Disclosed Chromium Security Bugs

mpv:fuzzer_set_property_MPV_FORMAT_STRING_1: Segv on unknown address in yuv2rgb4_X_c

#478212631Reporter: 87...@developer.gserviceaccount.com
$0
1/28/2026

thrift-java:RoundtripJSONFuzzer: Security exception in org.apache.thrift.fuzz.RecursiveStruct$RecursiveStructStandardScheme.read

#478005963Reporter: 87...@developer.gserviceaccount.com
$0
1/28/2026

Out-of-bound read in the jmp table of ActiveMediaSessionController leads to sandbox escape.

#453094710Reporter: bl...@gmail.com
$250,000
1/28/2026

cctest/test-inobject-slack-tracking/SubclassTypedArrayBuiltinNoInlineNew starts flaking

#355120682Reporter: ma...@google.com
$0
1/28/2026

Debug check failed: Holder v8::internal::TrustedCast

#451750214Reporter: qi...@gmail.com
$0
1/28/2026

Crash in Builtins_CEntry_Return1_ArgvOnStack_NoBuiltinExit

#446962918Reporter: 24...@project.gserviceaccount.com
$0
1/28/2026

binutils:fuzz_addr2line: Crash in bfd_getl32

#478562234Reporter: 87...@developer.gserviceaccount.com
$0
1/27/2026

gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file

#478681247Reporter: 87...@developer.gserviceaccount.com
$0
1/27/2026

cmake:xml_parser_fuzzer: Use-of-uninitialized-value in lookup

#478906840Reporter: 87...@developer.gserviceaccount.com
$0
1/27/2026

gpsd:FuzzDrivers: Segv on unknown address in aivdm_analyze

#478021379Reporter: 87...@developer.gserviceaccount.com
$0
1/27/2026
Showing 241-250 of 9745 bugs