Disclosed Chromium Security Bugs

Potential iOS HTTPS-Only Mode bypass via HTTP redirect chains

#503736006•Reporter: vm...@google.com
$0
9/10/2026

Cross-IWA iframe navigation enables Service Worker CSRF and installation oracle

#502986244•Reporter: vm...@google.com
$0
9/10/2026

Missing icon_url validation in password sharing allows potential cross-user tracking

#502814490•Reporter: vm...@google.com
$0
9/10/2026

Safe Browsing bypass via RAR PBKDF2 iteration-count exhaustion

#502611474•Reporter: vm...@google.com
$0
9/10/2026

Potential Path Traversal in Sync Storage via Unvalidated extension_id

#501889544•Reporter: vm...@google.com
$0
9/10/2026

IWA sandbox bypass via data: URL iframe precursor-collapse

#501700023•Reporter: vm...@google.com
$0
9/10/2026

Uninitialized memory leak in WebGL GLStringQuery APIs

#501644790•Reporter: vm...@google.com
$0
9/10/2026

State confusion in IbanSaveManager allows arbitrary IBAN upload without consent

#501643868•Reporter: vm...@google.com
$0
9/10/2026

Unauthorized Google Drive API access via SyncFileSystem permission bypass

#501627201•Reporter: vm...@google.com
$0
9/10/2026

Bypass of SameSite cookie restrictions via WebSockets in Storage Access API SharedWorkers

#500467033•Reporter: vm...@google.com
$0
9/10/2026
Showing 181-190 of 13222 bugs
1...181920...1323