Disclosed Chromium Security Bugs

Heap Buffer Overflow in TFLite Pad operator due to unhandled allocation failure

#494341335•Reporter: ni...@intel.com
$0
6/28/2026

renderer_in_process_mojolpm_fuzzer: Heap-use-after-free in renderer_in_process_mojolpm_fuzzer

#487750530•Reporter: 24...@project.gserviceaccount.com
$0
6/28/2026

DCHECK failure in HasOutputRegister(target) in maglev-graph-builder.h

#494626929•Reporter: 24...@project.gserviceaccount.com
$0
6/28/2026

libredwg:llvmfuzz: Global-buffer-overflow in section_move_before

#528059079•Reporter: 87...@developer.gserviceaccount.com
$0
6/27/2026

sqlite3:ossfuzz: Use-of-uninitialized-value in selectExpander

#499576219•Reporter: 87...@developer.gserviceaccount.com
$0
6/27/2026

open5gs:nas_5gs_message_fuzz: Use-of-uninitialized-value in ogs_cpystrn

#527978938•Reporter: 87...@developer.gserviceaccount.com
$0
6/27/2026

Use-After-Free in Dawn Wire Server Uncaptured-Error Callback via Incomplete Device Unregistration Cleanup

#491518608•Reporter: se...@gmail.com
$70,000
6/27/2026

Type confusion in CSSRepeatValue via IsValueList() range check leads to renderer crash

#492735383•Reporter: je...@gmail.com
$11,000
6/27/2026

OOB write in Skia MakeFromData

#492780653•Reporter: he...@gmail.com
$0
6/27/2026

Use-after-free in shared WordBreakIteratorPool via Proofreader API

#492421936•Reporter: je...@gmail.com
$11,000
6/27/2026
Showing 391-400 of 11332 bugs
1...394041...1134