Disclosed Chromium Security Bugs

Potential heap buffer overflow in libyuv::I010ToNV12 due to incorrect AVX-512BW kernel dispatch

#514748734•Reporter: vm...@google.com
$0
9/10/2026

Path traversal in GtkIconTheme allows compromised GPU to trigger SVG parsing in Browser

#519731111•Reporter: vm...@google.com
$0
9/10/2026

Robust-init bypass in ANGLE Vulkan backend allows GPU memory disclosure

#516899138•Reporter: vm...@google.com
$0
9/10/2026

Bypass of --allowed-origins origin restriction in ChromeDriver

#516499604•Reporter: vm...@google.com
$0
9/10/2026

RemoveArrayLengthMethod folds gl_ClipDistance.length() to stale size when redeclared-after-use

#536531515•Reporter: aw...@chromium.org
$0
9/10/2026

Potential UAF in AuthenticatorCommonImpl::Cleanup during synchronous widget destruction

#521495992•Reporter: vm...@google.com
$0
9/10/2026

Input redirection via RenderWidgetTargeter and unvalidated coordinates

#516448843•Reporter: vm...@google.com
$0
9/10/2026

Potential Use-After-Free in PagePopupController::setWindowRect via Re-entrant Popup Creation

#516936863•Reporter: vm...@google.com
$0
9/10/2026

Potential Browser Process UAF in Browser::RegisterProtocolHandler via ForSecurityDropFullscreen

#519358344•Reporter: vm...@google.com
$0
9/10/2026

Use-After-Free in developerPrivate.updateExtensionConfiguration due to synchronous reload

#520202726•Reporter: vm...@google.com
$0
9/10/2026
Showing 331-340 of 13222 bugs