/11/2026

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

#530322176Reporter: 87...@developer.gserviceaccount.com
$0
7/10/2026

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamut

#501676165Reporter: 87...@developer.gserviceaccount.com
$0
7/10/2026
Showing 1841-1850 of 13102 bugs