openSUSE-SU-2026:22041-1

openSUSE-SU-2026:22041-1 · Security update for chromium

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

This update for chromium fixes the following issues: Changes in chromium: - Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354): * CVE-2026-106382: Use after free in Chromecast * CVE-2026-106197: Use after free in Browser * CVE-2026-106358: Use after free in Navigation * CVE-2026-106347: Use after free in Track * CVE-2026-106245: Uninitialized resource in ANGLE * CVE-2026-106327: Incorrect authorization in Core * CVE-2026-106366: Incomplete cleanup in CustomTabs * CVE-2026-106258: Uninitialized resource in ANGLE * CVE-2026-106376: Uninitialized resource in ANGLE * CVE-2026-106308: Incorrect reference resolution in Autofill * CVE-2026-106215: Uninitialized resource in ANGLE * CVE-2026-106369: Missing authorization in Translate * CVE-2026-106293: Type confusion in ANGLE * CVE-2026-106377: Race condition in Fonts * CVE-2026-106412: Race condition in Core * CVE-2026-106243: Incomplete cleanup in Proxy Auth * CVE-2026-106214: Information leak in Proxy * CVE-2026-106364: Incorrect authorization in Omnibox * CVE-2026-106239: Integer overflow in WebGL * CVE-2026-106426: Race condition in Fonts * CVE-2026-106419: Use after free in ANGLE * CVE-2026-106396: Improper input validation in Omnibox * CVE-2026-106323: Missing authorization in Chrome for iOS * CVE-2026-106231: Uninitialized resource in Dawn * CVE-2026-106202: Uninitialized resource in ANGLE * CVE-2026-106273: Uninitialized resource in Video * CVE-2026-106203: Incomplete cleanup in Autofill * CVE-2026-106332: Integer overflow in Compositing * CVE-2026-106281: Use after free in Tint * CVE-2026-106298: Use after free in Chrome Tabs * CVE-2026-106193: Use after free in Parser * CVE-2026-106255: Race condition in V8 * CVE-2026-106393: Use after free in Storage * CVE-2026-106227: Use after free in Core * CVE-2026-106379: Uninitialized resource in Skia * CVE-2026-106211: Use after free in TabStrip * CVE-2026-106329: Incorrect authorization in FileSystem * CVE-2026-106248: Use after free in Bindings * CVE-2026-106235: Use after free in WebAudio * CVE-2026-106257: Use after free in HTML * CVE-2026-106268: Use after free in WebRTC * CVE-2026-106278: Use after free in Select * CVE-2026-106233: Use after free in Metrics * CVE-2026-106318: Use after free in Media * CVE-2026-106411: Use after free in Parser * CVE-2026-106423: Use after free in Media * CVE-2026-106346: Improper state validation in DevTools * CVE-2026-106190: Use after free in Media * CVE-2026-106357: Use after free in WebRTC * CVE-2026-106240: Type confusion in V8 * CVE-2026-106184: Uninitialized resource in Media * CVE-2026-106383: Use after free in Media * CVE-2026-106349: Use after free in V8 * CVE-2026-106421: Use after free in PDF * CVE-2026-106204: Use after free in PDF * CVE-2026-106200: Use after free in Track * CVE-2026-106265: UI misrepresentation in File * CVE-2026-106238: Race condition in Fonts * CVE-2026-106324: Incorrect authorization in WebAppInstalls * CVE-2026-106420: Incorrect calculation in API * CVE-2026-106222: Incorrect authorization in Sync * CVE-2026-106208: Missing authorization in API * CVE-2026-106286: Confused deputy in Omnibox * CVE-2026-106181: Incorrect reference resolution in DevTools * CVE-2026-106315: Use after free in Modularization * CVE-2026-106274: Incorrect reference resolution in Browser * CVE-2026-106365: Missing authorization in Animation * CVE-2026-106267: Missing authorization in Network * CVE-2026-106194: Missing authorization in WebAppInstalls * CVE-2026-106313: Incorrect authorization in Browser * CVE-2026-106283: Use after free in Streaming * CVE-2026-106291: Use after free in GarbageCollection * CVE-2026-106300: Race condition in CacheStorage * CVE-2026-106314: Incorrect authorization in Bluetooth * CVE-2026-106223: Uninitialized resource in GPU * CVE-2026-106242: Information leak in Omnibox * CVE-2026-106241: Incorrect authorization in Search * CVE-2026-106381: Incorrect authorization in Passwords * CVE-2026-106217: Missing authorization in Google Lens * CVE-2026-106425: Missing authorization in BrowserTag * CVE-2026-106225: Missing authorization in Autofill * CVE-2026-106363: Missing authorization in FullScreen * CVE-2026-106266: Confused deputy in Contextual Tasks * CVE-2026-106189: Code injection in ReaderMode * CVE-2026-106335: Use after free in Media * CVE-2026-106415: Information leak in Enterprise * CVE-2026-106224: Missing authorization in Google Lens * CVE-2026-106185: Improper input validation in Viz * CVE-2026-106244: Incorrect authorization in Permissions * CVE-2026-106407: Incorrect authorization in GetUserMedia * CVE-2026-106389: Incorrect authorization in USB * CVE-2026-106397: Incorrect authorization in Mobile * CVE-2026-106196: Missing authorization in Navigation * CVE-2026-106414: Improper input validation in Mobile * CVE-2026-106408: Protection mechanism failure in Mobile * CVE-2026-106261: Uninitialized resource in Video * CVE-2026-106406: Missing authorization in Mobile * CVE-2026-106290: Uninitialized resource in GPU * CVE-2026-106378: Privilege elevation in Sandbox * CVE-2026-106198: Missing authorization in FileSystem * CVE-2026-106326: Confused deputy in UI * CVE-2026-106354: Improper resource exposure in Extensions * CVE-2026-106342: Information leak in Autofill * CVE-2026-106424: Information leak in Audio * CVE-2026-106253: Incorrect authorization in Extensions * CVE-2026-106279: Incorrect reference resolution in Passwords * CVE-2026-106361: Incorrect provision of specified functionality in Mobile * CVE-2026-106402: Incorrect authorization in Extensions * CVE-2026-106311: Clickjacking in PermissionElement * CVE-2026-106246: Incorrect authorization in Browser * CVE-2026-106302: UI misrepresentation in PermissionElement * CVE-2026-106416: Code injection in Extensions * CVE-2026-106182: UI misrepresentation in Paint * CVE-2026-106282: UI misrepresentation in WebOTP * CVE-2026-106392: Information leak in WebAudio * CVE-2026-106188: Confused deputy in SignIn * CVE-2026-106370: Uninitialized resource in GPU * CVE-2026-106356: Clickjacking in EVP * CVE-2026-106405: Race condition in CustomTabs * CVE-2026-106322: Open redirect in AppManifest * CVE-2026-106280: Incorrect authorization in PermissionElement * CVE-2026-106206: Improper input validation in Mobile * CVE-2026-106180: Observable discrepancy in Animation * CVE-2026-106303: Observable discrepancy in Autofill AI * CVE-2026-106201: Race condition in V8 * CVE-2026-106333: Incorrect authorization in Input * CVE-2026-106228: Confused deputy in Google Lens * CVE-2026-106289: Missing authorization in FedCM * CVE-2026-106277: Information leak in Animation * CVE-2026-106410: Missing authorization in Permissions * CVE-2026-106284: Out of bounds read in Printing * CVE-2026-106209: UI misrepresentation in Mobile * CVE-2026-106216: Cross-site request forgery in ReadingList * CVE-2026-106328: Incorrect authorization in PDF * CVE-2026-106387: Missing authorization in Mobile * CVE-2026-106400: Clickjacking in Messages * CVE-2026-106205: Missing authorization in Passwords * CVE-2026-106213: Race condition in WebAudio * CVE-2026-106230: Incorrect reference resolution in Offline * CVE-2026-106367: Missing authorization in Mobile * CVE-2026-106226: Improper input validation in Compositing * CVE-2026-106229: UI misrepresentation in FileSystem * CVE-2026-106232: UI misrepresentation in Browser * CVE-2026-106391: Incorrect authorization in WebShare * CVE-2026-106336: Observable discrepancy in Paint * CVE-2026-106403: Incorrect authorization in Accessibility * CVE-2026-106373: Use after free in Fonts * CVE-2026-106301: Confused deputy in Contextual Tasks * CVE-2026-106292: Buffer overflow in Fonts * CVE-2026-106262: Incomplete cleanup in G

Korrektur verfügbar

Veröffentlicht

2026-10-09T02:54:37Z

Aktualisiert

2026-10-09T18:15:03.738867401Z

Technologie-Stack: system

Prüfen Sie Ihren Server →