Disclosed Chromium Security Bugs

NTLM hash leak via unvalidated path in passwordsPrivate.showExportedFileInShell

#513490996Reporter: vm...@google.com
$0
9/2/2026

Potential cross-tenant PII and bearer token leak in SaasUsageBrowserReportUploaderDesktop

#513399832Reporter: vm...@google.com
$0
9/2/2026

Potential Use-After-Free in Exo Wayland server via duplicate xdg_output requests

#513818569Reporter: vm...@google.com
$0
9/2/2026

Potential GPU RCE via heap buffer overflow in ANGLE Vulkan texture update

#511736918Reporter: vm...@google.com
$0
9/2/2026

Heap Overflow and GPU OOB Read in ANGLE Vulkan via baseInstance

#513919087Reporter: vm...@google.com
$0
9/2/2026

Potential Use-After-Free in ChromeDriver command dispatchers missing WebViewHolder

#502542156Reporter: vm...@google.com
$0
9/2/2026

GPU OOB read in ANGLE Vulkan due to stale mImageType in reformatStagedBufferUpdates

#512995370Reporter: vm...@google.com
$0
9/2/2026

Potential background-tab UI overlay and origin spoofing via USDZ downloads in Chrome for iOS

#514024004Reporter: vm...@google.com
$0
9/2/2026

Dawn GLES: Bypassed SSBO limit via ShaderStage::None allows OOB GPU memory access

#511727159Reporter: vm...@google.com
$0
9/1/2026

OOB array access in EncoderBitrateAdjuster via unvalidated Mojo temporal_idx

#514671098Reporter: vm...@google.com
$0
9/1/2026
Showing 531-540 of 13102 bugs