Disclosed Chromium Security Bugs

Type Confusion Vulnerability in Maglev When Handling TypedArray Length Loading

#402646504Reporter: hu...@gmail.com
$6,000
6/21/2025

tinyusb:msc: Crash in msc

#405456037Reporter: 87...@developer.gserviceaccount.com
$0
6/20/2025

Heap-use-after-free in chromium_jpeg_read_scanlines

#401846968Reporter: at...@gmail.com
$9,000
6/20/2025

Update libxslt to v1.1.43

#402714442Reporter: am...@chromium.org
$0
6/20/2025

Heap-use-after-free in blink::ImageDecodingStore::InsertDecoder

#402542600Reporter: 24...@project.gserviceaccount.com
$0
6/20/2025

Stack-use-after-scope in blink::Shape::CreateLayoutBoxShape

#402863515Reporter: 24...@project.gserviceaccount.com
$0
6/20/2025

Crash in v8::CppHeap::GetAllocationHandle

#402853470Reporter: 24...@project.gserviceaccount.com
$0
6/20/2025

Security: Chrome for Android Prevent Back Button to Exit Fullscreen Mode using Text Selection

#40057691Reporter: su...@gmail.com
$3,000
6/19/2025

benchmarks/octane/pdfjs starts flaking

#400944465Reporter: ma...@chromium.org
$0
6/19/2025

vulkan-loader:instance_enumerate_fuzzer: Heap-buffer-overflow in get_override_layer_override_paths

#404571517Reporter: 87...@developer.gserviceaccount.com
$0
6/17/2025
Showing 1851-1860 of 10189 bugs