Disclosed Chromium Security Bugs

Navigation API bypasses BlockingFocusWithoutUserActivation via hardcoded FocusTrigger::kUserGesture

#506392934•Reporter: vm...@google.com
$0
8/13/2026

User gesture bypass via action.onUserSettingsChanged event

#505945112•Reporter: vm...@google.com
$0
8/13/2026

Potential iOS Enterprise Data Controls (DLP) bypass in Reader Mode via missing delegate overrides

#504196549•Reporter: vm...@google.com
$0
8/13/2026

Potential defense-in-depth regression: CRWWebUISchemeHandler drops security headers and sets wildcard CORS

#502503860•Reporter: vm...@google.com
$0
8/13/2026

Missing browser-side visibility check for Pan/Tilt/Zoom in ImageCaptureImpl

#502493950•Reporter: vm...@google.com
$0
8/13/2026

CSP bypass via mismatched policy counts in HTMLDocumentParser::AllowPreloading

#502358901•Reporter: vm...@google.com
$0
8/13/2026

Potential iOS DataSharingTabHelper gesture gate bypass

#502090914•Reporter: vm...@google.com
$0
8/13/2026

Potential seccomp bypass in Speech Recognition sandbox due to BPF DSL ternary logic error

#502023400•Reporter: vm...@google.com
$0
8/13/2026

Potential UI spoofing and forced actions via X-Chrome-Manage-Accounts header on iOS

#501892820•Reporter: vm...@google.com
$0
8/13/2026

Potential CCT EngagementSignals privacy guard bypass allows cross-origin text fragment oracle

#501859865•Reporter: vm...@google.com
$0
8/13/2026
Showing 291-300 of 12354 bugs
1...293031...1236