Disclosed Chromium Security Bugs

DCHECK failure in IsJSGlobalProxy(value) in js-objects-tq-inl.inc

#497505520•Reporter: 24...@project.gserviceaccount.com
$0
7/7/2026

Use-After-Free in PowerVR Driver (libIMGegl.so) via Transform Feedback Resource Binding Race Condition

#480788630•Reporter: ha...@gmail.com
$0
7/7/2026

Potential SameSite=Lax CSRF via unvalidated vc_issuance_endpoint in FedCM

#495786857•Reporter: vi...@google.com
$0
7/7/2026

Potential Stack Information Leak in gfx::GenerateAmbientViewingEnvironment

#497527002•Reporter: vm...@google.com
$0
7/7/2026

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in InterpretPhoneme

#499813794•Reporter: 87...@developer.gserviceaccount.com
$0
7/6/2026

DCHECK failure in i < this ->context_local_count() in scope-info-tq-inl.inc

#497215789•Reporter: 24...@project.gserviceaccount.com
$0
7/6/2026

CHECK failure: !scope_info.HasOuterScopeInfo() implies d + 1 == depth in maglev-graph-builder.c

#497330273•Reporter: 24...@project.gserviceaccount.com
$0
7/6/2026

DCHECK failure in Holder v8::internal::TrustedCast(Holder, SourceLocation) [To = v8::int

#497388476•Reporter: 24...@project.gserviceaccount.com
$0
7/6/2026

V8 sandbox violation in double v8::FastCApiObject::AddAllTypedArrayFastCallback

#497054083•Reporter: 24...@project.gserviceaccount.com
$0
7/6/2026

UAF write in Dawn wire server: BufferUpdateMappedData writes to freed GPU memory after DeviceDestroy

#492139412•Reporter: se...@gmail.com
$36,000
7/5/2026
Showing 1981-1990 of 13102 bugs
1...198199200...1311