Chromium Security Bugs
←Back to DashboardSecurity: Capture Autofill Data using showPicker Spoofing
$1,000
7/11/2025
Drag and Drop Can Navigate to File and Chrome URIs Without Restriction
$500
7/11/2025
Improper Error Handling in LateLoadElimination for String Map in Turboshaft Leads to RCE
$50,000
7/11/2025
V8 Sandbox Bypass: SP/PC control via Wasm JSPI central stack top confusion
$20,000
7/11/2025
Vulnerability: Upgrade thenify to 3.3.1 in GoB repo chromium/catapult
$0
7/10/2025
DCHECK failure in new_space->TotalCapacity() <= new_space->MaximumCapacity() in heap.cc
$0
7/10/2025
DevTools frontend leaks breakpoint history to any remote WebSocket server it connects to
$2,000
7/9/2025
V8 correctness failure in sources: d7
$0
7/9/2025
CSP media-src bypass with HLS
$1,000
7/9/2025
The extension popup can appear over the PWA install prompt
$500
7/9/2025