Disclosed Chromium Security Bugs

Use-After-Free in AsyncTaskManager::WaitAllPendingTasks Due to Early Task Destruction in GPU Process

#492735369•Reporter: se...@gmail.com
$11,000
8/13/2026

OOB VRAM access via RenderBundle indirect draw command mutation

#495489174•Reporter: rj...@google.com
$0
8/13/2026

Potential Heap Buffer Overflow in SwiftShader via ANGLE Depth/Stencil Resolve

#503043000•Reporter: rj...@google.com
$0
8/13/2026

Potential stack buffer overflow due to unbounded `NativePixmapHandle` deserialization in GPU

#496402862•Reporter: ta...@microsoft.com
$0
8/13/2026

Potential OOB Read in GPU Validating Decoder via Negative basevertex

#499199970•Reporter: vm...@google.com
$0
8/13/2026

V8 race UAF/SEGV in `TracedHandles` with ProgrammaticScrollPromise

#504073879•Reporter: at...@gmail.com
$10,000
8/13/2026

UAF in SkRuntimeEffect due to data race on fBaseProgram IR

#498989348•Reporter: vm...@google.com
$0
8/13/2026

Universal XSS via iOS QR Scanner Parser Differential

#505290253•Reporter: li...@chromium.org
$0
8/13/2026

CSRF bypass and persistence via BackgroundContentsService logic bugs

#499051898•Reporter: vm...@google.com
$0
8/13/2026

Stale DevTools raw headers grant leaks HttpOnly cookies via WebSocket

#498281224•Reporter: vm...@google.com
$0
8/13/2026
Showing 281-290 of 12354 bugs
1...282930...1236