Disclosed Chromium Security Bugs

Maglev - CallBuiltin (input @0 = LoadHoleyFixedDoubleArrayElement) type HoleyFloat64 is not Tagged

#456547591•Reporter: sh...@gmail.com
$11,000
2/7/2026

graphicsmagick:coder_BIE_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

#481570059•Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

graphicsmagick:coder_XPM_fuzzer: Use-of-uninitialized-value in GrayscalePseudoClassImage

#481429902•Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

graphicsmagick:coder_XPM_fuzzer: Use-of-uninitialized-value in WriteXPMImage

#481419152•Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

gdal:gdal_vrt_fuzzer: Crash in gdal_DGifDecompressLine

#481841770•Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

kmime:kmime_fuzzer: Global-buffer-overflow in nameMatch

#481841731•Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

pwa install prompt truncated when window.resizeTo is called lead to spoof

#379429930•Reporter: sa...@gmail.com
$0
2/6/2026

V8 Sandbox Bypass: WasmCPT handle UAF by import dispatch table corruption (multiple variants of b/446113730)

#452605803•Reporter: se...@gmail.com
$20,000
2/6/2026

webnn_graph_mojolpm_fuzzer: Negative-size-param in void tflite::reference_ops::BroadcastTo<8>

#450406597•Reporter: 24...@project.gserviceaccount.com
$0
2/6/2026

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in ReadContainer

#461325309•Reporter: 87...@developer.gserviceaccount.com
$0
2/5/2026
Showing 3371-3380 of 13102 bugs