Disclosed Chromium Security Bugs

Potential Missing Validation for Web-Controlled Text Extraction in iOS Annotations

#513128566•Reporter: vm...@google.com
$0
8/26/2026

Potential logic desync in V4L2JpegEncodeAccelerator leads to OOB write in GPU process

#513103103•Reporter: vm...@google.com
$0
8/26/2026

Potential Use-After-Free in SystemPdhMetricsProvider::PdhQueryHandler on Windows

#513505840•Reporter: vm...@google.com
$0
8/26/2026

Potential Browser-process UAF in ElementTracker::NotifyCustomEvent due to pointer snapshotting

#513208588•Reporter: vm...@google.com
$0
8/26/2026

Potential Use-After-Free in GestureRecognizerImpl::CancelActiveTouchesImpl

#501575979•Reporter: vm...@google.com
$0
8/26/2026

Logic error in SkOpCoincidence list management allows released spans to remain reachable

#513001309•Reporter: vm...@google.com
$0
8/26/2026

Potential Sandbox Escape via UAF in macOS ToolTipBaseView

#503790201•Reporter: li...@chromium.org
$0
8/26/2026

Potential Browser-process UAF in openscreen_platform::UdpSocket::OnReceived

#513136593•Reporter: vm...@google.com
$0
8/26/2026

Potential Use-After-Free in RenderWidgetHostViewAura::ProcessAckedTouchEvent via synchronous dispatch

#513324041•Reporter: vm...@google.com
$0
8/26/2026

Potential cross-origin UI manipulation via orphaned ImeRenderWidgetHost receivers on Android

#513995565•Reporter: vm...@google.com
$0
8/26/2026
Showing 711-720 of 13102 bugs
1...717273...1311