Disclosed Chromium Security Bugs

State machine flaw in Dawn BufferBase::Unmap() leads to potential synchronization bypass

#511758373•Reporter: vm...@google.com
$0
8/20/2026

Renderer Sandbox Escape via Heap Buffer Overflow in cast_service's AudioDecoderForMixer

#500055357•Reporter: vm...@google.com
$0
8/20/2026

Potential UAF in PasswordGenerationAgent during cleanup via SetAutofillValue re-entrancy

#511774568•Reporter: vm...@google.com
$0
8/20/2026

Potential Drag-and-Drop Reentrancy Protection Bypass via Multiple Windows

#503551154•Reporter: rj...@google.com
$0
8/20/2026

Potential OOPIF password redaction bypass in Glic screenshots via compromised renderer

#511798438•Reporter: vm...@google.com
$0
8/20/2026

Potential Information Disclosure in Liftoff on Loong64 due to typo in MoveStackValue

#511323719•Reporter: vm...@google.com
$0
8/20/2026

V8 sandbox violation in Builtins_LoadICGenericBaseline

#512160117•Reporter: 24...@project.gserviceaccount.com
$0
8/20/2026

uint32_t Integer Overflow in XNNPACK Deconvolution Packed Weights Calculation Leading to Heap Buffer Overflow via WebNN API

#502178829•Reporter: dc...@gmail.com
$0
8/20/2026

DCHECK failure in dst_low != ah in liftoff-assembler-x64-inl.h

#508336492•Reporter: 24...@project.gserviceaccount.com
$0
8/20/2026

[sandbox] Fix module confusion on imports

#435582611•Reporter: cl...@google.com
$0
8/20/2026
Showing 21-30 of 12354 bugs
1234...1236