Disclosed Chromium Security Bugs

Use-After-Free in Navigator::DidNavigate via ExitFullscreenModeForTab

#497769116Reporter: vm...@google.com
$0
7/28/2026

UAF in AnimationTrigger::PerformActivate due to synchronous promise resolution

#496285281Reporter: rj...@google.com
$0
7/28/2026

Security: Heap-use-after-free in PasskeyResetWebContentsObserver::MaybeRunCallback

#503420438Reporter: me...@gmail.com
$3,000
7/28/2026

GPU stack memory leak in DoGetTransformFeedbackVaryingsCHROMIUM

#498382925Reporter: vm...@google.com
$0
7/28/2026

Potential UAF in CPDFXFA_Page::DrawFocusAnnot due to raw pointer across JS execution

#504551617Reporter: vm...@google.com
$0
7/28/2026

Potential UAF in PDFium XFA via CFWL_ScrollBar/CFWL_Caret timer during cppgc sweeping

#504545544Reporter: vm...@google.com
$0
7/28/2026

Potential TOCTOU permission spoofing in Media Stream Bubble via navigation

#503614310Reporter: rj...@google.com
$0
7/28/2026

Potential cross-listener message spoofing in WebView via shared prerender queue

#502444677Reporter: vm...@google.com
$0
7/28/2026

Potential silent external app launch from CCT via OpenURL with NEW_BACKGROUND_TAB

#502173136Reporter: vm...@google.com
$0
7/28/2026

Potential bypass of biometric re-authentication for passwords via Credential Management API

#503642586Reporter: rj...@google.com
$0
7/28/2026
Showing 251-260 of 11919 bugs