Disclosed Chromium Security Bugs

Potential cross-domain credential metadata leak to renderer via manual fallback hover preview

#518082781•Reporter: vm...@google.com
$0
9/9/2026

Potential ActorLogin Prompt Bypass and Cross-Origin Password Exfiltration via Same-Site Iframe

#518945524•Reporter: vm...@google.com
$0
9/9/2026

Sandbox Escape in Loong64 CallOrConstructVarargs via Sign-Extended Length

#516517853•Reporter: aw...@chromium.org
$0
9/9/2026

Potential WebUSB blocklist bypass via concurrent ClaimInterface and SetConfiguration TOCTOU

#517936145•Reporter: vm...@google.com
$0
9/9/2026

json-flattener:FlattenFuzzer: Security exception in com.github.wnameless.json.flattener.JsonFlattener.jsonVal2Obj

#539212294•Reporter: 87...@developer.gserviceaccount.com
$0
9/8/2026

json-flattener:AdvancedFuzzer: Security exception in com.github.wnameless.json.base.JsonValueUtils.toMap

#530072443•Reporter: 87...@developer.gserviceaccount.com
$0
9/8/2026

mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

#546440470•Reporter: 87...@developer.gserviceaccount.com
$0
9/8/2026

json-flattener:FlattenFuzzer: Security exception in com.github.wnameless.json.flattener.JsonFlattener.jsonVal2Obj

#553637751•Reporter: 87...@developer.gserviceaccount.com
$0
9/8/2026

json-flattener:AdvancedFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

#533951265•Reporter: 87...@developer.gserviceaccount.com
$0
9/8/2026

hostap:eapol-key-auth: Crash in eapol-key-auth.c

#556787437•Reporter: 87...@developer.gserviceaccount.com
$0
9/8/2026
Showing 401-410 of 13222 bugs
1...404142...1323