Disclosed Chromium Security Bugs

Potential Browser Process Double-Free via Race Condition in OutputStreamWriteOperation

#497531263•Reporter: vm...@google.com
$0
7/7/2026

Permission Spoofing/Bypass via Missing Scheme Check in ChromePermissionsClient

#497008295•Reporter: vm...@google.com
$0
7/7/2026

Microphone permission bypass via TOCTOU in SpeechRecognitionManagerDelegate

#497007825•Reporter: vm...@google.com
$0
7/7/2026

Sandbox Escape: Premature RenderFrameDeleted via spoofed DidUnloadRenderFrame during inner delegate attach

#496463315•Reporter: vm...@google.com
$0
7/7/2026

Potential Use-After-Free in ImageDownloaderImpl::ContextDestroyed

#497649372•Reporter: rj...@google.com
$0
7/7/2026

WebUSB bug bypasses Chromium's protected USB class restrictions, giving any webpage unrestricted access to USB devices.

#489711638•Reporter: ar...@gmail.com
$2,000
7/7/2026

ANGLE BlitGL copySubTextureCPUReadback Controlled Heap Overflow via Unsynchronized PACK_ROW_LENGTH

#490170083•Reporter: ci...@gmail.com
$90,000
7/7/2026

Potential firewall hole leak in FirewallHoleDelegate via concurrent UDP socket requests

#496382601•Reporter: vm...@google.com
$0
7/7/2026

CHECK failure: scope_info->HasOuterScopeInfo() in maglev-graph-builder.cc

#497565437•Reporter: 24...@project.gserviceaccount.com
$0
7/7/2026

DCHECK failure in Holder v8::internal::TrustedCast(Holder, SourceLocation) [To = v8::int

#497629984•Reporter: 24...@project.gserviceaccount.com
$0
7/7/2026
Showing 1971-1980 of 13102 bugs
1...197198199...1311