Disclosed Chromium Security Bugs

selinux:checkpolicy-fuzzer: Heap-use-after-free in expand_role_attributes_in_attributes

#474561491•Reporter: 87...@developer.gserviceaccount.com
$0
1/29/2026

DCHECK failure in left != right in macro-assembler-arm.cc

#454094408•Reporter: 24...@project.gserviceaccount.com
$0
1/29/2026

v8_module_generation_all_fuzztest: Crash in Builtins_JSToWasmWrapperAsm

#453769899•Reporter: 24...@project.gserviceaccount.com
$0
1/29/2026

gdal:libertiff: Heap-buffer-overflow in PackBitsDecode

#475896268•Reporter: 87...@developer.gserviceaccount.com
$0
1/28/2026

gdal:gdal_fuzzer: Heap-buffer-overflow in m_zero_block

#478301093•Reporter: 87...@developer.gserviceaccount.com
$0
1/28/2026

mpv:fuzzer_set_property_MPV_FORMAT_STRING_1: Use-of-uninitialized-value in initFilter

#478301104•Reporter: 87...@developer.gserviceaccount.com
$0
1/28/2026

mpv:fuzzer_set_property_MPV_FORMAT_STRING_1: Segv on unknown address in yuv2rgb4_X_c

#478212631•Reporter: 87...@developer.gserviceaccount.com
$0
1/28/2026

thrift-java:RoundtripJSONFuzzer: Security exception in org.apache.thrift.fuzz.RecursiveStruct$RecursiveStructStandardScheme.read

#478005963•Reporter: 87...@developer.gserviceaccount.com
$0
1/28/2026

Out-of-bound read in the jmp table of ActiveMediaSessionController leads to sandbox escape.

#453094710•Reporter: bl...@gmail.com
$250,000
1/28/2026

cctest/test-inobject-slack-tracking/SubclassTypedArrayBuiltinNoInlineNew starts flaking

#355120682•Reporter: ma...@google.com
$0
1/28/2026
Showing 531-540 of 10097 bugs
1...535455...1010