Disclosed Chromium Security Bugs

Potential OOB write in GPU process via GLES2 ReadPixels validator desync

#513165325Reporter: vm...@google.com
$0
8/30/2026

State desync and draw validation bypass in ANGLE GL backend via Transform Feedback

#513919827Reporter: vm...@google.com
$0
8/30/2026

wasmtime:wast_tests: Stack-use-after-scope in wast_tests

#553267076Reporter: 87...@developer.gserviceaccount.com
$0
8/29/2026

Potential Double-free and UAF in ServiceWorkerVersion via re-entrant RemoveLiveVersion

#513424000Reporter: vm...@google.com
$0
8/29/2026

Potential UAF in ProxyResolverV8::Context via FinalizationRegistry cleanup

#511249104Reporter: vm...@google.com
$0
8/29/2026

Use-After-Free in ProcessManager::CloseLazyBackgroundPageNow via keepalive manipulation

#513156160Reporter: vm...@google.com
$0
8/29/2026

Missing mapped buffer validation for UBOs and SSBOs in ANGLE draw calls

#514769383Reporter: vm...@google.com
$0
8/29/2026

Memory Corruption in ANGLE via malformed comma expressions in PLS shaders

#513003797Reporter: vm...@google.com
$0
8/29/2026

Use-After-Free via re-entrant attribute mutation during synchronous speculation-rules error dispatch

#515155946Reporter: pw...@gmail.com
$1,000
8/29/2026

Potential cross-origin leak of VCNs via iOS Manual Fill Cache & Programmatic Focus

#504215814Reporter: vm...@google.com
$0
8/29/2026
Showing 201-210 of 12748 bugs