Disclosed Chromium Security Bugs

V8 Sandbox Bypass: BigInt DivideSchoolbook Native Heap OOB Write via Signed Scratch-Length Overflow

#496807861•Reporter: pi...@gmail.com
$5,000
7/7/2026

V8 Sandbox Bypass: BigInt DivideBarrett Double Fetch causing Native Heap oob read/write

#496629079•Reporter: pi...@gmail.com
$5,000
7/7/2026

ANGLE Metal ProvokingVertexHelper uint32 Overflow causes GPU OOB Write

#484986863•Reporter: ci...@gmail.com
$4,000
7/7/2026

Skia JPEG MPF integer overflow in SkJpegMultiPictureParameters::Make leading to OOB Read/Write

#488596746•Reporter: sh...@gmail.com
$2,000
7/7/2026

Potential Heap OOB Write in Skia `trim` via Canvas `getImageData` Integer Overflow

#495534710•Reporter: rj...@google.com
$0
7/7/2026

WebCodecs libaom, libvpx: OOB Read in AV1 and VP9 encoder when encoding I420 frames with mismatched U and V strides

#492213293•Reporter: eu...@chromium.org
$0
7/7/2026

Arbitrary browser-initiated navigation via unvalidated Web App Migration API manifest

#496276216•Reporter: vm...@google.com
$0
7/7/2026

Extension access to passkeys (webauthn) bypasses runtime_blocked_hosts enterprise policy

#494341321•Reporter: ro...@robwu.nl
$2,000
7/7/2026

Unbounded page dimensions in SkMultiPictureDocument lead to DoS in PrintCompositor

#496526419•Reporter: vm...@google.com
$0
7/7/2026

Potential Cross-Origin Password Generation Poisoning in ChromePasswordManagerClient

#497632199•Reporter: rj...@google.com
$0
7/7/2026
Showing 1961-1970 of 13102 bugs
1...196197198...1311