{"kind": "product", "path": "vulns/opensuse-leap-16.0/chromium", "name": "chromium", "product": "chromium", "ecosystem": "openSUSE:Leap 16.0", "items": [{"id": "openSUSE-SU-2026:22124-1", "noindex": false, "published": "2026-10-17T23:03:18Z", "modified": "2026-10-19T09:30:04.161085159Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:22124-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\nChromium 155.0.8059.84 (boo#1285733):\n\n  * CVE-2026-110922: Use after free in Prerender\n  * CVE-2026-110913: Memory corruption in DOM\n  * CVE-2026-110919: Use after free in V8\n  * CVE-2026-110918: Memory corruption in Core\n  * CVE-2026-110917: Memory corruption in SVG\n  * CVE-2026-110921: Use after free in V8\n  * CVE-2026-110920: Memory corruption in V8\n  * CVE-2026-110916: Improper input validation in Desktop\n  * CVE-2026-110915: Use after free in Compositing\n  * CVE-2026-110914: Memory corruption in Workers\n", "references": ["https://bugzilla.suse.com/1285733", "https://www.suse.com/security/cve/CVE-2026-110913", "https://www.suse.com/security/cve/CVE-2026-110914"], "fixes": ["155.0.8059.84-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:22118-1", "noindex": false, "published": "2026-10-16T17:03:44Z", "modified": "2026-10-19T17:23:15.945604150Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:22118-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 155.0.8059.79 (boo#1285401):\n  * CVE-2026-110152: Buffer overflow in ANGLE\n  * CVE-2026-110149: Use after free in Browser\n  * CVE-2026-110136: Use after free in PDF\n  * CVE-2026-110161: Use after free in Network\n  * CVE-2026-110165: Use after free in Core\n  * CVE-2026-110148: Use after free in SVG\n  * CVE-2026-110151: Use after free in Media\n  * CVE-2026-110162: Use after free in Desktop\n  * CVE-2026-110170: Use after free in Bindings\n  * CVE-2026-110160: Missing authorization in ReadingMode\n  * CVE-2026-110143: Use of uninitialized variable in ThirdParty l", "references": ["https://bugzilla.suse.com/1285401", "https://www.suse.com/security/cve/CVE-2026-110136", "https://www.suse.com/security/cve/CVE-2026-110137"], "fixes": ["155.0.8059.79-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:22041-1", "noindex": false, "published": "2026-10-09T02:54:37Z", "modified": "2026-10-09T18:15:03.738867401Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:22041-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354):\n  * CVE-2026-106382: Use after free in Chromecast\n  * CVE-2026-106197: Use after free in Browser\n  * CVE-2026-106358: Use after free in Navigation\n  * CVE-2026-106347: Use after free in Track\n  * CVE-2026-106245: Uninitialized resource in ANGLE\n  * CVE-2026-106327: Incorrect authorization in Core\n  * CVE-2026-106366: Incomplete cleanup in CustomTabs\n  * CVE-2026-106258: Uninitialized resource in ANGLE\n  * CVE-2026-106376: Uninitialized resource in ANGLE\n  * CVE-2026-106308: Incorrect reference resolution", "references": ["https://bugzilla.suse.com/1284354", "https://www.suse.com/security/cve/CVE-2026-106179", "https://www.suse.com/security/cve/CVE-2026-106180"], "fixes": ["155.0.8059.39-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:22023-1", "noindex": false, "published": "2026-10-06T06:37:05Z", "modified": "2026-10-07T17:23:11.524954038Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:22023-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 154.0.8037.97 (boo#1284015)\n  * CVE-2026-103628: Out of bounds write in WebGL\n  * CVE-2026-103626: Incorrect authorization in FileSystem\n  * CVE-2026-103621: Integer overflow in Compositing\n  * CVE-2026-103630: Use after free in FedCM\n  * CVE-2026-103625: Type confusion in V8\n  * CVE-2026-103624: Use after free in Contextual Tasks\n  * CVE-2026-103629: Integer overflow in Skia\n  * CVE-2026-103622: Use after free in SVG\n  * CVE-2026-103623: Use after free in MediaStream\n  * CVE-2026-103631: Buffer overflow in WebRTC\n  * CVE-2026-103627: Information leak in SV", "references": ["https://bugzilla.suse.com/1284015", "https://www.suse.com/security/cve/CVE-2026-103621", "https://www.suse.com/security/cve/CVE-2026-103622"], "fixes": ["154.0.8037.97-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21987-1", "noindex": false, "published": "2026-09-26T10:45:43Z", "modified": "2026-10-01T18:23:10.958660038Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21987-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 154.0.8037.57 (boo#1282334):\n  * CVE-2026-95350: Buffer overflow in ANGLE\n  * CVE-2026-95357: Out of bounds write in GPU\n  * CVE-2026-95339: Use after free in ServiceWorker\n  * CVE-2026-95281: Buffer overflow in ANGLE\n  * CVE-2026-95313: Use after free in Fullscreen\n  * CVE-2026-95349: Buffer overflow in WebGL\n  * CVE-2026-95284: Buffer overflow in ANGLE\n  * CVE-2026-95322: Out of bounds write in GPU\n  * CVE-2026-95329: Out of bounds write in WebGL\n  * CVE-2026-95356: Use after free in WindowDialog\n  * CVE-2026-95310: Use after free in AdFilter\n  * CVE-2026", "references": ["https://bugzilla.suse.com/1282334", "https://www.suse.com/security/cve/CVE-2026-95274", "https://www.suse.com/security/cve/CVE-2026-95275"], "fixes": ["154.0.8037.57-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21921-1", "noindex": false, "published": "2026-09-20T05:23:04Z", "modified": "2026-09-25T18:23:13.360411533Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21921-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 153.0.8010.52 (boo#1281123):\n  * CVE-2026-93374: Use after free in Dawn\n  * CVE-2026-93372: Buffer overflow in WebGL\n  * CVE-2026-93375: Incorrect reference resolution in Tracing\n  * CVE-2026-93382: Use after free in PDFium\n  * CVE-2026-93387: Improper state validation in Skia\n  * CVE-2026-93373: Use after free in Extensions\n  * CVE-2026-93381: Buffer overflow in PDFium\n  * CVE-2026-93379: Incorrect authorization in ORB\n  * CVE-2026-93377: Type confusion in V8\n  * CVE-2026-93380: Race condition in FileSystem\n  * CVE-2026-93384: Server-side request forgery i", "references": ["https://bugzilla.suse.com/1281123", "https://www.suse.com/security/cve/CVE-2026-93372", "https://www.suse.com/security/cve/CVE-2026-93373"], "fixes": ["153.0.8010.52-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21913-1", "noindex": false, "published": "2026-09-18T03:24:06Z", "modified": "2026-09-25T18:23:13.329355584Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21913-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 153.0.8010.47 (boo#1280687):\n  * CVE-2026-91726: Out of bounds read in WebGL\n  * CVE-2026-91721: Use after free in Internals\n  * CVE-2026-91749: Use after free in Workers\n  * CVE-2026-91724: Use after free in Input\n  * CVE-2026-91728: Integer overflow in V8\n  * CVE-2026-91734: Incorrect authorization in Core\n  * CVE-2026-91727: Incorrect reference resolution in Extensions\n  * CVE-2026-91743: Race condition in Core\n  * CVE-2026-91744: Race condition in PlatformIntegration\n  * CVE-2026-91712: Race condition in Extensions\n  * CVE-2026-91748: Race condition in ", "references": ["https://bugzilla.suse.com/1280687", "https://www.suse.com/security/cve/CVE-2026-91708", "https://www.suse.com/security/cve/CVE-2026-91709"], "fixes": ["153.0.8010.47-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21858-1", "noindex": false, "published": "2026-09-16T08:15:10Z", "modified": "2026-09-17T18:23:14.650861352Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21858-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\nChromium 153.0.8010.36 (boo#1279840):\n\n  * CVE-2026-87464: Use after free in WebGL\n  * CVE-2026-87488: Use after free in WebGL\n  * CVE-2026-87438: Out of bounds write in WebGL\n  * CVE-2026-87527: Buffer overflow in WebGL\n  * CVE-2026-87628: Use after free in Cast\n  * CVE-2026-87512: Use after free in ANGLE\n  * CVE-2026-87585: Double free in PDFium\n  * CVE-2026-87444: Memory corruption in Codecs\n  * CVE-2026-87447: Incorrect authorization in Network\n  * CVE-2026-87440: Out of bounds read in Media\n  * CVE-2026-87633: Use after free in Views\n  * CVE-2026-87525: Out of bo", "references": ["https://bugzilla.suse.com/1279840", "https://www.suse.com/security/cve/CVE-2026-87429", "https://www.suse.com/security/cve/CVE-2026-87430"], "fixes": ["153.0.8010.36-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21799-1", "noindex": false, "published": "2026-09-05T23:43:46Z", "modified": "2026-09-09T18:23:16.183585781Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21799-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 152.0.7977.82 (boo#1278683):\n  * CVE-2026-85046: Type confusion in V8\n  * CVE-2026-85052: Out of bounds read in CrashReporting\n  * CVE-2026-85043: Incomplete cleanup in Network\n  * CVE-2026-85048: Use after free in Compositing\n  * CVE-2026-85045: Race condition in V8\n  * CVE-2026-85050: Out of bounds write in WebGL\n  * CVE-2026-85053: Improper resource exposure in CacheStorage\n  * CVE-2026-85042: Use after free in DevTools\n  * CVE-2026-85049: Use after free in Skia\n  * CVE-2026-85051: Type confusion in Compositing\n  * CVE-2026-85047: Improper input validati", "references": ["https://bugzilla.suse.com/1278072", "https://bugzilla.suse.com/1278683", "https://www.suse.com/security/cve/CVE-2026-84323"], "fixes": ["152.0.7977.82-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21724-1", "noindex": false, "published": "2026-09-01T06:30:12Z", "modified": "2026-09-02T18:00:03.655961852Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21724-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 152.0.7977.64 (boo#1276749, stable released 2026-08-25):\n  * CVE-2026-79282: Use after free in ANGLE\n  * CVE-2026-79290: Use after free in Aura\n  * CVE-2026-79054: Use after free in Chromecast\n  * CVE-2026-79121: Improper input validation in Chromecast\n  * CVE-2026-79224: Use after free in Chromecast\n  * CVE-2026-79052: Use after free in Aura\n  * CVE-2026-79150: Use after free in Views\n  * CVE-2026-78935: Use of uninitialized variable in Mobile\n  * CVE-2026-79012: Use after free in Safebrowsing\n  * CVE-2026-79200: Use after free in Aura\n  * CVE-2026-78989: ", "references": ["https://bugzilla.suse.com/1276225", "https://bugzilla.suse.com/1276749", "https://www.suse.com/security/cve/CVE-2026-78891"], "fixes": ["152.0.7977.64-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21498-1", "noindex": false, "published": "2026-08-31T08:41:53Z", "modified": "2026-09-02T11:26:18.741953796Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21498-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 150.0.7871.186 (boo#1272460):\n  * CVE-2026-16807: Out of bounds write in Codecs\n  * CVE-2026-16806: Use after free in WebMCP\n  * CVE-2026-16805: Use after free in Blink\n  * CVE-2026-16804: Use after free in Input\n\n- Chromium 150.0.7871.181 (boo#1272156):\n  * CVE-2026-16420: Type Confusion in WebAudio\n  * CVE-2026-16421: Inappropriate implementation in WebAudio\n  * CVE-2026-16413: Out of bounds write in ANGLE\n  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast\n  * CVE-2026-16415: Insufficient validation of untrusted input in Extensio", "references": ["https://bugzilla.suse.com/1269061", "https://bugzilla.suse.com/1270051", "https://bugzilla.suse.com/1271093"], "fixes": ["150.0.7871.186-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:21135-1", "noindex": false, "published": "2026-08-31T08:40:45Z", "modified": "2026-09-02T11:26:18.026386341Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:21135-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 149.0.7827.155 (boo#1268373):\n  * CVE-2026-12437: Use after free in WebShare\n  * CVE-2026-12438: Inappropriate implementation in WebView\n  * CVE-2026-12439: Use after free in Digital Credentials\n  * CVE-2026-12440: Use after free in DigitalCredentials\n  * CVE-2026-12441: Use after free in File Input\n  * CVE-2026-12442: Use after free in Passwords\n  * CVE-2026-12443: Use after free in Web Authentication\n  * CVE-2026-12444: Out of bounds read in Chromoting\n  * CVE-2026-12445: Use after free in Extensions\n  * CVE-2026-12446: Insufficient data validation in Pas", "references": ["https://bugzilla.suse.com/1265854", "https://bugzilla.suse.com/1267706", "https://bugzilla.suse.com/1267911"], "fixes": ["149.0.7827.155-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:20849-1", "noindex": false, "published": "2026-08-31T08:40:44Z", "modified": "2026-09-02T11:26:18.592324910Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:20849-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 148.0.7778.215 (boo#1266471):\n  * CVE-2026-9872: Out of bounds write in GPU\n  * CVE-2026-9873: Use after free in Network\n  * CVE-2026-9874: Use after free in Dawn\n  * CVE-2026-9875: Out of bounds read in WebGL\n  * CVE-2026-9876: Use after free in WebGL\n  * CVE-2026-9877: Use after free in ANGLE\n  * CVE-2026-9878: Use after free in ANGLE\n  * CVE-2026-9879: Out of bounds write in ANGLE\n  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL\n  * CVE-2026-9881: Use after free in Bluetooth\n  * CVE-2026-9882: Integer overflow in ANGLE\n  * CVE-2026-", "references": ["https://bugzilla.suse.com/1264175", "https://bugzilla.suse.com/1265159", "https://bugzilla.suse.com/1265848"], "fixes": ["148.0.7778.215-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:20660-1", "noindex": false, "published": "2026-08-31T08:40:11Z", "modified": "2026-09-02T11:26:18.794471216Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:20660-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 147.0.7727.137 (boo#1263158)\n  * CVE-2026-7363: Use after free in Canvas\n  * CVE-2026-7361: Use after free in iOS\n  * CVE-2026-7344: Use after free in Accessibility\n  * CVE-2026-7343: Use after free in Views\n  * CVE-2026-7333: Use after free in GPU\n  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing\n  * CVE-2026-7359: Use after free in ANGLE\n  * CVE-2026-7358: Use after free in Animation\n  * CVE-2026-7334: Use after free in Views\n  * CVE-2026-7357: Use after free in GPU\n  * CVE-2026-7356: Use after free in Navigation\n  * CVE-2026-73", "references": ["https://bugzilla.suse.com/1261758", "https://bugzilla.suse.com/1262174", "https://bugzilla.suse.com/1262586"], "fixes": ["147.0.7727.137-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:20460-1", "noindex": false, "published": "2026-08-31T08:40:11Z", "modified": "2026-09-02T11:26:18.320088167Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:20460-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 146.0.7680.177 (boo#1261249)\n  * CVE-2026-5273: Use after free in CSS\n  * CVE-2026-5272: Heap buffer overflow in GPU\n  * CVE-2026-5274: Integer overflow in Codecs\n  * CVE-2026-5275: Heap buffer overflow in ANGLE\n  * CVE-2026-5276: Insufficient policy enforcement in WebUSB\n  * CVE-2026-5277: Integer overflow in ANGLE\n  * CVE-2026-5278: Use after free in Web MIDI\n  * CVE-2026-5279: Object corruption in V8\n  * CVE-2026-5280: Use after free in WebCodecs\n  * CVE-2026-5281: Use after free in Dawn\n  * CVE-2026-5282: Out of bounds read in WebCodecs\n  * CVE-2026-528", "references": ["https://bugzilla.suse.com/1259530", "https://bugzilla.suse.com/1259648", "https://bugzilla.suse.com/1259659"], "fixes": ["146.0.7680.177-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:20332-1", "noindex": false, "published": "2026-08-31T08:39:48Z", "modified": "2026-09-02T11:26:17.991939759Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:20332-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 145.0.7632.159 (boo#1259213)\n  * CVE-2026-3536: Integer overflow in ANGLE\n  * CVE-2026-3537: Object lifecycle issue in PowerVR\n  * CVE-2026-3538: Integer overflow in Skia\n  * CVE-2026-3539: Object lifecycle issue in DevTools\n  * CVE-2026-3540: Inappropriate implementation in WebAudio\n  * CVE-2026-3541: Inappropriate implementation in CSS\n  * CVE-2026-3542: Inappropriate implementation in WebAssembly\n  * CVE-2026-3543: Inappropriate implementation in V8\n  * CVE-2026-3544: Heap buffer overflow in WebCodecs\n  * CVE-2026-3545: Insufficient data validation in Na", "references": ["https://bugzilla.suse.com/1258116", "https://bugzilla.suse.com/1258185", "https://bugzilla.suse.com/1258199"], "fixes": ["145.0.7632.159-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:20183-1", "noindex": false, "published": "2026-08-31T08:39:48Z", "modified": "2026-09-02T11:26:18.400314659Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:20183-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 144.0.7559.132 (boo#1257650)\n  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome\n    prior to 144.0.7559.132 allowed a remote attacker to potentially\n    exploit heap corruption via a crafted HTML page.\n  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to\n    144.0.7559.132 allowed a remote attacker to potentially exploit\n    heap corruption via a crafted HTML page.\n\n- Chromium 144.0.7559.109 (boo#1257404)\n  * CVE-2026-1504: Inappropriate implementation in Background Fetch API\n\n- Chromium 144.0.7559.96 (boo#1257011)\n  * CVE-2026-", "references": ["https://bugzilla.suse.com/1256614", "https://bugzilla.suse.com/1256938", "https://bugzilla.suse.com/1257011"], "fixes": ["144.0.7559.132-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2026:20020-1", "noindex": false, "published": "2026-08-31T08:39:47Z", "modified": "2026-09-02T11:26:18.293359131Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2026:20020-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 143.0.7499.192 (boo#1256067):\n  * CVE-2026-0628: Insufficient policy enforcement in WebView tag\n\n- Chromium 143.0.7499.169 (stable released 2025-12-18)\n  * no cve listed yet\n\nChromium 143.0.7499.146 (boo#1255115):\n\n  * CVE-2025-14765: Use after free in WebGPU\n  * CVE-2025-14766: Out of bounds read and write in V8\n  * CVE-2025-14174: Out of bounds memory access in ANGLE\n\n- Chromium 143.0.7499.109 (boo#1254776):\n  * CVE-2025-14372: Use after free in Password Manager\n  * CVE-2025-14373: Inappropriate implementation in Toolbar\n  * third issue with an exploit is", "references": ["https://bugzilla.suse.com/1254429", "https://bugzilla.suse.com/1254776", "https://bugzilla.suse.com/1255115"], "fixes": ["143.0.7499.192-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2025:20076-1", "noindex": false, "published": "2026-08-31T08:39:46Z", "modified": "2026-09-06T18:26:26.829904523Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2025:20076-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\nChromium 142.0.7444.175 (boo#1253698):\n\n  * CVE-2025-13223: Type Confusion in V8\n  * CVE-2025-13224: Type Confusion in V8\n\nChromium 142.0.7444.162 (boo#1253267):\n\n  * CVE-2025-13042: Inappropriate implementation in V8\n\nChromium 142.0.7444.134 (boo#1253089):\n\n  * CVE-2025-12725: Out of bounds write in WebGPU\n  * CVE-2025-12726: Inappropriate implementation in Views\n  * CVE-2025-12727: Inappropriate implementation in V8\n  * CVE-2025-12728: Inappropriate implementation in Omnibox\n  * CVE-2025-12729: Inappropriate implementation in Omnibox\n\nChromium 142.0.7444.59, the sta", "references": ["https://bugzilla.suse.com/1252881", "https://bugzilla.suse.com/1253089", "https://bugzilla.suse.com/1253267"], "fixes": ["142.0.7444.162-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}, {"id": "openSUSE-SU-2025:20032-1", "noindex": false, "published": "2026-08-31T08:39:29Z", "modified": "2026-09-06T18:26:26.517748329Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2025:20032-1", "title": "Security update for chromium", "description": "This update for chromium fixes the following issues:\n\nChromium 141.0.7390.122:\n\n  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)\n\nChromium 141.0.7390.107:\n\n* CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)\n\nChromium 141.0.7390.76:\n\n* Do not send URLs as AIM input. This is to resolve a privacy\n  concern, around passing urls to AI Mode.\n\nChromium 141.0.7390.65 (boo#1251334):\n\n* CVE-2025-11458: Heap buffer overflow in Sync\n* CVE-2025-11460: Use after free in Storage\n* CVE-2025-11211: Out of bounds read in WebCodecs\n\nChromium 141.0.7390.54 (stable released 2025-09-30) (boo#1250780)\n\n* CVE-2025-11205: Heap buffer ", "references": ["https://bugzilla.suse.com/1250472", "https://bugzilla.suse.com/1250780", "https://bugzilla.suse.com/1251334"], "fixes": ["141.0.7390.122-bp160.1.1"], "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}]}], "total": 25, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "chromium", "path": "vulns/opensuse-leap-16.0/chromium", "ecosystem": "openSUSE:Leap 16.0"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 4, "kev": 0}, "lastmod": "2026-10-19T17:23:15.945604150Z", "early_advisories": [], "license": "Puedes utilizar libremente la selección de PatchFirst y nuestras aportaciones (prioridades, alertas tempranas, textos, resúmenes y agregados) para tus propios fines, incluido el uso interno de tu empresa. La reventa, la distribución comercial y la creación masiva de réplicas de esta selección o de estas aportaciones requieren un acuerdo escrito con el operador. Siempre que uses o publiques la selección o nuestras aportaciones, cita a PatchFirst (https://patchfirst.dev/vulns/) con este enlace a la página del flujo de tu región. Los registros originales de fuentes abiertas siguen sujetos a sus respectivas licencias y condiciones. Estas condiciones no limitan tus derechos sobre los datos originales, que puedes obtener directamente de esas fuentes.", "terms_url": "https://patchfirst.dev/es/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst selecciona, normaliza y combina los registros; se pueden añadir resúmenes y traducciones. Las noticias incluyen un enlace a la fuente original en cada entrada.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Las licencias de las bases originales varían; consulta el catálogo de fuentes."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Puntuaciones públicas gratuitas; se solicita atribución (FIRST EPSS, puntuaciones generadas por Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}