Disclosed Chromium Security Bugs

llvm:llvm-opt-fuzzer--x86_64-dse: New-delete-type-mismatch in std::__1::vector

#533298000Reporter: 87...@developer.gserviceaccount.com
$0
7/10/2026

OOB Read via Unclamped sample_index in Multisampled textureLoad

#497975608Reporter: vm...@google.com
$0
7/10/2026

Use-After-Free in HTMLFormattingElementList::SwapTo via adoption agency bookmark

#496298136Reporter: rj...@google.com
$0
7/10/2026

Integer overflow in tint::RoundUp and dawn::Align bypasses workgroup storage limits

#497580681Reporter: vm...@google.com
$0
7/10/2026

Potential cross-origin GPU memory disclosure via missing ValidateBeginAccess in D3DImageBacking

#496395450Reporter: vm...@google.com
$0
7/10/2026

Potential RCE in WebView via unvalidated massive shader variables in Validating Decoder

#498382884Reporter: vm...@google.com
$0
7/10/2026

setHTML() fails open on invalid SanitizerConfig, inserting unsanitized HTML with active scripts into the live DOM

#496524586Reporter: qw...@gmail.com
$2,000
7/10/2026

Arbitrary File Read Sandbox Escape in AuctionURLLoaderFactoryProxy

#498720754Reporter: vm...@google.com
$0
7/10/2026

ANGLE Metal Shadow Buffer Stale Size causes GPU OOB WRITE

#492249619Reporter: ci...@gmail.com
$18,000
7/10/2026

Potential Race Condition and UAF in CrOSComponentInstaller via ThreadPool mutation

#498959137Reporter: vm...@google.com
$0
7/10/2026
Showing 1851-1860 of 13102 bugs