Disclosed Chromium Security Bugs

V8 Sandbox Escape: Stale MicrotaskQueue cache leads to OOS write

#508092629•Reporter: sm...@gmail.com
$20,000
8/19/2026

GPU Process Heap OOB Read in ANGLE Vulkan via Vertex Divisor Emulation

#500476886•Reporter: vm...@google.com
$0
8/19/2026

DCHECK failure in (maglev_value) != nullptr in turbolev-graph-builder.cc

#492410546•Reporter: 24...@project.gserviceaccount.com
$0
8/19/2026

Potential GPU VRAM leak via GL_RASTERIZER_DISCARD during LUMA emulation blit

#511772034•Reporter: vm...@google.com
$0
8/19/2026

Potential OOB GPU memory read in MFVideoEncodeAccelerator via forged SharedImage size

#511722559•Reporter: vm...@google.com
$0
8/19/2026

GuestView ownership transfer bypasses CanEmbedderAccessInstanceID

#497961376•Reporter: vm...@google.com
$0
8/19/2026

Geolocation permission revocation bypass via about:blank popups

#497345177•Reporter: vm...@google.com
$0
8/19/2026

Potential Use-After-Free in MenuController::OnMouseReleased via AT synchronous menu closure

#511712766•Reporter: vm...@google.com
$0
8/19/2026

Use-After-Free in WidgetBase during IME event handling

#506149253•Reporter: vm...@google.com
$0
8/19/2026

Potential UAF in CompoundImageBacking::GetOrAllocateBacking leading to GPU RCE

#511766407•Reporter: vm...@google.com
$0
8/19/2026
Showing 421-430 of 12748 bugs
1...424344...1275