Disclosed Chromium Security Bugs

Potential Use-After-Free in TargetHandler::AutoAttacherDestroyed

#497735587•Reporter: rj...@google.com
$0
7/8/2026

Potential Use-After-Free and Double Free in MojoVideoDecoder::Stop()

#497292072•Reporter: rj...@google.com
$0
7/8/2026

Potential Privilege Escalation via Unvalidated target_tree_id in Reading Mode

#495857582•Reporter: vi...@google.com
$0
7/8/2026

Potential unauthenticated Expat DTD parsing in CRD signaling via libjingle_xmpp

#497828214•Reporter: vm...@google.com
$0
7/8/2026

heap-buffer-overflow in ANGLE VertexArrayVk::convertVertexBufferCPU

#496503799•Reporter: ki...@gmail.com
$16,000
7/8/2026

Integer Overflow in ElementsUploadDataStream Leading to HTTP Request Smuggling

#497450574•Reporter: vm...@google.com
$0
7/8/2026

Renderer navigation bypass to privileged schemes via client_side_redirect_url

#497365545•Reporter: vm...@google.com
$0
7/8/2026

ProtectedMemory bypass for MojoJS via runtime-enabled feature string iteration gadget

#497250399•Reporter: vm...@google.com
$0
7/8/2026

Cross-origin resource fetch bypass in WebUI webview script injection

#496016840•Reporter: vm...@google.com
$0
7/8/2026

Potential UAF in RTCPeerConnectionHandler via dangling WebLocalFrame pointer

#497695401•Reporter: rj...@google.com
$0
7/8/2026
Showing 1931-1940 of 13102 bugs
1...193194195...1311