Disclosed Chromium Security Bugs

Potential Browser Process UAF in PermissionRequestHandler::CancelRequestInternal

#500032538•Reporter: vm...@google.com
$0
7/16/2026

Potential OOB write in GPU process via unvalidated H.264 first_mb_in_slice in VA-API

#500028989•Reporter: vm...@google.com
$0
7/16/2026

Potential Use-After-Free in AwPacProcessor via NetworkCallback Race Condition

#499238195•Reporter: vm...@google.com
$0
7/16/2026

Potential Sandbox Escape via Path Traversal with trailing whitespace on Windows

#498887785•Reporter: vm...@google.com
$0
7/16/2026

Potential cross-thread destruction of cppgc::Persistent in RTCPeerConnectionHandler leads to UAF

#498845284•Reporter: vm...@google.com
$0
7/16/2026

Extension Sandbox CSP bypass via form-feed parser differential

#498808432•Reporter: vm...@google.com
$0
7/16/2026

Potential Use-After-Free in ANGLE Vulkan ContextVk::mImagesWithTileMemory

#498371085•Reporter: vm...@google.com
$0
7/16/2026

Frame Tree Desynchronization via moveBefore() Synchronous Blur

#497964917•Reporter: vm...@google.com
$0
7/16/2026

Potential UXSS on Android via javascript: URL injection in Tab Group Sync

#497934980•Reporter: vm...@google.com
$0
7/16/2026

CSP and LNA bypass via dropped keep-alive handle in deferred popup navigations

#497595264•Reporter: vm...@google.com
$0
7/16/2026
Showing 51-60 of 11332 bugs
1...567...1134