Disclosed Chromium Security Bugs

mruby:mruby_fuzzer: Use-of-uninitialized-value in lambda_body

#530322174Reporter: 87...@developer.gserviceaccount.com
$0
7/2/2026

Potential integer underflow in VP8 parser leads to GPU OOB read/write

#495417883Reporter: rj...@google.com
$0
7/2/2026

WebGL canvas upload into RGB9_E5 texture triggers GPU-process heap-buffer-overflow in CopySubTextureCHROMIUM DRAW_AND_READBACK fallback

#495076802Reporter: mu...@winfunc.com
$0
7/2/2026

ANGLE D3D11: stale ID3D11Buffer pointer in TransformFeedback11 mBuffers leads to use-after-free in GPU process via SOSetTargets

#489791425Reporter: je...@gmail.com
$11,000
7/2/2026

Potential UAF in ColorPickerBridge via asynchronous dialog dismissal race

#495902113Reporter: vm...@google.com
$0
7/2/2026

Integer overflow in XNNPack tensor size computation leads to heap OOB write in the GPU process via WebNN pool2d

#493747582Reporter: je...@gmail.com
$43,000
7/2/2026

Heap OOB Read/Write in X11 GetArrayProperty via Arithmetic Mismatch

#496259890Reporter: vm...@google.com
$0
7/2/2026

V8 TurboFan contextAccess depth truncation cause type confusion in Module Variable Access

#495273999Reporter: qy...@gmail.com
$11,000
7/2/2026

UAF in UpdateShapeActive of PDF Ink V2

#494644471Reporter: he...@gmail.com
$4,000
7/2/2026

Out-of-Bounds Write in Ruy Matrix Packing Due to int32 Overflow in Quantized Conv2d

#495096655Reporter: ni...@intel.com
$0
7/2/2026
Showing 2041-2050 of 13102 bugs