Disclosed Chromium Security Bugs

Potential browser OOB write via std::map::end() dereference in AppList

#501419228•Reporter: vm...@google.com
$0
7/22/2026

UAF in FrameOrWorkerScheduler::NotifyLifecycleObservers via reentrant map erasure

#500054706•Reporter: vm...@google.com
$0
7/22/2026

Renderer RCE via OOB Read in AdTracker::GetAncestry missing end() iterator check

#501745798•Reporter: vm...@google.com
$0
7/22/2026

Privilege escalation via ScriptInjectionTracker poisoning in executeScript

#500053110•Reporter: vm...@google.com
$0
7/22/2026

Potential Use-after-free in libusb's darwin_release_interface on macOS via WebUSB

#499013281•Reporter: vm...@google.com
$0
7/22/2026

Potential Double-Free of VkCommandPool in Dawn Vulkan backend via error path

#501789156•Reporter: vm...@google.com
$0
7/22/2026

Potential Incognito tab injection via spoofed Reader Mode intent extra

#502502017•Reporter: vm...@google.com
$0
7/22/2026

Potential CM API Auto-Signin Bypass via Shared Passwords leads to Login CSRF

#502403953•Reporter: vm...@google.com
$0
7/22/2026

Potential cross-origin fill policy bypass via stale triggered_origin in AndroidAutofillProvider

#502346855•Reporter: vm...@google.com
$0
7/22/2026

Potential Missing Authorization and Integer Truncation in AwNetLogService

#502264647•Reporter: vm...@google.com
$0
7/22/2026
Showing 441-450 of 11919 bugs
1...444546...1192