Disclosed Chromium Security Bugs

Potential Sandbox Escape: Compromised CRD Network Process can disable Security UI via Mojo

#499225384Reporter: vm...@google.com
$0
8/1/2026

Potential Kernel Write-After-Free in UsbDeviceHandleWin via asynchronous CancelIo

#496233132Reporter: vi...@google.com
$0
8/1/2026

WebGL can disclose stale stencil contents because ANGLE robust framebuffer initialization honors attacker-controlled stencilMask(0)

#504820809Reporter: mu...@winfunc.com
$2,000
8/1/2026

Validation Bypass and VUID Violation via Native YUV Textures in ANGLE

#500047428Reporter: vm...@google.com
$0
8/1/2026

Potential Use-After-Free in ANGLE D3D11 Buffer11 via STAGING storage deallocation

#501563323Reporter: vm...@google.com
$0
8/1/2026

UAF write in ANGLE ImageEGL::initialize via UnlockedTailCall race

#496445460Reporter: vm...@google.com
$0
8/1/2026

webnn_graph_impl_fuzzer_WebNNGraphImplFuzzer_CPU_SubgraphDQPool2dQ_fuzzer: Incorrect-function-pointer-type in reshape_average_pooling2d

#502044014Reporter: 24...@project.gserviceaccount.com
$0
8/1/2026

Heap Buffer Overflow (Write) in WebCodec

#495262769Reporter: le...@gmail.com
$0
8/1/2026

Use-after-poison in mojo::SimpleWatcher::Context::Notify

#505024660Reporter: 24...@project.gserviceaccount.com
$0
8/1/2026

Contextual Tasks MPArch Migration allows arbitrary WebUI navigation leading to Info Disclosure / UI Spoofing

#502887575Reporter: vm...@google.com
$0
8/1/2026
Showing 81-90 of 11922 bugs
1...8910...1193