Disclosed Chromium Security Bugs

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_CPU_SingleOpPool2d_fuzzer: Crash in xnn_load_tail_f32

#513622028•Reporter: 24...@project.gserviceaccount.com
$0
8/27/2026

xstream:XmlFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.

#521083165•Reporter: 87...@developer.gserviceaccount.com
$0
8/26/2026

libiec61850:fuzz_mms_encode: Heap-buffer-overflow in BerEncoder_encodeBitString

#540904095•Reporter: 87...@developer.gserviceaccount.com
$0
8/26/2026

Potential GPU memory leak via QuerySet availability state desynchronization

#499140183•Reporter: vm...@google.com
$0
8/26/2026

Potential GPU Process UAF in Skia Graphite via Stale Cache Pointers after Allocation Failure

#514063977•Reporter: vm...@google.com
$0
8/26/2026

Potential GPU Process OOB Read in GLImageProcessorBackend via Forged DMA-BUF

#513019760•Reporter: vm...@google.com
$0
8/26/2026

CDP response spoofing across DevTools sessions via compromised renderer

#513713927•Reporter: vm...@google.com
$0
8/26/2026

CVC and OTP data leakage due to priority inversion in Autofill heuristic parsing

#513551308•Reporter: vm...@google.com
$0
8/26/2026

Security Bug: UAF in Dawn wire from RequestDevice id reuse

#508092644•Reporter: 62...@qq.com
$1,000
8/26/2026

V8 type confusion in FulfillPromise via double settlement of chrome.runtime.getPackageDirectoryEntry() Promise

#513289241•Reporter: ga...@gmail.com
$1,000
8/26/2026
Showing 681-690 of 13102 bugs
1...686970...1311