Disclosed Chromium Security Bugs

gpac:fuzz_scene: Heap-use-after-free in lsr_restore_base

#523253720•Reporter: 87...@developer.gserviceaccount.com
$0
6/13/2026

gpac:fuzz_scene: Heap-use-after-free in gf_node_unregister

#523017646•Reporter: 87...@developer.gserviceaccount.com
$0
6/13/2026

jettison:JsonFuzzer: Security exception in java.base/java.util.Arrays.copyOf

#486573237•Reporter: 87...@developer.gserviceaccount.com
$0
6/13/2026

heap-use-after-free in extensions::ChromeContentRulesRegistry::RemoveRulesImpl

#489619753•Reporter: fa...@gmail.com
$5,000
6/13/2026

[HIGH] nameConstraints: excluded dNSName can be bypassed with wildcard SAN

#487821920•Reporter: ko...@gmail.com
$2,000
6/13/2026

Type confusion in InspectorCSSAgent::setScopeText

#490023239•Reporter: he...@gmail.com
$2,000
6/13/2026

Stack buffer overflow in WebRTC ResamplerHelper::MaybeResample leads to renderer process crash via crafted SDP and Insertable Streams

#486349161•Reporter: je...@gmail.com
$11,000
6/13/2026

Use-after-free in WebRTC ProxySink via unsignaled-to-signaled stream promotion leads to renderer compromise

#486421954•Reporter: je...@gmail.com
$11,000
6/13/2026

DCHECK failure in instr_->InputAt(index)->IsFPRegister() in code-generator-arm64.cc

#490183533•Reporter: 24...@project.gserviceaccount.com
$0
6/13/2026

V8: Missing SBXCHECK in TypedArray same-type copy fast path (sandbox bypass)

#489633222•Reporter: br...@gmail.com
$0
6/13/2026
Showing 2281-2290 of 13102 bugs
1...228229230...1311