Disclosed Chromium Security Bugs

CSP sandbox bypass in permission requests via GetVisibleURL fallback

#499257860Reporter: vm...@google.com
$0
8/13/2026

DCHECK failure in !IsCheckedWithFeedback(a->op()) in redundancy-elimination.cc

#508347341Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#505413738Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026

UAF in RenderFrameHostImpl::ExitFullscreen() — missing WeakPtr guard (variant of EnterFullscreen fix 91d5baaef742)

#505045913Reporter: mi...@minico.ai
$2,000
8/13/2026

Potential integer truncation in ANGLE TextureGL leads to OOB PBO read

#499205491Reporter: vm...@google.com
$0
8/13/2026

Use-after-poison in cppgc::LivenessBroker::IsHeapObjectAliveImpl

#508082779Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026

DCHECK failure in ValidInputs(result) in assembler.h

#505610970Reporter: 24...@project.gserviceaccount.com
$0
8/13/2026

Potential state desync in GLES2 decoder via Adreno MSAA resize workaround on OOM

#501461853Reporter: vm...@google.com
$0
8/13/2026

Android Chrome: Out of bound in Vulkan Samsung driver

#401546699Reporter: pw...@gmail.com
$2,000
8/13/2026

Potential Dawn D3D12 OOB Read via Coordinate Collision in Robustness Transform

#499091269Reporter: vm...@google.com
$0
8/13/2026
Showing 271-280 of 12354 bugs