Disclosed Chromium Security Bugs

Phi untagging invalidates BuildCheckHeapObject's type refinement

#495679730•Reporter: ma...@chromium.org
$0
7/3/2026

Permission bypass in WebRequest API allows compromised renderer to intercept general traffic

#496279876•Reporter: vm...@google.com
$0
7/3/2026

Potential Use-After-Free in NavigationEntryImpl via duplicate frame unique_names

#495931147•Reporter: rj...@google.com
$0
7/3/2026

Potential DOM tree corruption via iframe unload in variadic DOM mutations

#496281816•Reporter: rj...@google.com
$0
7/3/2026

Potential UAF in RenderWidgetHostNSViewBridge::SetTextSelection via nested-loop reentrancy

#496217775•Reporter: vm...@google.com
$0
7/3/2026

Potential cross-origin ViewTransition snapshot leak via same-site prerender redirect

#495890000•Reporter: vi...@google.com
$0
7/3/2026

UXSS via unvalidated javascript: URI in Enterprise Search Aggregator

#496379792•Reporter: vm...@google.com
$0
7/3/2026

Browser-process Use-After-Free in cc::RTree via unbounded Paint Preview LinkData

#496205576•Reporter: vm...@google.com
$0
7/3/2026

CHECK failure: scope_info->HasOuterScopeInfo()

#496356219•Reporter: 24...@project.gserviceaccount.com
$0
7/3/2026

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#496272034•Reporter: 24...@project.gserviceaccount.com
$0
7/3/2026
Showing 2021-2030 of 13102 bugs
1...202203204...1311