Disclosed Chromium Security Bugs

Potential Out-of-Bounds Heap Read in iOS CrashAnalyzer via Lightweight UAF Detector

#502768780•Reporter: vm...@google.com
$0
8/18/2026

CDP Spoofing: Compromised renderer can spoof root events in flattened DevTools mode

#497532918•Reporter: vm...@google.com
$0
8/18/2026

Protocol handler hijacking via unvalidated PWA manifest schemes

#511753514•Reporter: vm...@google.com
$0
8/18/2026

CHECK failure: scope_info.scope_type() != ScopeType::SCRIPT_SCOPE in maglev-graph-builder.cc

#509162587•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

DCHECK failure in !known_node_aspects().HasContextCacheValue( context, offset, maybe_assigned == k

#511747292•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

DCHECK failure in state_ == kSpill in maglev-regalloc-node-info.h

#511935486•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026

Potential privilege escalation in Boca SWA SetSitePermission Mojo call grants arbitrary permissions

#496624907•Reporter: vi...@google.com
$0
8/18/2026

OS Command Injection in tools/update_browser_revision.mjs — unvalidated CDN revision field passed to execSync() enables secret exfiltration on GitHub Actions CI runner

#511299709•Reporter: su...@gmail.com
$0
8/18/2026

WebUI sandbox bypass via unvalidated icon_url in Affiliation API

#511816617•Reporter: vm...@google.com
$0
8/18/2026

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#511730261•Reporter: 24...@project.gserviceaccount.com
$0
8/18/2026
Showing 821-830 of 13102 bugs
1...828384...1311