Disclosed Chromium Security Bugs

Bypass of WebView HID permission isolation during guest attachment window

#517802696•Reporter: vm...@google.com
$0
9/27/2026

Potential cross-profile most-visited URL leak in iOS Shortcuts widget

#517596255•Reporter: vm...@google.com
$0
9/27/2026

iOS Chrome address-bar spoof: blob-URL DeprecatedGetOriginAsURL empty-collision defeats IsHistoryStateChangeValid and CanTrustLastCommittedItem

#543471693•Reporter: nh...@gmail.com
$5,000
9/27/2026

UAF in WidgetBase::UpdateTextInputStateInternal via GetTextInputType()

#553129513•Reporter: vm...@google.com
$0
9/27/2026

Bypass of SanitizedImageSource in Customize Chrome WebUI via unvalidated NTP image URLs

#517730821•Reporter: vm...@google.com
$0
9/27/2026

Potential Class Hierarchy Type Confusion in cc::LayerTreeImpl via 32-bit Layer ID Wraparound

#523554372•Reporter: rj...@google.com
$0
9/27/2026

Use-After-Free in `SkCachedData::internalUnref()`

#553345874•Reporter: ar...@chromium.org
$0
9/27/2026

Potential Heap OOB Read in crashpad_handler due to Integer Underflow in ScanStackForPointers

#502304489•Reporter: vm...@google.com
$0
9/26/2026

Potential gesture hijack during macOS tab dragging due to re-entrant nested RunLoop

#520504291•Reporter: vm...@google.com
$0
9/26/2026

Potential browser process UAF crash via replayable CertVerifierService::EnableNetworkAccess

#524582798•Reporter: aw...@chromium.org
$0
9/26/2026
Showing 31-40 of 13222 bugs
1...345...1323