Disclosed Chromium Security Bugs

V8 Sandbox Bypass: BigInt CachedMod Heap-Buffer-Overflow on C++ Heap

#490769268Reporter: de...@gmail.com
$20,000
6/19/2026

A windows Local Privilege Escalation vulnerbility occured because setup.exe doesn't consider whether the log file C:\Windows\Temp\chrome_installer.log is a hardlink

#40057805Reporter: yc...@gmail.com
$0
6/19/2026

Use-after-free in Dawn wire server buffer map callback due to spontaneous callback race condition

#488613135Reporter: se...@gmail.com
$16,000
6/19/2026

UAF in setBindGroup of WebGPU

#490810422Reporter: he...@gmail.com
$0
6/19/2026

UAF in APICopyTextureToTexture of Dawn

#489585038Reporter: he...@gmail.com
$11,000
6/19/2026

Integer overflow in HarfBuzz apply_stch() causes heap OOB write via crafted font + Arabic text

#491516670Reporter: pw...@gmail.com
$10,000
6/19/2026

Fetching source maps can bypass `connect-src` CSP via a removed frame

#490773579Reporter: al...@gmail.com
$1,500
6/19/2026

Heap Buffer Overflow in ScriptProcessorHandler::Process via Configurable Render Quantum Leads to Out-of-Bounds Read and Write

#485397284Reporter: je...@gmail.com
$7,000
6/19/2026

OOB Write in FFTConvolver of WebAudio

#487495466Reporter: he...@gmail.com
$11,000
6/19/2026

Browser Process Heap-Use-After-Free in Digital Credentials API (Renderer → Browser Memory Corruption)

#488617440Reporter: wo...@gmail.com
$3,000
6/19/2026
Showing 2211-2220 of 13102 bugs