Disclosed Chromium Security Bugs

Potential Blind CSRF and SameSite bypass in PdfHost::SaveUrlAs via forged first-party context

#496285754•Reporter: vi...@google.com
$0
7/4/2026

graphicsmagick:coder_HEIF_fuzzer: Stack-buffer-underflow in vvdec::PU::xCheckSimilarMotion

#525087521•Reporter: 87...@developer.gserviceaccount.com
$0
7/3/2026

kimageformats:kimgio_jxl_fuzzer: Use-of-uninitialized-value in jxl::N_SCALAR::FromLinearStage::ProcessRow

#503838752•Reporter: 87...@developer.gserviceaccount.com
$0
7/3/2026

ghostscript:gs_device_tiffsep1_fuzzer: Crash in image_simple_expand

#528059078•Reporter: 87...@developer.gserviceaccount.com
$0
7/3/2026

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_re_utf8_decode

#527760873•Reporter: 87...@developer.gserviceaccount.com
$0
7/3/2026

Heap-use-after-free in TabHoverCardController::UpdateHoverCard

#495269751•Reporter: ch...@gmail.com
$2,000
7/3/2026

Use-After-Free in LegacyStatsCollector::AddCertificateReports via Duplicate DTLS Certificate Fingerprints Leads to Renderer Remote Code Execution

#486495143•Reporter: je...@gmail.com
$11,000
7/3/2026

Differential fuzz: Type Confusion in Maglev JIT via Non-transitive IsEscaping Checks

#495751197•Reporter: rj...@google.com
$0
7/3/2026

Dawn: Heap Use-After-Free in AsyncTaskManager::RunTask via premature WaitableEvent nullification

#493900619•Reporter: sw...@gmail.com
$10,000
7/3/2026

Potential UAF in AwDrawFnImpl leading to Sandbox Escape

#495507390•Reporter: rj...@google.com
$0
7/3/2026
Showing 2011-2020 of 13102 bugs
1...201202203...1311