Disclosed Chromium Security Bugs

ANGLE Vulkan: invalidateFramebuffer Erases Pending robust_resource_init Clear, Leads to Cross-Origin GPU Texture Data Leak

#492153658Reporter: sw...@gmail.com
$3,000
7/5/2026

Missing client_id validation in EmbeddedFrameSinkProviderImpl enables cross-process DoS and UI freezing

#496415073Reporter: vm...@google.com
$0
7/5/2026

DCHECK failure in assigned == kMaybeAssigned in maglev-graph-builder.cc

#497011405Reporter: 24...@project.gserviceaccount.com
$0
7/5/2026

DCHECK failure in !known_node_aspects().HasContextCacheValue( context, offset, maybe_assigned == k

#497054204Reporter: 24...@project.gserviceaccount.com
$0
7/5/2026

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::dissectPacket

#529197563Reporter: 87...@developer.gserviceaccount.com
$0
7/4/2026

libreoffice:ww6fuzzer: Heap-use-after-free in SwContentIndex::Remove

#529419819Reporter: 87...@developer.gserviceaccount.com
$0
7/4/2026

open62541:fuzz_mdns_xht: Global-buffer-overflow in txt2sd

#530698821Reporter: 87...@developer.gserviceaccount.com
$0
7/4/2026

Heap Out-of-Bounds Write in RTCRtpSender::setParameters

#496266456Reporter: so...@gmail.com
$0
7/4/2026

ARM64 V8 Backend OOB via incorrect 32-bit index zero-extension in MemoryOperand

#496301615Reporter: rj...@google.com
$0
7/4/2026

Potential SharedDictionary partition bypass via stale isolation key on navigation redirect

#496231853Reporter: vi...@google.com
$0
7/4/2026
Showing 1991-2000 of 13102 bugs