Disclosed Chromium Security Bugs

Potential UAF in SkFontMgr_AndroidNDK due to thread-unsafe SkLRUCache mutation

#500474409•Reporter: vm...@google.com
$0
9/4/2026

macOS WebUSB: Potential UAF in browser process due to SetConfiguration thread-safety violation

#499025880•Reporter: vm...@google.com
$0
9/4/2026

UAF via HTMLOptionElement::RemovedFrom and moveBefore DOM Mutation

#517345069•Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in macOS WebUSB via race in ClaimInterface and IsochronousTransfer

#516999424•Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in DropHelper::OnDragOver due to lack of ViewTracker protection

#516962715•Reporter: vm...@google.com
$0
9/4/2026

Potential UAF in MenuController::OnMousePressed due to synchronous deletion in SetHotTrackedButton

#516962178•Reporter: vm...@google.com
$0
9/4/2026

Potential out-of-bounds heap read in libyuv downscaling due to integer overflow

#516986556•Reporter: vm...@google.com
$0
9/4/2026

Potential UAF in NativeWidgetNSWindowBridge::FullscreenControllerTransitionComplete

#517040438•Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in MediaFoundationProtectionManager due to cross-thread destruction

#517004487•Reporter: vm...@google.com
$0
9/4/2026

Potential Use-After-Free in ui::HeadlessWindow via Synchronous Deletion during State Changes

#516674532•Reporter: vm...@google.com
$0
9/4/2026
Showing 431-440 of 13102 bugs
1...434445...1311