Disclosed Chromium Security Bugs

Potential tap-protection bypass on Android Message banner property mutation

#514019137•Reporter: vm...@google.com
$0
9/28/2026

Host path spoofing in ChromeOS exo allows ARCVM to expose host files on paste

#553117928•Reporter: vm...@google.com
$0
9/28/2026

SameSite cookie bypass on cross-site redirect into extension host permissions

#553155590•Reporter: vm...@google.com
$0
9/28/2026

PowerVR sparse page-map heap OOB reachable from WebGL bypasses ANGLE's prior workaround and yields native code execution

#551573368•Reporter: in...@starlabs.sg
$5,000
9/27/2026

SSRF and Untrusted Data Parsing in CastDeviceProvider via mDNS Spoofing

#513134076•Reporter: vm...@google.com
$0
9/27/2026

Use-After-Free in PausedInDebuggerTool in Blink Inspector Overlay

#553130481•Reporter: vm...@google.com
$0
9/27/2026

Potential intent security check bypass loading internal URLs via CCT data URI rewrite desync

#553141660•Reporter: vm...@google.com
$0
9/27/2026

Potential UAF in ANGLE StateManagerGL via ScopedGLState early exit during generateMipmap

#536648933•Reporter: aw...@chromium.org
$0
9/27/2026

Potential Use-After-Free in PrintViewManager via ExitFullscreen nested loop

#523765972•Reporter: rj...@google.com
$0
9/27/2026

Potential Use-After-Free in WindowEventDispatcher::UpdateCapture after OnCaptureLost()

#517661385•Reporter: vm...@google.com
$0
9/27/2026
Showing 21-30 of 13222 bugs
1234...1323