Disclosed Chromium Security Bugs

Race condition in Maglev's BuildStringConcat leads to out-of-bounds write

#511263221•Reporter: vm...@google.com
$0
8/18/2026

Potential OOB Write in V8 RegExp JIT Compiler via Stale Peephole Jump Offsets

#511290389•Reporter: vm...@google.com
$0
8/18/2026

Potential Absolute Memory Write in ANGLE GL Backend on macOS Intel via Unchecked Buffer Mapping

#511772608•Reporter: vm...@google.com
$0
8/18/2026

WebXR DOM Overlay input suppression bypass allows cross-origin input sniffing

#507231605•Reporter: vm...@google.com
$0
8/18/2026

Sandbox Escape via DevTools Child Session Attachment Bypass in Perfetto UI Extension

#505933538•Reporter: vm...@google.com
$0
8/18/2026

Potential WebUSB protected-interface blocklist bypass via SetConfiguration TOCTOU

#499162550•Reporter: vm...@google.com
$0
8/18/2026

Bypass of ANGLE WebGL validation via GpuChannel IPC leading to GPU info leak

#498820206•Reporter: vm...@google.com
$0
8/18/2026

Potential Use-After-Unmap in SerialPortImpl destructor on Windows via overlapped ReadFile

#497610642•Reporter: vm...@google.com
$0
8/18/2026

Potential WebHID enterprise policy bypass via GuestView/ControlledFrame

#496399913•Reporter: vm...@google.com
$0
8/18/2026

UAF in AdTracker::IsAdScriptInStackHelper via V8 getter reentrancy

#511722207•Reporter: vm...@google.com
$0
8/18/2026
Showing 81-90 of 12354 bugs
1...8910...1236