Disclosed Chromium Security Bugs

Potential cross-context UAF/OOB write in GPU process via uninitialized VAImage

#507258786•Reporter: vm...@google.com
$0
8/13/2026

UAF in SelectTool::Execute due to synchronous DOM events

#506377279•Reporter: vm...@google.com
$0
8/13/2026

Potential Type Confusion and OOB Read in ANGLE D3D11 Buffer11::PackStorage

#506374676•Reporter: vm...@google.com
$0
8/13/2026

UAF Write in Glic Actor Dispatchers via Synchronous Frame Detachment

#506150628•Reporter: vm...@google.com
$0
8/13/2026

Potential OOB GPU Read via ANGLE Metal UBO Conversion Cache Confusion

#500472605•Reporter: vm...@google.com
$0
8/13/2026

Potential Use-After-Free in Browser Process via Data Race in ChildProcessLauncherHelper

#497612174•Reporter: rj...@google.com
$0
8/13/2026

Potential UAF in ANGLE D3D11 Image11 via unhandled error in recoverFromAssociatedStorage

#497450927•Reporter: vm...@google.com
$0
8/13/2026

Potential Use-After-Free in ContinueWindowMacController during Chrome Remote Desktop session

#505204771•Reporter: li...@chromium.org
$0
8/13/2026

Potential GPU memory corruption via Transform Feedback state confusion in ANGLE Vulkan

#497533569•Reporter: vm...@google.com
$0
8/13/2026

Potential UAF in Browser Process via dangling Cast SocketSubscriber

#505815444•Reporter: vm...@google.com
$0
8/13/2026
Showing 351-360 of 12354 bugs
1...353637...1236