Disclosed Chromium Security Bugs

Uninitialized GPU memory disclosed to WebGL: glGenerateMipmap marks a whole texture initialized after robust-initializing only the base level (ANGLE regression 5b683ed30122)

#542424219•Reporter: hd...@gmail.com
$1,000
9/10/2026

GPU Process RCE via Command Iterator Desync in Dawn D3D11 Backend — Variant of CVE-2026-10921 (Missed Call Sites) (Dawn D3D11 Command-Stream Desynchronization Due to Stale Null-Terminated String Length Convention)

#544333571•Reporter: sa...@gmail.com
$0
9/10/2026

UAF in ANGLE TextureVk::stageSelfAsSubresourceUpdates - incomplete fix of issue 519259107

#533917992•Reporter: ar...@gmail.com
$0
9/10/2026

Potential browser-process Use-After-Free in Autofill Payments controllers during macOS fullscreen exit

#532950329•Reporter: vm...@google.com
$0
9/10/2026

Bypass of multicast permission policy in RestrictedUDPSocket::SendTo

#517608454•Reporter: vm...@google.com
$0
9/10/2026

Unauthorized silent audio capture via MediaStreamManager race condition

#523505418•Reporter: rj...@google.com
$0
9/10/2026

Potential Use-After-Free in MenuController::OnDragUpdated via accessibility re-entrancy

#517515945•Reporter: vm...@google.com
$0
9/10/2026

Potential Path Traversal in ChromeOS Google Photos Wallpaper Integration via itemId.mediaKey

#517310696•Reporter: vm...@google.com
$0
9/10/2026

Potential Use-After-Free in CaptureController and WindowEventDispatcher via reentrant destruction

#515428251•Reporter: vm...@google.com
$0
9/10/2026

Potential sandbox escape via over-privileged Directory Mojo interface in FileUtil service

#499065144•Reporter: vm...@google.com
$0
9/10/2026
Showing 291-300 of 13222 bugs
1...293031...1323