Disclosed Chromium Security Bugs

Potential heap OOB write in libvpx vpx_codec_encode during multi-resolution encoding

#513405023•Reporter: vm...@google.com
$0
9/10/2026

Potential UAF in browser process via off-thread destruction of OutputStreamWriteOperation

#516496659•Reporter: vm...@google.com
$0
9/10/2026

Potential Use-after-free in MidiManagerWinrt via stale TaskService callback execution

#518108291•Reporter: vm...@google.com
$0
9/10/2026

Potential Use-After-Free in DigitalIdentityProviderDesktop::EndRequestWithError

#516942828•Reporter: vm...@google.com
$0
9/10/2026

Missing bounds check in GetSendEncodingsFromRemoteDescription leads to out-of-bounds write in VideoCodecInitializer::SetupCodec via remote SDP simulcast RID injection

#486536241•Reporter: je...@gmail.com
$8,000
9/10/2026

Heap-use-after-free in blink::PagePopupChromeClient::ScheduleAnimation

#483589078•Reporter: 24...@project.gserviceaccount.com
$0
9/10/2026

Manifest note_taking->new_note_url not validated same-origin in browser process (missed sibling of 0b080cee89)

#511062248•Reporter: pa...@gmail.com
$0
9/10/2026

mruby:mruby_fuzzer: Stack-use-after-return in parser_lex

#529619775•Reporter: 87...@developer.gserviceaccount.com
$0
9/9/2026

mruby:mruby_fuzzer: Check failed in CheckUnwind

#541969271•Reporter: 87...@developer.gserviceaccount.com
$0
9/9/2026

freerdp:TestFuzzClientRdpFile: Heap-buffer-overflow in CommandLineParseCommaSeparatedValuesEx

#557825963•Reporter: 87...@developer.gserviceaccount.com
$0
9/9/2026
Showing 351-360 of 13222 bugs