Disclosed Chromium Security Bugs

Potential Use-After-Free in OtpVerificationDialogViewAndroid during dismissal animation

#501561644•Reporter: vm...@google.com
$0
7/25/2026

Potential IWA Key Rotation Bypass via Unconditional Acceptance of Compromised Previous Key

#500468338•Reporter: vm...@google.com
$0
7/25/2026

Potential Heap OOB Write in GPU process via unvalidated VP9 VA-API spatial layers

#500293394•Reporter: vm...@google.com
$0
7/25/2026

Potential Sandbox Escape via RemoteViews Inflation Filter Bypass in Custom Tabs

#497936421•Reporter: vm...@google.com
$0
7/25/2026

Cross-origin URL interception via PWA wildcard scope extension logic flaw

#497538899•Reporter: vm...@google.com
$0
7/25/2026

Stack out-of-bounds write in CreateBufferFromHandle: unchecked DMA-BUF plane count from compromised renderer overflows fixed-size gbm_import_fd_modifier_data arrays in GPU process.

#488268854•Reporter: je...@gmail.com
$11,000
7/25/2026

DCHECK failure in !IsTheHole(argument) in elements.cc

#503622408•Reporter: 24...@project.gserviceaccount.com
$0
7/25/2026

DCHECK failure in IsPrimitiveMap(*this) || instance_type() == WASM_NULL_TYPE in map-inl.h

#503472574•Reporter: 24...@project.gserviceaccount.com
$0
7/25/2026

ORT DML EP: heap-buffer-overflow in CreateCpuResource via int4/uint4 constants

#494248550•Reporter: to...@gmail.com
$10,000
7/25/2026

ORT DML EP: new-delete-type-mismatch via WebNN quantizeLinear

#493566347•Reporter: to...@gmail.com
$0
7/25/2026
Showing 311-320 of 11922 bugs
1...313233...1193