Disclosed Chromium Security Bugs

open62541:fuzz_mdns_xht: Heap-buffer-overflow in txt2sd

#510115700•Reporter: 87...@developer.gserviceaccount.com
$0
5/6/2026

Bypass for console.log %c formatter url filter

#474670215•Reporter: re...@gmail.com
$1,000
5/6/2026

Improper eliding of data uri causes URL spoofing in preview page.

#421690383•Reporter: x4...@gmail.com
$0
5/6/2026

PIP Origin Attribution Missing When Triggered from `about:blank` via Injected JavaScript

#475238879•Reporter: se...@gmail.com
$0
5/6/2026

V8 perf profiling follows symlinks and overwrites arbitrary files (perf-.map/jit-.dump) using 0666 open without O_NOFOLLOW

#474951825•Reporter: na...@gmail.com
$0
5/6/2026

V8 Sandbox Bypass: Referencing non-shared heap data across isolates leads to UAF -> AAW/PC control

#444865195•Reporter: kr...@gmail.com
$20,000
5/6/2026

[wasm][fast-api] Race between background compilation and NativeModule teardown could lead to UAF

#467705366•Reporter: pi...@gmail.com
$0
5/6/2026

Trap in Builtins_GeneratorPrototypeNext

#477971110•Reporter: 24...@project.gserviceaccount.com
$0
5/6/2026

DCHECK failure in use_count_ > 0 in maglev-ir.h

#478252842•Reporter: 24...@project.gserviceaccount.com
$0
5/6/2026

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::N_AVX2::DecompressRev::transform

#509208894•Reporter: 87...@developer.gserviceaccount.com
$0
5/5/2026
Showing 2701-2710 of 13102 bugs
1...270271272...1311