Disclosed Chromium Security Bugs

Missing origin verification for Federation-RP-Connection-Status header

#497269716•Reporter: vm...@google.com
$0
7/8/2026

Use-After-Free in slim_web_view's AttachIframeGuest via reentrant destroyContainer

#497135482•Reporter: vm...@google.com
$0
7/8/2026

Site Isolation bypass via missing descendant check in AnnotatedPageContent extraction

#497014021•Reporter: vm...@google.com
$0
7/8/2026

Potential background access restriction bypass via SmartCardService state inconsistency

#497079979•Reporter: rj...@google.com
$0
7/8/2026

Potential fenced frame isolation bypass in WebView via StorageAccessHandle

#497385349•Reporter: vm...@google.com
$0
7/8/2026

Potential Referer forgery via crafted chrome-distiller:// URLs in DistillerReferrerThrottle

#496604874•Reporter: vi...@google.com
$0
7/8/2026

DOM state corruption via synchronous mutation during state-preserving atomic move

#497646037•Reporter: vm...@google.com
$0
7/8/2026

Potential CHIPS bypass in Android WebView due to dropped IsolationInfo in intercepted navigations

#497440158•Reporter: vm...@google.com
$0
7/8/2026

Access to URL on tabs without "Tabs" permission, by Chrome Extensions

#40443365•Reporter: ba...@gmail.com
$500
7/7/2026

Access to tab's URL and Title by Chrome Extensions without permission

#40450494•Reporter: ba...@gmail.com
$500
7/7/2026
Showing 251-260 of 11332 bugs
1...252627...1134