Disclosed Chromium Security Bugs

DOM XSS and Trusted Types bypass in streamHTML via invalid SanitizerConfig

#497655906Reporter: vm...@google.com
$0
7/10/2026

CORS preflight bypass for forbidden headers via whitespace normalization mismatch

#498408346Reporter: vm...@google.com
$0
7/10/2026

Use-After-Free in EventListenerMap::RemoveListenersForProcess via MDnsAPI reentrancy

#497977591Reporter: vm...@google.com
$0
7/10/2026

Potential stealth remote desktop takeover on ChromeOS via compromised CRD extension renderer

#497541219Reporter: vm...@google.com
$0
7/10/2026

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_SingleOpConv2d_fuzzer: Crash in tflite::Subgraph::InvokeImpl

#498651557Reporter: 24...@project.gserviceaccount.com
$0
7/10/2026

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_SingleOpConv2d_fuzzer: Incorrect-function-pointer-type in pthreadpool_parallelize_5d

#498447225Reporter: 24...@project.gserviceaccount.com
$0
7/10/2026

janet:fuzz_dobytes: Heap-use-after-free in janet_ev_default_threaded_callback

#528620996Reporter: 87...@developer.gserviceaccount.com
$0
7/9/2026

Integer overflow in TFLite StridedSlice output dimension computation leads to heap buffer overflow in the GPU process

#495864183Reporter: je...@gmail.com
$43,000
7/9/2026

OOB and UAF in pdfium lcms

#498284498Reporter: he...@gmail.com
$7,000
7/9/2026

Heap-use-after-free in VerticalTabDragHandlerImpl::ContinueDrag

#490588145Reporter: ch...@gmail.com
$1,000
7/9/2026
Showing 1881-1890 of 13102 bugs