Disclosed Chromium Security Bugs

coturn:FuzzStunClient: Stack-buffer-overflow in is_http

#504809218Reporter: 87...@developer.gserviceaccount.com
$0
4/22/2026

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in libebml::ReadCodedSizeValue

#477645132Reporter: 87...@developer.gserviceaccount.com
$0
4/22/2026

openbabel:fuzz_convert: Heap-buffer-overflow in std::__1::basic_string, std::__1::allocator

#477658265Reporter: 87...@developer.gserviceaccount.com
$0
4/22/2026

DevTools Sources panel with Service Worker causes POST to be resent bypassing SameSite=Strict

#470574526Reporter: j....@gmail.com
$1,000
4/22/2026

Security: Busy Rendering Cause Layer to Persist on Target Website Allow Address Bar Spoofing & Clickjacking Attack

#40057499Reporter: su...@gmail.com
$3,000
4/22/2026

H.266 parser OOB write in ParseProfileTierLevel (enable_platform_vvc builds)

#474391729Reporter: sn...@gmail.com
$0
4/22/2026

ANGLE HandleAllocator: Invalid iterator access on empty vector → UAF + OOB (double-free plausible)

#452209503Reporter: gl...@gmail.com
$1,000
4/22/2026

CHECK failure: byte_length >= memory.min_memory_size in wasm-objects.cc

#474714470Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

DCHECK failure in !has_key() in maglev-ir.h

#475276561Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

DCHECK failure in is_first_use_in_isolate == !isolate_info->native_modules.contains(native_module)

#475276552Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026
Showing 351-360 of 10546 bugs