Disclosed Chromium Security Bugs

Cross-origin UI spoofing via BFCached frame on password-generation Mojo interface

#517714728•Reporter: vm...@google.com
$0
9/9/2026

Potential bypass of WebXR DOM Overlay cross-origin input suppression via nested wrapper iframes

#517628043•Reporter: vm...@google.com
$0
9/9/2026

MediaRecorder BlobEvent.timecode bypasses high-resolution timer mitigation

#514480948•Reporter: rj...@google.com
$0
9/9/2026

Potential Use-After-Free in AUAudioInputStream due to race with CoreAudio callback

#513694032•Reporter: vm...@google.com
$0
9/9/2026

Potential memory corruption in unsandboxed GPU process via duplicate SPIR-V built-in variables

#513921488•Reporter: vm...@google.com
$0
9/9/2026

Potential validation bypass in Dawn via internal transient attachment usage mismatch

#517247333•Reporter: vm...@google.com
$0
9/9/2026

PDFium NameTree lookup-only path still truncates /Limits

#519007689•Reporter: sd...@gmail.com
$500
9/9/2026

MIPS64 Deoptimizer::PatchToJump branch offset truncation

#518159423•Reporter: aw...@chromium.org
$0
9/9/2026

OOB R/W in DrumBrake due to missing IsTrapHandlerEnabled check

#518174904•Reporter: aw...@chromium.org
$0
9/9/2026

Bypass of Dawn's SSBO robustness checks via stage-filtering mismatch in OpenGL backend

#517031505•Reporter: vm...@google.com
$0
9/9/2026
Showing 371-380 of 13222 bugs
1...373839...1323