Disclosed Chromium Security Bugs

[PassAsSpan] ArrayBuffer.transfer() re-entrancy UAF / SEGV in TextDecoder.decode

#484946544Reporter: pk...@gmail.com
$2,000
6/4/2026

Debug check failed: Holder v8::internal::TrustedCast(Holder, SourceLocation) [To = v8::internal::SeqTwoByteString, From = v8::internal::String, Holder = v8::internal::Handl e] in src/json/json-parser.h, line 468

#486551890Reporter: al...@goodmanemail.com
$0
6/4/2026

PDFium: AES-CBC Initialization Vectors generated using unseeded rand()

#486906037Reporter: ml...@gmail.com
$0
6/4/2026

Crash in v8::internal::VerifyPointersVisitor::VerifyPointers

#487429052Reporter: 24...@project.gserviceaccount.com
$0
6/4/2026

libreoffice:fods2xlsfuzzer: Heap-buffer-overflow in formula::FormulaToken::IsFunction

#516502581Reporter: 87...@developer.gserviceaccount.com
$0
6/3/2026

graphicsmagick:coder_MP4_fuzzer: Heap-use-after-free in slice_segment_header::operator=

#517039652Reporter: 87...@developer.gserviceaccount.com
$0
6/3/2026

ogre:ogre_deep_fuzz: Heap-buffer-overflow in Ogre::MeshSerializerImpl::flipEndian

#519110615Reporter: 87...@developer.gserviceaccount.com
$0
6/3/2026

kimageformats:kimgio_heif_fuzzer: Heap-use-after-free in slice_segment_header::operator=

#517027630Reporter: 87...@developer.gserviceaccount.com
$0
6/3/2026

cups:fuzz_cups: Heap-buffer-overflow in _cupsRasterAddError

#489911024Reporter: 87...@developer.gserviceaccount.com
$0
6/3/2026

Out-of-Bounds Read in Biquad::Process on macOS

#485397283Reporter: je...@gmail.com
$0
6/3/2026
Showing 2411-2420 of 13102 bugs