Disclosed Chromium Security Bugs

CORP bypass via Service Worker Static Routing cache source

#497436273•Reporter: vm...@google.com
$0
8/20/2026

Information Disclosure: SW Static Routing bypasses Opaque Response validation

#495999481•Reporter: vi...@google.com
$0
8/20/2026

Stale interior pointer write in HeapObject::AllocateAndInstallJSDispatchHandle

#511279942•Reporter: vm...@google.com
$0
8/20/2026

Privilege Escalation via ScriptInjectionTracker and CSP error pages

#511249430•Reporter: vm...@google.com
$0
8/20/2026

Potential navigation provenance laundering in CastWebViewDefault::OpenURLFromTab

#502374993•Reporter: vm...@google.com
$0
8/20/2026

Potential Heap OOB Read in MixerInput::RenderInterleaved via negative channel_selection

#500601345•Reporter: vm...@google.com
$0
8/20/2026

Heap buffer overflow in Chromecast mixer due to integer truncation in CreateBufferPool

#500077014•Reporter: vm...@google.com
$0
8/20/2026

Potential Integer overflow in CastAudioBus allocation allows heap overflow in Chromecast mixer

#500587568•Reporter: vm...@google.com
$0
8/20/2026

Potential OOB Heap Read/Write in Chromecast CMA via Unvalidated DecryptConfig Subsamples

#499048914•Reporter: vm...@google.com
$0
8/20/2026

Potential Integer Underflow and OOB Write in AudioSocket::ParseAudio

#491894115•Reporter: rj...@google.com
$0
8/20/2026
Showing 11-20 of 12354 bugs
1234...1236