Disclosed Chromium Security Bugs

UAF and BRP bypass in WidgetBaseInputHandler::HandleTouchEvent leading to Renderer RCE

#498991983•Reporter: vm...@google.com
$0
8/4/2026

Missing VideoDecoderConfig validation in MojoDecryptorService

#498728857•Reporter: vm...@google.com
$0
8/4/2026

Heap buffer overflow in Blink animation timing

#493534964•Reporter: sh...@gmail.com
$2,000
8/4/2026

Potential Use-After-Free in ManualFillInjectionHandler during asynchronous Face ID re-authentication

#505191883•Reporter: li...@chromium.org
$0
8/4/2026

Missing lifetime check in SpdyStream::IncreaseRecvWindowSize leads to use-after-free in Network Service

#503420443•Reporter: je...@gmail.com
$43,000
8/4/2026

OOB GPU memory write in ANGLE Vulkan via unscaled YUV plane offsets

#500063836•Reporter: vm...@google.com
$0
8/4/2026

Potential Race condition leading to Use-After-Free in Graphite GlobalCache::findGraphicsPipeline

#500393328•Reporter: vm...@google.com
$0
8/4/2026

iOS Chrome: Bypass :// Characters in Download Security UI lead to Origin Spoofing

#458101580•Reporter: pr...@gmail.com
$1,000
8/4/2026

D3D10Warp!JITCopyContext::ExecuteResourceCopy memory heap overflow based on Integer overflow in gpu

#480548427•Reporter: do...@gmail.com
$17,000
8/4/2026

V8: Turboshaft miscompilation: Operand drop in TryReduceRorInTree allows potential sandbox bypass

#505823721•Reporter: or...@gmail.com
$8,000
8/4/2026
Showing 31-40 of 11922 bugs
1...345...1193