Disclosed Chromium Security Bugs

Heap-buffer-overflow in SkPngCodecBase::createColorTable

#406054655Reporter: at...@gmail.com
$9,000
7/3/2025

DevTools Recorder Can Flip Internal Flags Without User Awareness

#401927528Reporter: bi...@gmail.com
$1,000
7/3/2025

UAF when accessing member variable after destruction of throttle (SubframeHistoryNavigationThrottle)

#405140652Reporter: xp...@gmail.com
$4,000
7/2/2025

Extension popup can render over downloaded file prompts

#367771116Reporter: sa...@gmail.com
$1,000
7/2/2025

V8 Sandbox Bypass: Uninitialized read to switch-case OOB jump in Maglev JSGeneratorObject allocation inlining

#403600260Reporter: se...@gmail.com
$25,000
7/2/2025

Vulnerability GHSA-67mh-4wv8-2f99 affecting esbuild in devtools

#404582010Reporter: fa...@microsoft.com
$0
7/1/2025

tarantool:luaL_loadbuffer_fuzzer: Heap-use-after-free in lj_strfmt_pushvf

#407592872Reporter: 87...@developer.gserviceaccount.com
$0
6/30/2025

iOS QR code spoof: embedded backslashes

#379818904Reporter: ze...@gmail.com
$1,000
6/28/2025

atspi_in_process_fuzzer: Heap-use-after-free in views::MenuController::OpenMenuImpl

#391709147Reporter: ad...@chromium.org
$0
6/28/2025

ITW 0-day Google Chrome Sandbox Escape

#405143032Reporter: oc...@gmail.com
$0
6/28/2025
Showing 221-230 of 8283 bugs