Disclosed Chromium Security Bugs

heap-use-after-free in XNNPACK widen_fp16_accumulators

#495864169Reporter: ki...@gmail.com
$43,000
7/9/2026

Use-after-free in InspectorWebMCPAgent due to missing CoreProbeSink cleanup on DevTools session detach

#497983833Reporter: je...@gmail.com
$0
7/9/2026

V8: Signed Integer Overflow in Maglev ValueNode use_count_

#496807872Reporter: ca...@gmail.com
$5,000
7/9/2026

DCHECK failure in !IsUndefined(*queue, isolate) in isolate.cc

#498464176Reporter: 24...@project.gserviceaccount.com
$0
7/9/2026

Potential unconsented macOS screen capture via picker ID collision and stale session

#497044629Reporter: vm...@google.com
$0
7/9/2026

Potential Origin Poisoning in Picture-in-Picture Service bypasses Compute Pressure focus gate

#497406748Reporter: rj...@google.com
$0
7/9/2026

Potential Renderer-to-Browser Sandbox Escape via Touch Exploration Anchor Spoofing

#497480712Reporter: rj...@google.com
$0
7/9/2026

Potential OOB Read in XNNPACK MMapWeightCacheProvider allows sandbox persistence/info leak

#497947056Reporter: vm...@google.com
$0
7/9/2026

Potential enterprise version pin bypass via inconsistent IwaVersion comparison operators

#497628367Reporter: vm...@google.com
$0
7/9/2026

Potential Fenced Frame privacy bypass via unpartitioned Accept-CH persistence

#498363574Reporter: rj...@google.com
$0
7/9/2026
Showing 1911-1920 of 13102 bugs