Disclosed Chromium Security Bugs

mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_reduce

#472538295•Reporter: 87...@developer.gserviceaccount.com
$0
1/3/2026

Check failed: !WriteBarrier::IsRequired(heap_object, Tagged(value)).

#446463984•Reporter: je...@gmail.com
$10,000
1/3/2026

CHECK failure: untyped_->count(slot.address()) > 0 in heap-verifier.cc

#447457117•Reporter: 24...@project.gserviceaccount.com
$0
1/3/2026

DCHECK failure in !IsSnapshot() in maglev-ir.h

#446947241•Reporter: 24...@project.gserviceaccount.com
$0
1/3/2026

heap-use-after-free in content::indexed_db::Database::connections_ when force_closing_ is true

#446722008•Reporter: so...@gmail.com
$100,000
1/2/2026

Spoof on virtual keyboard

#446463993•Reporter: sa...@gmail.com
$3,000
1/2/2026

Triggering screenshare from an unloading page in a cross-process navigation displays the wrong origin

#442860743•Reporter: do...@gmail.com
$10,000
1/2/2026

heap-use-after-free in wl_proxy_marshal_array_flags

#433027577•Reporter: yu...@gmail.com
$1,000
1/2/2026

DCHECK failure in v8_flags.assert_hole_checked_by_value implies !SafeIsAnyHole(obj) in heap-object

#447107750•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026

V8 sandbox violation in v8::internal::maglev::VirtualObject::set

#447219812•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026
Showing 3621-3630 of 13102 bugs
1...362363364...1311