Disclosed Chromium Security Bugs

Maglev - CallBuiltin (input @0 = LoadHoleyFixedDoubleArrayElement) type HoleyFloat64 is not Tagged

#456547591Reporter: sh...@gmail.com
$11,000
2/7/2026

graphicsmagick:coder_BIE_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

#481570059Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

graphicsmagick:coder_XPM_fuzzer: Use-of-uninitialized-value in GrayscalePseudoClassImage

#481429902Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

graphicsmagick:coder_XPM_fuzzer: Use-of-uninitialized-value in WriteXPMImage

#481419152Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

gdal:gdal_vrt_fuzzer: Crash in gdal_DGifDecompressLine

#481841770Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

kmime:kmime_fuzzer: Global-buffer-overflow in nameMatch

#481841731Reporter: 87...@developer.gserviceaccount.com
$0
2/6/2026

pwa install prompt truncated when window.resizeTo is called lead to spoof

#379429930Reporter: sa...@gmail.com
$0
2/6/2026

V8 Sandbox Bypass: WasmCPT handle UAF by import dispatch table corruption (multiple variants of b/446113730)

#452605803Reporter: se...@gmail.com
$20,000
2/6/2026

webnn_graph_mojolpm_fuzzer: Negative-size-param in void tflite::reference_ops::BroadcastTo<8>

#450406597Reporter: 24...@project.gserviceaccount.com
$0
2/6/2026

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in ReadContainer

#461325309Reporter: 87...@developer.gserviceaccount.com
$0
2/5/2026
Showing 451-460 of 10084 bugs