Disclosed Chromium Security Bugs

Crash in v8::internal::MinorMarkSweepCollector::DrainMarkingWorklist

#447235294•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026

DCHECK failure in kCanBeWeak || (!IsSmi() == HAS_STRONG_HEAP_OBJECT_TAG(ptr_)) in tagged-impl.h

#447004458•Reporter: 24...@project.gserviceaccount.com
$0
1/2/2026

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

#472084712•Reporter: 87...@developer.gserviceaccount.com
$0
1/1/2026

libssh:ssh_bind_config_fuzzer_nalloc: Heap-double-free in local_parse_glob

#449017557•Reporter: 87...@developer.gserviceaccount.com
$0
1/1/2026

V8 Sandbox Bypass: WasmCPT handle UAF by import dispatch table growth

#446113730•Reporter: se...@gmail.com
$20,000
1/1/2026

Heap-use-after-free in ui::AcceleratorManager::Process

#446986774•Reporter: 24...@project.gserviceaccount.com
$0
1/1/2026

Heap-use-after-free in ui::AcceleratorManager::Process

#446962939•Reporter: 24...@project.gserviceaccount.com
$0
1/1/2026

Crash in v8::internal::compiler::ObjectData::IsBigInt

#446735537•Reporter: 24...@project.gserviceaccount.com
$0
1/1/2026

Crash in v8::internal::Map::instance_type

#446725502•Reporter: 24...@project.gserviceaccount.com
$0
1/1/2026

Crash in v8::internal::compiler::ObjectData::IsContext

#446944035•Reporter: 24...@project.gserviceaccount.com
$0
1/1/2026
Showing 3631-3640 of 13102 bugs
1...363364365...1311