Disclosed Chromium Security Bugs

Bypass of JITless policy via non-HTTP/HTTPS schemes (e.g., blob: URLs)

#514489238•Reporter: rj...@google.com
$0
9/10/2026

Cross-origin MHTML overwrite and URL spoofing on POSIX due to shared O_APPEND flag

#514006886•Reporter: vm...@google.com
$0
9/10/2026

Potential Race Condition and UAF in StatsCollectingEncoder during Simulcast

#501679156•Reporter: vm...@google.com
$0
9/10/2026

Cross-origin information leak in GPU process via Skia glyph atlas cache key collision

#514078656•Reporter: vm...@google.com
$0
9/10/2026

Robust resource init bypass via FramebufferGL per-aspect clear on packed depth-stencil

#535379043•Reporter: vm...@google.com
$0
9/10/2026

Potential Use-After-Free in CrasInputStream due to lack of synchronization with libcras thread

#519613438•Reporter: vm...@google.com
$0
9/10/2026

Reentrant Resume During BFCache Restore Causes Browser-Process Use-After-Free in CommitDeferringConditionRunner

#502293787•Reporter: je...@gmail.com
$36,000
9/10/2026

DCHECK failure in end_.valid() in graph.h

#531123009•Reporter: 24...@project.gserviceaccount.com
$0
9/10/2026

DCHECK failure in end_.valid() in graph.h

#529842414•Reporter: 24...@project.gserviceaccount.com
$0
9/10/2026

Unvalidated chrome_host param allows attacker-controlled webview inside chrome://contextual-tasks

#537390933•Reporter: xp...@gmail.com
$5,000
9/10/2026
Showing 271-280 of 13222 bugs
1...272829...1323