Disclosed Chromium Security Bugs

Arbitrary file read in UI DevTools via path traversal

#496107456Reporter: vm...@google.com
$0
7/2/2026

DCHECK failure in i < this ->context_local_count() in scope-info-tq-inl.inc

#495888361Reporter: 24...@project.gserviceaccount.com
$0
7/2/2026

CHECK failure: scope_info.scope_type() != ScopeType::SCRIPT_SCOPE

#495923720Reporter: 24...@project.gserviceaccount.com
$0
7/2/2026

DCHECK failure in assigned == kMaybeAssigned in maglev-graph-builder.cc

#496074718Reporter: 24...@project.gserviceaccount.com
$0
7/2/2026

Clamp-merge optimization corrupts maxPool2d padding via union aliasing, causing heap OOB write in GPU process

#494823884Reporter: je...@gmail.com
$43,000
7/2/2026

Potential OOB Read in PostScriptMetaFile::SafePlayback via crafted EMF

#496196022Reporter: vi...@google.com
$0
7/2/2026

DCHECK failure in i::Is(*local_isolate->roots_table().handle_at(index_)) in maglev-ir.cc

#495923721Reporter: 24...@project.gserviceaccount.com
$0
7/2/2026

ghostscript:gs_device_ljet4_fuzzer: Crash in names_string_ref

#529443698Reporter: 87...@developer.gserviceaccount.com
$0
7/1/2026

open62541:fuzz_mdns_xht_15: Global-buffer-overflow in txt2sd

#511056140Reporter: 87...@developer.gserviceaccount.com
$0
7/1/2026

libyal:libqcow_file_fuzzer: Heap-buffer-overflow in libqcow_internal_file_read_buffer_from_file_io_handle

#529506617Reporter: 87...@developer.gserviceaccount.com
$0
7/1/2026
Showing 2051-2060 of 13102 bugs