Disclosed Chromium Security Bugs

Potential GPU Sandbox Escape via Bypassing AMD Mesa Bug Mitigation with f16 in Tint

#500099471Reporter: rj...@google.com
$0
8/4/2026

Potential GPU data leak via unchecked DawnEGLImageRepresentation::BeginAccess

#499075743Reporter: vm...@google.com
$0
8/4/2026

OOB write in SkSL Raster Pipeline via simplifyImmediateUnmaskedOp stack underflow

#500080194Reporter: vm...@google.com
$0
8/4/2026

Potential type confusion and OOB read in libxslt xsltParseTemplateContent

#503879106Reporter: rj...@google.com
$0
8/4/2026

ActorNavigationThrottle policy bypass via same-origin subframe navigation

#502777516Reporter: vm...@google.com
$0
8/4/2026

Potential cross-origin permission spoofing via location.reload() 302 redirect

#502368088Reporter: vm...@google.com
$0
8/4/2026

Potential TOCTOU in Actor Login allows same-site cross-origin credential leak

#500095743Reporter: vm...@google.com
$0
8/4/2026

UAF and BRP bypass in WidgetBaseInputHandler::HandleTouchEvent leading to Renderer RCE

#498991983Reporter: vm...@google.com
$0
8/4/2026

Missing VideoDecoderConfig validation in MojoDecryptorService

#498728857Reporter: vm...@google.com
$0
8/4/2026

Heap buffer overflow in Blink animation timing

#493534964Reporter: sh...@gmail.com
$2,000
8/4/2026
Showing 21-30 of 11919 bugs