Disclosed Chromium Security Bugs

Security: Heap-use-after-free regression in ServiceWorkerContextCore::OnRunningStateChanged

#505068950•Reporter: me...@gmail.com
$2,000
8/4/2026

Integer Overflow in Skia SubRunAllocator Leads to Heap OOB Write

#499152771•Reporter: vm...@google.com
$0
8/4/2026

SharedWorker same-origin check bypass for chrome-extension:// — DedicatedWorker hardening (8bde565) not applied to sibling SharedWorker path

#504073872•Reporter: tr...@gmail.com
$3,000
8/4/2026

Potential High: Heap Buffer Overflow in libxml2 `xmlEscapeText` via Browser Notifications

#506388321•Reporter: vm...@google.com
$0
8/4/2026

Potential UAF in browser process via unsynchronized `base::FormatDouble`

#506477192•Reporter: vm...@google.com
$0
8/4/2026

Potential cross-origin terminal output leak via terminalPrivate.onProcessOutput broadcast

#501657263•Reporter: vm...@google.com
$0
8/4/2026

V8 Sandbox Bypass: Compiler-Eliminated CPT Tag Check

#500771385•Reporter: qw...@gmail.com
$20,000
8/4/2026

Potential GPU Sandbox Escape via Bypassing AMD Mesa Bug Mitigation with f16 in Tint

#500099471•Reporter: rj...@google.com
$0
8/4/2026

Potential GPU data leak via unchecked DawnEGLImageRepresentation::BeginAccess

#499075743•Reporter: vm...@google.com
$0
8/4/2026

OOB write in SkSL Raster Pipeline via simplifyImmediateUnmaskedOp stack underflow

#500080194•Reporter: vm...@google.com
$0
8/4/2026
Showing 421-430 of 12354 bugs
1...424344...1236