Disclosed Chromium Security Bugs

CSP bypass in MV2 extensions via script-src-elem/attr

#500528267•Reporter: vm...@google.com
$0
8/13/2026

Potential Heap Buffer Overflow in Mac WebMenuRunner via unvalidated item_font_size IPC

#508452241•Reporter: li...@chromium.org
$0
8/13/2026

Potential Use-After-Free in DeviceAuthenticatorMac due to nested run loop

#508289938•Reporter: li...@chromium.org
$0
8/13/2026

Integer overflow in libyuv vertical scaling allows potential GPU process memory leak

#505814332•Reporter: vm...@google.com
$0
8/13/2026

Potential Use-After-Free in Browser via base::mac::PasteboardChangedObserver

#508456788•Reporter: li...@chromium.org
$0
8/13/2026

Potential UAF in iOS CredentialSuggestionBottomSheetMediator across navigation

#504195132•Reporter: vm...@google.com
$0
8/13/2026

Use-after-free in extension renderer via AutomationAXTreeWrapper state poisoning

#502978647•Reporter: vm...@google.com
$0
8/13/2026

Potential Heap OOB Read / Uninitialized VRAM Leak in WebGL Compressed Texture Arrays

#500114058•Reporter: vm...@google.com
$0
8/13/2026

Potential VRAM Info Leak via Premature Cleared Flag in DoCopyTexSubImage2D

#500150338•Reporter: vm...@google.com
$0
8/13/2026

GPU passthrough decoder UAF: DoBufferData GL error path skips mapped_buffer_map.erase()

#507707838•Reporter: pa...@gmail.com
$25,000
8/13/2026
Showing 251-260 of 12354 bugs
1...252627...1236