Disclosed Chromium Security Bugs

Security: heap-use-after-free in extensions::ExtensionInstallTimePermissionProvider::GetRuleIterator

#507356235•Reporter: zh...@gmail.com
$6,000
8/13/2026

Thread-unsafe base::WeakPtr dereference leads to potential UAF in CompoundImageBacking

#497136403•Reporter: rj...@google.com
$0
8/13/2026

Race Condition Between Maglev IdentityMap and Mark-Compact GC ThinString Shortcutting Leads to OOB Write in Trusted Space

#508811474•Reporter: hu...@gmail.com
$500
8/13/2026

Potential iOS Autofill isolation bypass via async callback resurrection

#505123022•Reporter: li...@chromium.org
$0
8/13/2026

Potential arbitrary write in Browser via uninitialized memory in GamepadDeviceMac

#508463705•Reporter: li...@chromium.org
$0
8/13/2026

Potential Folder Hijacking in iOS Save to Drive via Shared Folders

#508257850•Reporter: li...@chromium.org
$0
8/13/2026

Potential Site Isolation Bypass in iOS Actor Tools via Routing Mismatch

#505076737•Reporter: li...@chromium.org
$0
8/13/2026

Potential Privilege Escalation via Unvalidated continue_url in Account Consistency Flow on iOS

#505200733•Reporter: li...@chromium.org
$0
8/13/2026

OOB Access in WebGL via ANGLE Identifier Collision and Clamp Bypass

#499176133•Reporter: vm...@google.com
$0
8/13/2026

Potential Cross-Thread Use-After-Free in MediaFoundationStreamWrapper

#503565293•Reporter: rj...@google.com
$0
8/13/2026
Showing 241-250 of 12354 bugs
1...242526...1236