Disclosed Chromium Security Bugs

Sanitizer safe-mode URL stripping bypass via prefixed HTML elements in XML contexts

#518063436•Reporter: vm...@google.com
$0
9/9/2026

Potential page-visibility bypass in VRServiceImpl allows background XR session takeover

#517598518•Reporter: vm...@google.com
$0
9/9/2026

Potential Cross-Origin NFC Access from BFCache via Android NFCHost

#500508524•Reporter: vm...@google.com
$0
9/9/2026

Potential FileSystemAccess Blocklist Bypass via TWA LaunchQueue Intent on Android

#497977983•Reporter: vm...@google.com
$0
9/9/2026

Potential Use-After-Free in WaylandPopup and WaylandBubble during SetBoundsInDIP

#518007821•Reporter: vm...@google.com
$0
9/9/2026

Potential Race Condition in gl::GLContext Refcounting via Cross-Thread Deallocation

#517360391•Reporter: vm...@google.com
$0
9/9/2026

Potential UAF in PermissionRequestHandler via synchronous AwContents destruction during navigation

#516532198•Reporter: vm...@google.com
$0
9/9/2026

Potential macOS browser-process Use-After-Free in BluetoothDeviceInquiryDelegate

#518237527•Reporter: vm...@google.com
$0
9/9/2026

Potential UAF in BluetoothRfcommChannelMac and BluetoothL2capChannelMac delegates on macOS

#518235412•Reporter: vm...@google.com
$0
9/9/2026

Potential stack Use-After-Return in HidWriterWin::WriteOutputReport during I/O cancellation

#516975148•Reporter: vm...@google.com
$0
9/9/2026
Showing 381-390 of 13222 bugs
1...383940...1323