Disclosed Chromium Security Bugs

Use-After-Free in Canvas2D beginLayer Filter Parsing Leads to Renderer Crash and Potential RCE

#485677960Reporter: je...@gmail.com
$50,000
6/2/2026

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::MplsLayer::toString

#489360236Reporter: 87...@developer.gserviceaccount.com
$0
6/1/2026

pcre2:pcre2_fuzzer_32: Heap-buffer-overflow in pcre2_compile_32

#488713937Reporter: 87...@developer.gserviceaccount.com
$0
6/1/2026

inchi:inchi_input_fuzzer: Stack-use-after-return in mark_alt_bonds_and_taut_groups

#488729177Reporter: 87...@developer.gserviceaccount.com
$0
6/1/2026

ogre:ogre_deep_fuzz: Heap-double-free in Ogre::Serializer::~Serializer

#504412453Reporter: 87...@developer.gserviceaccount.com
$0
5/31/2026

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::MeshSerializerImpl::calcPosesSize

#504400320Reporter: 87...@developer.gserviceaccount.com
$0
5/31/2026

libreoffice:schtmlfuzzer: Bad-cast to ScExternalDoubleRefToken from ScExternalSingleRefToken in extendRangeReference

#516218705Reporter: 87...@developer.gserviceaccount.com
$0
5/30/2026

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

#515796208Reporter: 87...@developer.gserviceaccount.com
$0
5/30/2026

gpac:fuzz_scene: Heap-use-after-free in gf_laser_decoder_del

#517408264Reporter: 87...@developer.gserviceaccount.com
$0
5/30/2026

Security: Permission request spoof on iOS

#40094098Reporter: ch...@gmail.com
$0
5/30/2026
Showing 2441-2450 of 13102 bugs