Disclosed Chromium Security Bugs

Audio player's download functionality allows bypassing the "allow-downloads" flag of sandboxed iframes

#40064543•Reporter: he...@gmail.com
$1,000
5/29/2026

Unblocked :// Characters on `data:text`origin value lead to File Source Origin Spoofing

#419921726•Reporter: fr...@gmail.com
$0
5/29/2026

Mini bar not rendering when omnibox is hidden on Pixel 8 and 9

#479122455•Reporter: ch...@gmail.com
$1,000
5/29/2026

Authorization Bypass in Target.exposeDevToolsProtocol via Missing Early Return

#485287859•Reporter: oj...@gmail.com
$4,000
5/29/2026

Unviersal CSP Bypass/XSS & Privileged chrome:// page XSS via Browser History Sidebar navigation

#474817168•Reporter: is...@gmail.com
$1,000
5/29/2026

Heap OOB read in SpeechRecognizerImpl::AddAudioFromRenderer

#482828615•Reporter: gr...@gmail.com
$36,000
5/29/2026

Heap Buffer Overflow in TFLite + XNNPack via WebNN

#483445078•Reporter: to...@gmail.com
$33,000
5/29/2026

Heap-buffer-overflow in CSSUnparsedValue::FindVariableName

#484811719•Reporter: he...@gmail.com
$11,000
5/29/2026

Security: Heap-use-after-free in SecureChannelImpl::OnDecryptedResponse

#485397279•Reporter: me...@gmail.com
$11,000
5/29/2026

libyal:libfsxfs_file_entry_fuzzer: Heap-buffer-overflow in libfsxfs_directory_table_read_data

#517304717•Reporter: 87...@developer.gserviceaccount.com
$0
5/28/2026
Showing 2461-2470 of 13102 bugs
1...246247248...1311