Disclosed Chromium Security Bugs

Potential Race condition leading to Use-After-Free in Graphite GlobalCache::findGraphicsPipeline

#500393328Reporter: vm...@google.com
$0
8/4/2026

iOS Chrome: Bypass :// Characters in Download Security UI lead to Origin Spoofing

#458101580Reporter: pr...@gmail.com
$1,000
8/4/2026

D3D10Warp!JITCopyContext::ExecuteResourceCopy memory heap overflow based on Integer overflow in gpu

#480548427Reporter: do...@gmail.com
$17,000
8/4/2026

V8: Turboshaft miscompilation: Operand drop in TryReduceRorInTree allows potential sandbox bypass

#505823721Reporter: or...@gmail.com
$8,000
8/4/2026

Potential Intent Routing Bypass in 'Open in App' Omnibox Chip

#502026648Reporter: vm...@google.com
$0
8/4/2026

Potential Enterprise DeviceUserAllowlist bypass in QuickStart via unauthenticated FIDO email

#501388072Reporter: vm...@google.com
$0
8/4/2026

Bypass of dangling markup mitigation via CSS Typed OM MakeWithoutReferrer()

#503611433Reporter: vm...@google.com
$0
8/4/2026

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

#541854038Reporter: 87...@developer.gserviceaccount.com
$0
8/3/2026

janet:fuzz_dobytes: Crash in janet_hash

#526303935Reporter: 87...@developer.gserviceaccount.com
$0
8/3/2026

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

#541854674Reporter: 87...@developer.gserviceaccount.com
$0
8/3/2026
Showing 441-450 of 12354 bugs