Disclosed Chromium Security Bugs

LPE - Arbitrary File Write in Google Chrome Enterprise (MacOS): The GoogleUpdater, which is executed by root, follows symlinks when writing the file settings.dat in the user folder

#448113221•Reporter: jo...@gmail.com
$3,000
1/22/2026

Signature check for fast API calls too loose - [was: DCHECK failure in BelongsToThisGraph(i) in graph.h]

#450652935•Reporter: 24...@project.gserviceaccount.com
$0
1/22/2026

Audit remaining uses of GetIsolateFromHeapObject and Heap::FromWritableHeapObject

#431584880•Reporter: cl...@chromium.org
$0
1/22/2026

kde-thumbnailers:blenderthumbnail_fuzzer: Heap-buffer-overflow in QImage::rgbSwapped_helper

#476224464•Reporter: 87...@developer.gserviceaccount.com
$0
1/21/2026

gpac:fuzz_probe_analyze: Heap-buffer-overflow in img_process

#476810012•Reporter: 87...@developer.gserviceaccount.com
$0
1/21/2026

maven-model:Xpp3ReaderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.FilePathTraversal.detectAndGuidePathTrav

#454518403•Reporter: 87...@developer.gserviceaccount.com
$0
1/21/2026

DCHECK failure in base::IsInRange(cp_offset, kMinCPOffset, kMaxCPOffset) in regexp-macro-assembler

#451663011•Reporter: 24...@project.gserviceaccount.com
$0
1/21/2026

DCHECK failure in use_count_ > 0 in maglev-ir.h

#451658193•Reporter: 24...@project.gserviceaccount.com
$0
1/21/2026

ghostscript:gs_device_pdfwrite_fuzzer: Crash in gs_cmap_ToUnicode_add_pair

#476170120•Reporter: 87...@developer.gserviceaccount.com
$0
1/20/2026

apache-poi:POIHSLFFuzzer: Security exception in org.apache.poi.hslf.record.PPDrawing.writeOut

#42528545•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
1/20/2026
Showing 3511-3520 of 13102 bugs