Disclosed Chromium Security Bugs

Sandbox escape via AppleScript `save` command allowing arbitrary file write

#501844153•Reporter: vm...@google.com
$0
8/13/2026

Compromised renderer can remove other extensions' webRequest listeners via EventRouter IPC

#501739206•Reporter: vm...@google.com
$0
8/13/2026

Potential precise location leak to approximate-only origins via race condition on Android

#501683745•Reporter: vm...@google.com
$0
8/13/2026

Uninitialized heap leak in SnooperNode due to mismatched DISCRETE channel counts

#501667839•Reporter: vm...@google.com
$0
8/13/2026

navigator.share() scheme bypass via leading to potential local file exfiltration

#501541341•Reporter: vm...@google.com
$0
8/13/2026

Potential WebAPK signature bypass via ZIP parser differential in WebApkVerifySignature

#501535295•Reporter: vm...@google.com
$0
8/13/2026

Cross-process tracing via TracingHandler PID filter bypasses

#501528031•Reporter: vm...@google.com
$0
8/13/2026

Potential heap buffer overflow in Skia's GrAAConvexTessellator via integer overflow

#501511299•Reporter: vm...@google.com
$0
8/13/2026

Cross-origin glyph atlas disclosure in Skia Graphite via integer underflow

#501483855•Reporter: vm...@google.com
$0
8/13/2026

Potential browser process UAF via unvalidated KVC key path in PlistSettingsClient

#501360342•Reporter: vm...@google.com
$0
8/13/2026
Showing 331-340 of 12354 bugs
1...333435...1236