openSUSE-SU-2026:21858-1

openSUSE-SU-2026:21858-1 · Security update for chromium

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

This update for chromium fixes the following issues: Changes in chromium: Chromium 153.0.8010.36 (boo#1279840): * CVE-2026-87464: Use after free in WebGL * CVE-2026-87488: Use after free in WebGL * CVE-2026-87438: Out of bounds write in WebGL * CVE-2026-87527: Buffer overflow in WebGL * CVE-2026-87628: Use after free in Cast * CVE-2026-87512: Use after free in ANGLE * CVE-2026-87585: Double free in PDFium * CVE-2026-87444: Memory corruption in Codecs * CVE-2026-87447: Incorrect authorization in Network * CVE-2026-87440: Out of bounds read in Media * CVE-2026-87633: Use after free in Views * CVE-2026-87525: Out of bounds read in Chromoting * CVE-2026-87578: Use after free in Receiver * CVE-2026-87517: Race condition in Mobile * CVE-2026-87524: Use after free in Core * CVE-2026-87569: Missing authorization in Views * CVE-2026-87554: Race condition in Chromoting * CVE-2026-87467: Race condition in Updater * CVE-2026-87492: Incorrect authorization in DevTools * CVE-2026-87520: Use after free in Dawn * CVE-2026-87514: Use after free in Views * CVE-2026-87650: Out of bounds read in WebGL * CVE-2026-87596: Out of bounds read in ANGLE * CVE-2026-87654: Buffer overflow in ANGLE * CVE-2026-87604: Out of bounds read in ANGLE * CVE-2026-87621: Out of bounds write in ANGLE * CVE-2026-87647: Uninitialized resource in GPU * CVE-2026-87646: Use after free in Web Authentication * CVE-2026-87500: Improper validation of array index in ANGLE * CVE-2026-87572: Injection in DevTools * CVE-2026-87460: Use after free in Platform * CVE-2026-87542: Use after free in Input * CVE-2026-87639: Use after free in WebPackaging * CVE-2026-87552: Missing authorization in TrustedWebActivities * CVE-2026-87651: Incorrect authorization in Paint * CVE-2026-87587: Use after free in V8 * CVE-2026-87564: Type confusion in V8 * CVE-2026-87498: Missing authorization in WebUI * CVE-2026-87499: Incorrect authorization in Network * CVE-2026-87607: Use after free in Device * CVE-2026-87558: Use after free in Payments * CVE-2026-87581: Use after free in Payments * CVE-2026-87480: Use after free in Printing * CVE-2026-87612: Type confusion in V8 * CVE-2026-87536: Use after free in V8 * CVE-2026-87474: Use after free in Payments * CVE-2026-87504: Use after free in Core * CVE-2026-87640: Out of bounds read in WebView * CVE-2026-87491: Out of bounds write in V8 * CVE-2026-87478: Observable discrepancy in Autofill * CVE-2026-87446: Incomplete cleanup in Extensions * CVE-2026-87657: Use after free in V8 * CVE-2026-87434: Missing authorization in CORS * CVE-2026-87487: Missing authorization in FileSystem * CVE-2026-87453: Confused deputy in BackgroundFetch * CVE-2026-87588: Use after free in Chromecast * CVE-2026-87636: Type confusion in XML * CVE-2026-87611: Missing authorization in FileSystem * CVE-2026-87606: Missing authorization in SiteIsolation * CVE-2026-87456: Uninitialized resource in Media * CVE-2026-87553: Improper input validation in SiteIsolation * CVE-2026-87658: Information leak in Extensions * CVE-2026-87465: Incorrect authorization in Downloads * CVE-2026-87515: Incorrect authorization in FileAPI * CVE-2026-87547: Incorrect reference resolution in FileSystem * CVE-2026-87442: Confused deputy in Prerender * CVE-2026-87506: Privilege elevation in WebUI * CVE-2026-87433: Race condition in FileAPI * CVE-2026-87557: Missing authorization in LocalNetworkAccess * CVE-2026-87457: Race condition in Updater * CVE-2026-87503: Inappropriate implementation in Downloads * CVE-2026-87481: Incorrect authorization in WebView * CVE-2026-87537: Missing authorization in Extensions * CVE-2026-87471: Incorrect authorization in ServiceWorker * CVE-2026-87485: Incorrect authorization in CORS * CVE-2026-87652: Incorrect authorization in PushAPI * CVE-2026-87582: Confused deputy in DataTransfer * CVE-2026-87466: Incorrect authorization in Workers * CVE-2026-87603: Missing authorization in FileSystem * CVE-2026-87615: Race condition in Payments * CVE-2026-87642: Uninitialized resource in WebGL * CVE-2026-87577: Incorrect authorization in Isolated * CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials * CVE-2026-87613: Incorrect reference resolution in Extensions * CVE-2026-87645: Improper state validation in Safebrowsing * CVE-2026-87443: Missing authorization in Actor * CVE-2026-87630: Integer overflow in WebRTC * CVE-2026-87590: Improper input validation in Passwords * CVE-2026-87580: Incorrect authorization in WebAppInstalls * CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades * CVE-2026-87497: Uninitialized resource in Codecs * CVE-2026-87579: Buffer overflow in WebRTC * CVE-2026-87576: Uninitialized resource in GPU * CVE-2026-87476: Incorrect authorization in Loader * CVE-2026-87475: Missing authorization in Omnibox * CVE-2026-87436: Incomplete cleanup in Browser * CVE-2026-87479: Insufficient policy enforcement in Extensions * CVE-2026-87513: Missing authorization in ControlledFrame * CVE-2026-87432: Incorrect authorization in Navigation * CVE-2026-87560: Missing authorization in Browser * CVE-2026-87521: Information leak in WebMCP * CVE-2026-87539: Observable discrepancy in Network * CVE-2026-87648: Use after free in ANGLE * CVE-2026-87534: Missing authorization in WebView * CVE-2026-87562: Incorrect reference resolution in Accessibility * CVE-2026-87556: Missing authorization in Browser * CVE-2026-87508: Incorrect authorization in Loader * CVE-2026-87643: Integer overflow in GPU * CVE-2026-87573: Improper input validation in Network * CVE-2026-87548: Improper state validation in Installer * CVE-2026-87501: UI misrepresentation in Passwords * CVE-2026-87452: Incorrect authorization in GPU * CVE-2026-87516: Observable discrepancy in Navigation * CVE-2026-87599: Improper input validation in Interstitials * CVE-2026-87507: UI misrepresentation in Downloads * CVE-2026-87559: UI misrepresentation in UI * CVE-2026-87472: Improper input validation in FedCM * CVE-2026-87486: Clickjacking in TrustedWebActivities * CVE-2026-87655: Clickjacking in Downloads * CVE-2026-87462: UI misrepresentation in FedCM * CVE-2026-87649: UI misrepresentation in Downloads * CVE-2026-87445: UI misrepresentation in Session * CVE-2026-87567: UI misrepresentation in UrlFormatting * CVE-2026-87496: UI misrepresentation in Browser * CVE-2026-87441: Missing authorization in Downloads * CVE-2026-87549: Incomplete cleanup in Downloads * CVE-2026-87458: UI misrepresentation in Geometry * CVE-2026-87574: Information leak in ServiceWorker * CVE-2026-87495: Information leak in Scroll * CVE-2026-87541: Information leak in Navigation * CVE-2026-87451: Information leak in Downloads * CVE-2026-87570: Incorrect authorization in SiteIsolation * CVE-2026-87555: Uninitialized resource in GPU * CVE-2026-87600: Improper input validation in Safebrowsing * CVE-2026-87532: Improper state validation in Safebrowsing * CVE-2026-87439: Information leak in ServiceWorker * CVE-2026-87450: Incorrect authorization in Permissions * CVE-2026-87505: Incorrect authorization in FileSystem * CVE-2026-87622: Missing authorization in FedCM * CVE-2026-87540: Incorrect authorization in Isolated * CVE-2026-87594: Incorrect authorization in DataTransfer * CVE-2026-87518: Observable discrepancy in Safebrowsing * CVE-2026-87589: Incorrect authorization in SiteIsolation * CVE-2026-87484: UI misrepresentation in Geometry * CVE-2026-87530: Uncontrolled search path element in CredentialProvider * CVE-2026-87550: Improper encoding or escaping of output in CSS * CVE-2026-87494: Use after free in Browser * CVE-2026-87483: Incorrect authorization in Browser * CVE-2026-87454: Information leak in Enterprise * CVE-2026-87616: Improper initialization

Corrección disponible

Publicación

2026-09-16T08:15:10Z

Actualización

2026-09-17T18:23:14.650861352Z

Pila tecnológica: system

Comprueba tu servidor →