Disclosed Chromium Security Bugs

Cross-profile leak of custom dictionary words via unguarded AllHostsIterator()

#507239830•Reporter: vm...@google.com
$0
8/13/2026

iOS PhishGuard bypass when typing passwords containing non-ASCII characters

#504185807•Reporter: vm...@google.com
$0
8/13/2026

Heap-buffer-overflow read in libavformat `mov_seek_stream` / `can_seek_to_key_sample` via a crafted HEVC MP4 and an HTMLMediaElement seek

#507090179•Reporter: qw...@gmail.com
$3,000
8/13/2026

Forged audio_forwarder in SpeechRecognition IPC bypasses per-origin microphone permission on Android

#508092634•Reporter: je...@gmail.com
$8,000
8/13/2026

Potential UXSS / Privileged Navigation via Missing URL Scheme Validation in Lens SDK Integration

#508293203•Reporter: li...@chromium.org
$0
8/13/2026

Browser Process Type Confusion in DataSharingSDKDelegateDesktop

#501669642•Reporter: vm...@google.com
$0
8/13/2026

Potential OOB write in browser via Starboard media subsample integer signedness flip

#499025645•Reporter: vm...@google.com
$0
8/13/2026

heap-buffer-overflow in TabDragController::AttachToNewContext

#505371980•Reporter: xp...@gmail.com
$2,000
8/13/2026

V8 Sandbox Escape: CppHeapPointerTable evacuation entry causes out-of-sandbox CppGC mark-bit write

#506570358•Reporter: sm...@gmail.com
$5,000
8/13/2026

AddressSanitizer heap-buffer-overflow in skcms CLUT from a PNG iCCP chunk on the default Rust ICC path

#504103236•Reporter: oj...@gmail.com
$2,000
8/13/2026
Showing 231-240 of 12354 bugs
1...232425...1236