Disclosed Chromium Security Bugs

Qualcomm Wild exploited CVE-2025-27038 bypass

#493747593•Reporter: ha...@gmail.com
$250,000
8/19/2026

V8 Sandbox Escape: Stale MicrotaskQueue cache leads to OOS write

#508092629•Reporter: sm...@gmail.com
$20,000
8/19/2026

SpdyStream Use-After-Free in QueueNextDataFrame via PrefacePing drain

#507365348•Reporter: ci...@gmail.com
$43,000
8/18/2026

apply_stch uint32 accumulation OOB write (Chromium renderer SEGV)

#503425922•Reporter: ma...@gmail.com
$10,000
8/13/2026

V8 TryFastAddDataProperty descriptor-array OOB access

#506689381•Reporter: hu...@gmail.com
$55,000
8/13/2026

Service-side UAF due to missing sync token update in C*RP:WillDrawInternal()

#493708171•Reporter: he...@gmail.com
$10,000
8/13/2026

Cross-origin information disclosure via stale ANGLE Metal texture views (GPU process heap leak)

#499006005•Reporter: th...@gmail.com
$10,000
8/13/2026

GPU passthrough decoder UAF: DoBufferData GL error path skips mapped_buffer_map.erase()

#507707838•Reporter: pa...@gmail.com
$25,000
8/13/2026

Use-After-Free in AsyncTaskManager::WaitAllPendingTasks Due to Early Task Destruction in GPU Process

#492735369•Reporter: se...@gmail.com
$11,000
8/13/2026

V8 race UAF/SEGV in `TracedHandles` with ProgrammaticScrollPromise

#504073879•Reporter: at...@gmail.com
$10,000
8/13/2026
Showing 1-10 of 566 bugs
1234...57