Disclosed Chromium Security Bugs

Renderer-side cross-origin info leak via mid-load preload attribute downgrade

#502371717Reporter: vm...@google.com
$0
7/29/2026

Potential Browser-process UAF in HWNDMessageHandler fullscreen monitor map

#501403820Reporter: vm...@google.com
$0
7/29/2026

Safe Browsing bypass via stale hash state during download resumption

#500510384Reporter: vm...@google.com
$0
7/29/2026

GPU memory leak via ANGLE ES2 texture validation typo

#500501226Reporter: vm...@google.com
$0
7/29/2026

Potential heap buffer overflow in ANGLE Vulkan via format mismatch in stageSubresourceUpdateFromFramebuffer

#500429259Reporter: vm...@google.com
$0
7/29/2026

32-bit size_t overflow in ANGLE's TIntermAggregate::getConstantValue leads to heap OOB write

#498400132Reporter: vm...@google.com
$0
7/29/2026

Potential UAF and Double-Free in Wayland Screen Capture due to data race on MouseCursor

#504551032Reporter: vm...@google.com
$0
7/29/2026

DCHECK failure in IsPrimitiveMap(this) || instance_type() == WASM_NULL_TYPE in map-inl.h

#503762708Reporter: 24...@project.gserviceaccount.com
$0
7/29/2026

DCHECK failure in dominating_frame_state.valid() in graph-builder.cc

#504712799Reporter: 24...@project.gserviceaccount.com
$0
7/29/2026

DCHECK failure in !IsTheHole(heap_object) in api.cc

#504424086Reporter: 24...@project.gserviceaccount.com
$0
7/29/2026
Showing 231-240 of 11919 bugs