Disclosed Chromium Security Bugs

GPU Process Info Leak via Forged MaskFormat in Ganesh SDFTSubRun Deserialization

#520571816•Reporter: vm...@google.com
$0
9/10/2026

UAF and Memory Corruption via Off-Thread WebRtcAudioRenderer Destruction in WebRtcAudioDeviceImpl

#519220787•Reporter: vm...@google.com
$0
9/10/2026

Sandbox Escape via Path Traversal in GTK/Qt IconThemeName XSETTINGS

#519258799•Reporter: vm...@google.com
$0
9/10/2026

Out-of-bounds read in VideoCaptureImpl via custom strides less than minimum row bytes

#519248779•Reporter: vm...@google.com
$0
9/10/2026

Potential Use-After-Free in DiagnosticsLogController due to Cross-Thread Race Condition

#517936701•Reporter: vm...@google.com
$0
9/10/2026

Potential PIN exfiltration via lexicographical tie-break in ThreadSafeCertificateMap

#502536551•Reporter: vm...@google.com
$0
9/10/2026

Potential Browser Use-After-Free in AuthenticatorRequestDialogController::CancelAuthenticatorRequest

#522566295•Reporter: vm...@google.com
$0
9/10/2026

Potential URL parsing desynchronization in CupsPrintersHandler::DisplayPpdFile via raw string formatting

#518113070•Reporter: vm...@google.com
$0
9/10/2026

V8 Sandbox Bypass: EventLoop UAF via kMicrotaskCallbackDataTag

#501491077•Reporter: vm...@google.com
$0
9/10/2026

Invalid free of static DummyHistogram singleton via metrics shared memory merge

#520189702•Reporter: vm...@google.com
$0
9/10/2026
Showing 341-350 of 13222 bugs