Disclosed Chromium Security Bugs

WebNFC Android: Missing return allows background tabs to silently write/lock NFC tags

#500517053Reporter: vm...@google.com
$0
8/13/2026

Potential SYSTEM LPE via Insecure CWD in Elevation Service

#500483038Reporter: vm...@google.com
$0
8/13/2026

DevTools bypass in Fetch.fulfillRequest allows cookie injection on restricted hosts

#500170887Reporter: vm...@google.com
$0
8/13/2026

Potential Use-After-Free in ANGLE Vulkan via swallowed OOM error

#499093536Reporter: vm...@google.com
$0
8/13/2026

GPU Process Heap Leak via SkScalerContextProxy

#498951946Reporter: vm...@google.com
$0
8/13/2026

Cross-Origin Information Leak in Skia AAHairlineOp via Stale Vertex Buffers

#498204112Reporter: vm...@google.com
$0
8/13/2026

ExtensionNavigationRegistry::CanRedirect logic bug allows cross-extension WAR bypass

#497599683Reporter: vm...@google.com
$0
8/13/2026

Potential stack buffer overflow in SkEdgeClipper::clipCubic due to undersized buffers

#497591594Reporter: vm...@google.com
$0
8/13/2026

Heap-buffer-overflow in skcms::select_curve_ops via a PNG iCCP mAB tag on the default Rust ICC path

#504160794Reporter: oj...@gmail.com
$2,000
8/13/2026

Potential UAF in UIView+WindowCoordinates; Change OBJC_ASSOCIATION_ASSIGN to RETAIN

#508281950Reporter: li...@chromium.org
$0
8/13/2026
Showing 341-350 of 12354 bugs