Disclosed Chromium Security Bugs

Site Isolation bypass via missing frame gate in LCPCriticalPathPredictorHost

#497341787Reporter: vm...@google.com
$0
7/10/2026

UXSS via Service Worker ID Collision in Synthetic Responses

#496632973Reporter: vm...@google.com
$0
7/10/2026

Off-thread cppgc::Persistent destruction in RTCRtpSender leads to heap corruption

#498753456Reporter: vm...@google.com
$0
7/10/2026

Potential Use-after-free in WebRtcAudioDeviceImpl::RenderData during WebRTC teardown

#498696266Reporter: rj...@google.com
$0
7/10/2026

Cross-origin Autofill data leak via TimestampedSameOriginQueue origin check bypass

#498396238Reporter: vm...@google.com
$0
7/10/2026

User Activation Bypass via HTMLMediaElement::RequestPlay and System Audio Focus Resume

#497548558Reporter: vm...@google.com
$0
7/10/2026

Browser-process UAF in BrowsingDataRemoverImpl prerender-cache loop via synchronous destruction of new-tab prerender WebContents

#497053588Reporter: vm...@google.com
$0
7/10/2026

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_SingleOpConv2d_fuzzer: Crash in xnn_xx_fill_ukernel__sse2_u64

#498553267Reporter: 24...@project.gserviceaccount.com
$0
7/10/2026

Crash in skcms_private::hsw::clut

#498652131Reporter: 24...@project.gserviceaccount.com
$0
7/10/2026

Bad-cast to const View from content::NavigationURLLoaderImpl in views::View::Contains

#498549576Reporter: 24...@project.gserviceaccount.com
$0
7/10/2026
Showing 1871-1880 of 13102 bugs