Disclosed Chromium Security Bugs

wasm3:fuzzer: Check failed in CheckUnwind

#557494138•Reporter: 87...@developer.gserviceaccount.com
$0
9/6/2026

libheif:file_fuzzer: Heap-buffer-overflow in Op_Any_RGB_to_YCbCr_420_Sharp::convert_colorspace

#524617421•Reporter: 87...@developer.gserviceaccount.com
$0
9/6/2026

Windows PWA handler launcher filename can smuggle --utility-cmd-prefix from manifest name, causing Chrome to execute attacker-chosen wrapper on utility process launch.

#513893425•Reporter: ro...@gmail.com
$2,500
9/6/2026

DoS of extension events via EventListenerMap poisoning from compromised renderer

#501631475•Reporter: vm...@google.com
$0
9/6/2026

Potential Use-After-Free in BluetoothSocketMac on macOS during SDP query timeout

#517021684•Reporter: vm...@google.com
$0
9/6/2026

Potential Use-After-Free in BluetoothRfcommChannelDelegate and BluetoothL2capChannelDelegate on macOS

#516963272•Reporter: vm...@google.com
$0
9/6/2026

Potential logic error in Dawn indirect draw validation allows OOB index-buffer read in D3D12

#513948465•Reporter: vm...@google.com
$0
9/6/2026

Potential index desync in Dawn D3D12 compute dispatch allows lazy-clear bypass

#516925829•Reporter: vm...@google.com
$0
9/6/2026

DCHECK failure in replacement.outputs_rep()[0] == load.outputs_rep()[0 in late-load-elimination-re

#518000777•Reporter: 24...@project.gserviceaccount.com
$0
9/6/2026

Potential administrative certificate shadowing via duplicate Subject CN in ARC CertStoreService

#517482134•Reporter: vm...@google.com
$0
9/6/2026
Showing 461-470 of 13222 bugs