Disclosed Chromium Security Bugs

Potential ChromeOS multi-signin getAllScreensMedia bypass of ScreenSwitchCheckController

#519006835•Reporter: vm...@google.com
$0
9/10/2026

Maglev Array.prototype.sort representation confusion after callback-driven elements kind transition

#542403045•Reporter: gu...@gmail.com
$1,000
9/10/2026

Potential DLP bypass via TOCTOU in Enterprise paste caching

#502888857•Reporter: vm...@google.com
$0
9/10/2026

Site Isolation bypass leading to Arbitrary File Write through RenderFrameHost, Extension Installation, and Downloads Page.

#527023137•Reporter: av...@gmail.com
$5,000
9/10/2026

Security: use-after-free in Blink's PresentationAttributeCache: the cache hash is not passed through EnsureValidHash, so a hash equal to the deleted sentinel hides a live entry from Oilpan

#540482895•Reporter: hd...@gmail.com
$0
9/10/2026

V8 Sandbox Bypass: WasmCodeManager::LookupCode() traverses a NativeModule::owned_code_ node after last-owner teardown frees it

#541448581•Reporter: sm...@gmail.com
$1,000
9/10/2026

Potential Oilpan Tracing Bypass and UAF in ElementDataCache due to Unfiltered Hash Keys

#517511796•Reporter: vm...@google.com
$0
9/10/2026

Potential Heap Use-After-Free via concurrent access to shared DependencyParserModel in ThreadPool

#517550232•Reporter: vm...@google.com
$0
9/10/2026

Trap in Builtins_CheckMaglevType

#539110933•Reporter: 24...@project.gserviceaccount.com
$0
9/10/2026

Potential coordinate-mismatch stencil clear tracking in Ganesh-Vulkan leading to VRAM leak

#532921453•Reporter: vm...@google.com
$0
9/10/2026
Showing 261-270 of 13222 bugs
1...262728...1323