Disclosed Chromium Security Bugs

Service-side UAF due to missing sync token update in C*RP:WillDrawInternal()

#493708171•Reporter: he...@gmail.com
$10,000
8/13/2026

Mach port handle confusion in Browser process via CALayerParams copy-assignment

#502104354•Reporter: vm...@google.com
$0
8/13/2026

Potential Heap-use-after-free in ANGLE Vulkan vertex conversion via stale buffer handles

#503054174•Reporter: rj...@google.com
$0
8/13/2026

Potential UAF in ANGLE Vulkan via 32-bit ResourceSerial wrap and stale dynamic descriptor set

#498804020•Reporter: vm...@google.com
$0
8/13/2026

Potential Use-After-Free in AXTreeSourceAndroid via predictable virtual node ID collision

#501568207•Reporter: vm...@google.com
$0
8/13/2026

Potential Network Partition Drop in V0 Reporting API Allows Privacy Bypass

#497357986•Reporter: vm...@google.com
$0
8/13/2026

HTTP Request Smuggling via missing read clamp in DataPipeElementReader

#497278395•Reporter: vm...@google.com
$0
8/13/2026

Uninitialized heap disclosure in Network process via ChunkedDataPipeUploadDataStream

#497056412•Reporter: vm...@google.com
$0
8/13/2026

Potential information leak of URL fragments in COEP and DIP violation reports

#503719488•Reporter: rj...@google.com
$0
8/13/2026

DCHECK failure in !IsElement(*holder_) in lookup-inl.h

#509312809•Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026
Showing 201-210 of 12354 bugs
1...202122...1236