Disclosed Chromium Security Bugs

PDF bookmarks bypass SameSite Strict cookies.

#40058077•Reporter: nd...@protonmail.com
$1,000
5/2/2026

Privileged `chrome://` navigation via reload-triggered server redirect in iOS Chrome

#476898368•Reporter: po...@gmail.com
$1,000
5/2/2026

DCHECK failure in index < input_count() in maglev-ir.h

#478009695•Reporter: 24...@project.gserviceaccount.com
$0
5/2/2026

DCHECK failure in buffer->byte_length() == backing_store->byte_length() in js-array-buffer-inl.h

#477645621•Reporter: 24...@project.gserviceaccount.com
$0
5/2/2026

DCHECK failure in !backing_store->is_wasm_memory() && !backing_store->is_resizable_by_js() implies

#477718329•Reporter: 24...@project.gserviceaccount.com
$0
5/2/2026

libvips:vips_fuzzer: Heap-buffer-overflow in vips_stdif_generate

#506473566•Reporter: 87...@developer.gserviceaccount.com
$0
5/1/2026

grok:grk_decompress_fuzzer: Bad-cast to TileComponentWindow from grk::TileComponentWindow in grk::TileComponent::getWindow

#506749541•Reporter: 87...@developer.gserviceaccount.com
$0
5/1/2026

libheif:encoder_fuzzer: Global-buffer-overflow in svt_aom_get_blk_var_map

#508347372•Reporter: 87...@developer.gserviceaccount.com
$0
5/1/2026

grok:grk_decompress_fuzzer: Crash in void grk::N_AVX2::vscheduler

#506735733•Reporter: 87...@developer.gserviceaccount.com
$0
5/1/2026

use-after-poison on address thread T0

#475613896•Reporter: mu...@gmail.com
$2,000
5/1/2026
Showing 281-290 of 10546 bugs
1...282930...1055