Disclosed Chromium Security Bugs

SiteInstanceGroup Check Bypass in RFPH IPC Handlers

#495933780•Reporter: vm...@google.com
$0
9/10/2026

Potential missing origin check in File System Access API transfer tokens

#495876543•Reporter: vi...@google.com
$0
9/10/2026

Type Confusion in libxslt xsltDocumentFunction via stylesheet document exposure

#495541478•Reporter: rj...@google.com
$0
9/10/2026

Potential UAF and RCE in Chromecast renderer via Data Race in CastURLLoaderThrottleProvider

#495515356•Reporter: rj...@google.com
$0
9/10/2026

User Activation bypass in FileSystemAccessManagerImpl

#495429423•Reporter: rj...@google.com
$0
9/10/2026

Heap buffer overflow in GinJavaBridgeValue deserialization allows compromised renderer to read host app process memory

#498482618•Reporter: je...@gmail.com
$3,000
9/10/2026

Cross-thread use-after-free in browser process via chrome.processes.terminate()

#499206649•Reporter: je...@gmail.com
$5,000
9/10/2026

Use-after-free in blink::WidgetInputHandlerManager::DidStartScrollingViewport

#542756749•Reporter: ha...@google.com
$0
9/10/2026

Potential Use-After-Free in WidgetBase::DidBeginMainFrame

#540058837•Reporter: vm...@google.com
$0
9/10/2026

DevToolsSession ValidateMessage bypass via embedded-NUL in CBOR STRING8 payload

#540021969•Reporter: vm...@google.com
$0
9/10/2026
Showing 201-210 of 13222 bugs