Disclosed Chromium Security Bugs

mruby:mruby_fuzzer: Crash in mrb_word_boxing_value_float

#485738526•Reporter: 87...@developer.gserviceaccount.com
$0
2/20/2026

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_flathsh_unique_find

#483643121•Reporter: 87...@developer.gserviceaccount.com
$0
2/20/2026

apache-poi:POIHSSFFuzzer: Security exception in org.apache.poi.util.IOUtils.safelyAllocate

#479908886•Reporter: 87...@developer.gserviceaccount.com
$0
2/20/2026

V8 Sandbox Bypass: Interpreter generator resume jump table length isn't trimmed after allocating suspend ids

#460166688•Reporter: le...@chromium.org
$0
2/20/2026

V8 correctness failure in sources: 36

#460084175•Reporter: 24...@project.gserviceaccount.com
$0
2/20/2026

v8_wasm_module_fuzzer: DCHECK failure in module->num_imported_functions == statuses.size() in module-compiler.cc

#459883555•Reporter: 24...@project.gserviceaccount.com
$0
2/20/2026

V8 correctness failure in sources: 3a

#458581464•Reporter: ma...@google.com
$0
2/20/2026

permission prompt obscured by black screen lead to spoof to allow permission

#400761079•Reporter: sa...@gmail.com
$500
2/20/2026

Bypass #443948855 - Allows Arbitrary Code Execution via "Copy as cURL (cmd)" in DevTools

#455899538•Reporter: we...@gmail.com
$1,000
2/20/2026

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding

#480271354•Reporter: 87...@developer.gserviceaccount.com
$0
2/19/2026
Showing 3281-3290 of 13102 bugs