Disclosed Chromium Security Bugs

Sandbox escape via DevTools ws parameter filter bypass and arbitrary file read

#498292657Reporter: vm...@google.com
$0
7/10/2026

DevTools Target Confusion via Fenced Frame Token Collision

#497255035Reporter: vm...@google.com
$0
7/10/2026

Potential cross-tab tracking and policy bypass via Storage.setInterestGroupTracking

#496189510Reporter: vi...@google.com
$0
7/10/2026

Potential Use-After-Free write in DesktopNativeWidgetAura::HandleActivationChanged via AutoReset

#497577575Reporter: vm...@google.com
$0
7/10/2026

Potential unauthorized WebXR front-facing camera activation from compromised renderer

#497975477Reporter: vm...@google.com
$0
7/10/2026

Potential UAF via cross-thread data race on demuxer_stream_ in MediaFoundationStreamWrapper

#497985088Reporter: vm...@google.com
$0
7/10/2026

Maglev: unsound node replacement when inlining can lead to exploitable write barrier omission

#493534950Reporter: pj...@gmail.com
$55,000
7/10/2026

Uninitialized heap memory disclosure in OpenH264 encoder via oversized frames

#497952533Reporter: vm...@google.com
$0
7/10/2026

UAF in Metal LibraryCache

#497724490Reporter: he...@gmail.com
$16,000
7/10/2026

Potential Browser RCE via Type Confusion in BrowserAccessibilityComWin::get_hyperlink

#498401609Reporter: vm...@google.com
$0
7/10/2026
Showing 1861-1870 of 13102 bugs