Disclosed Chromium Security Bugs

Potential Use-After-Free in Browser process via Data Race in CrasAudioHandler

#502692580•Reporter: rj...@google.com
$0
7/24/2026

Potential Use-After-Free in MediaRouterDialogControllerAndroid via JNI

#502646179•Reporter: rj...@google.com
$0
7/24/2026

Potential Use-After-Free in TabModalDialogViewAndroid::Create via JNI Re-entry

#502716984•Reporter: rj...@google.com
$0
7/24/2026

Potential Cross-thread UAF in MediaDrmBridge on Android via Data Race

#499023054•Reporter: vm...@google.com
$0
7/24/2026

Potential Use-After-Free in CardUnmaskPromptViewAndroid via dangling JNI pointer

#501577725•Reporter: vm...@google.com
$0
7/24/2026

Potential Use-After-Free in ash-chrome via dangling DragDropDelegate in exo::DataDevice

#501817936•Reporter: vm...@google.com
$0
7/24/2026

Potential FD Use-After-Close in ProcessProxy::Write via unsequenced ThreadPool task

#501616308•Reporter: vm...@google.com
$0
7/24/2026

Double Free in Browser Process via GuestView Attach Race

#502055648•Reporter: vm...@google.com
$0
7/24/2026

V8 Sandbox Bypass: double-free in HandleScope::Extend via concurrent JS stack printing from MainMarkingVisitor and ConcurrentMarkingVisitor

#501136000•Reporter: gu...@gmail.com
$5,000
7/24/2026

Potential OOB access in GPU process via rank-0 Slice in WebNN ORT backend

#499051067•Reporter: vm...@google.com
$0
7/24/2026
Showing 331-340 of 11922 bugs
1...333435...1193