Disclosed Chromium Security Bugs

V8: Out-of-bounds access in JSON.parse

#452296415•Reporter: bi...@google.com
$0
1/23/2026

V8: Type Confusion in LoadSuperIC

#450328966•Reporter: bi...@google.com
$0
1/23/2026

clickjacking (enterjacking) download notification when a window.alert() is closed

#405727341•Reporter: sa...@gmail.com
$3,000
1/23/2026

V8 Sandbox Bypass: AAW/PC control via OOB builtin in SharedFunctionInfo

#451355210•Reporter: kr...@gmail.com
$20,000
1/23/2026

Vulnerability: CVE-2019-8341 affecting GitOnBorg::chromium::chromium::src

#440001496•Reporter: au...@google.com
$0
1/23/2026

WebAuthn passkey API allows popunder bypass

#41487070•Reporter: kv...@gmail.com
$0
1/23/2026

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in parse_coupled_substream

#472346778•Reporter: 87...@developer.gserviceaccount.com
$0
1/22/2026

harfbuzz:hb-subset-fuzzer: Heap-use-after-free in graph::LigatureSubstFormat1::shrink

#475607265•Reporter: 87...@developer.gserviceaccount.com
$0
1/22/2026

poppler:annot_fuzzer: Heap-use-after-free in g_type_check_instance_is_fundamentally_a

#476973662•Reporter: 87...@developer.gserviceaccount.com
$0
1/22/2026

TDZ check elision leading to hole leak

#450618029•Reporter: ry...@gmail.com
$50,000
1/22/2026
Showing 3501-3510 of 13102 bugs
1...350351352...1311