Disclosed Chromium Security Bugs

DCHECK RangeType::New failure due to unsound-under-FTZ V8 optimizations

#527930356•Reporter: mo...@xbow.com
$500
9/10/2026

V8 optimizations make IEEE-only assumptions that are unsound with denormals disabled

#528276487•Reporter: mo...@xbow.com
$500
9/10/2026

New UAF trigger for https://issues.chromium.org/issues/493747593 (Fullchain RCE)

#520656244•Reporter: ha...@gmail.com
$5,000
9/10/2026

Potential 32-bit Integer Overflow in Mojo Channel::ReadBuffer::Reserve leading to Heap OOB Write

#513138301•Reporter: vm...@google.com
$0
9/10/2026

Potential Use-After-Free in QuicSession::OnFinalByteOffsetReceived due to reentrant map mutation

#519347100•Reporter: vm...@google.com
$0
9/10/2026

StoragePartition isolation bypass via Speculation Rules Prefetch ServiceWorker inheritance

#497491557•Reporter: vm...@google.com
$0
9/10/2026

TOCTOU and Use-After-Free in userScripts.execute() leads to process poisoning

#513199795•Reporter: vm...@google.com
$0
9/10/2026

Cross-origin secret leak via request ID collisions in WebRequest API

#513564337•Reporter: vm...@google.com
$0
9/10/2026

Potential driver-level GPU out-of-bounds vertex fetch via ANGLE EGL backend robustness omission

#516887576•Reporter: vm...@google.com
$0
9/10/2026

V8 Sandbox Bypass: Parallel EPT evacuation can create a dangling Managed and leads to OOS Write

#534092070•Reporter: sm...@gmail.com
$1,000
9/10/2026
Showing 311-320 of 13222 bugs
1...313233...1323