Disclosed Chromium Security Bugs

Potential Use-After-Free in VideoCaptureDeviceWin::FrameDropped

#501581035Reporter: vm...@google.com
$0
7/21/2026

Use-After-Free in ImageDecodingStore via Duplicate Key Insertion

#500104917Reporter: vm...@google.com
$0
7/21/2026

DestroyCommandBuffer allows renderer to erase reserved route -> Iterator invalidation in FlushDeferredRequests

#499891888Reporter: ta...@microsoft.com
$0
7/21/2026

Potential LPE in CRD Windows host via TOCTOU junction following in WebAuthn notifier

#499116954Reporter: vm...@google.com
$0
7/21/2026

Potential Use-After-Free in WebContentsImpl::ForSecurityDropFullscreen

#497436531Reporter: rj...@google.com
$0
7/21/2026

Blind OOB Read in Browser via size_t Underflow in GLES2Implementation::UpdateProgramInfo

#498856565Reporter: vm...@google.com
$0
7/21/2026

Potential Bypass of VulkanPolyfillF32Abs in Dawn/Tint leads to heap UAF in Mesa ACO optimizer

#493692702Reporter: rj...@google.com
$0
7/21/2026

Microsecond timing leak in Long Animation Frame API durations

#502073069Reporter: vm...@google.com
$0
7/21/2026

Attr-taint bypass in shorthand properties allows data exfiltration

#502035074Reporter: vm...@google.com
$0
7/21/2026

Namespace Confusion in XML Fragment Parsing via Nested xmlns=""

#501740299Reporter: vm...@google.com
$0
7/21/2026
Showing 491-500 of 11922 bugs