Disclosed Chromium Security Bugs

Potential uninitialized GPU memory leak in Dawn D3D12 T2B copies via workaround buffer

#500443031Reporter: vm...@google.com
$0
7/23/2026

ContentSettings policy bypass via IP address subresources

#498373018Reporter: vm...@google.com
$0
7/23/2026

CSS mXSS via Missing Serialization Escaping in CSSImageSetTypeValue

#502805170Reporter: vm...@google.com
$0
7/23/2026

ORB bypass: HasNoSniff fails on duplicate X-Content-Type-Options headers leaking JSON arrays

#502615170Reporter: vm...@google.com
$0
7/23/2026

Privilege escalation via spoofed WatchedPageChange IPC in declarativeContent

#497025738Reporter: vm...@google.com
$0
7/23/2026

Potential persistent state-locking in Shared Tab Groups via missing group cache

#495981782Reporter: vm...@google.com
$0
7/23/2026

Potential File Descriptor reuse in AwPrintManager allows unsandboxed write

#502228856Reporter: vm...@google.com
$0
7/23/2026

UXSS via synchronous JS execution in SVGScriptElement during moveBefore

#502118936Reporter: vm...@google.com
$0
7/23/2026

Potential Use-After-Free in MidiManagerMac on iOS via CoreMIDI callback race

#502099949Reporter: vm...@google.com
$0
7/23/2026

Potential Heap OOB Read and Info Leak in DeviceDataManagerX11

#501862016Reporter: vm...@google.com
$0
7/23/2026
Showing 391-400 of 11919 bugs