openSUSE-SU-2026:21498-1

openSUSE-SU-2026:21498-1 · Security update for chromium

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.186 (boo#1272460): * CVE-2026-16807: Out of bounds write in Codecs * CVE-2026-16806: Use after free in WebMCP * CVE-2026-16805: Use after free in Blink * CVE-2026-16804: Use after free in Input - Chromium 150.0.7871.181 (boo#1272156): * CVE-2026-16420: Type Confusion in WebAudio * CVE-2026-16421: Inappropriate implementation in WebAudio * CVE-2026-16413: Out of bounds write in ANGLE * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast * CVE-2026-16415: Insufficient validation of untrusted input in Extensions * CVE-2026-16416: Integer overflow in Chromecast * CVE-2026-16417: Uninitialized Use in Skia * CVE-2026-16418: Stack buffer overflow in V8 * CVE-2026-16419: Out of bounds read and write in ANGLE * CVE-2026-16422: Insufficient validation of untrusted input in Certificate * CVE-2026-16423: Use after free in UI * CVE-2026-16424: Use after free in GPU - Chromium 150.0.7871.128 (boo#1271656): * CVE-2026-15899: Use after free in CameraCapture * CVE-2026-15900: Use after free in GPU * CVE-2026-15901: Use after free in Network * CVE-2026-15902: Use after free in Cast * CVE-2026-15903: Out of bounds read and write in V8 * CVE-2026-15904: Use after free in Ozone * CVE-2026-15905: Use after free in Aura - Chromium 150.0.7871.124 (boo#1271415): * CVE-2026-15764: Use after free in Ozone * CVE-2026-15765: Use after free in Ozone * CVE-2026-15766: Uninitialized Use in Skia * CVE-2026-15767: Heap buffer overflow in libyuv * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming * CVE-2026-15770: Uninitialized Use in V8 * CVE-2026-15771: Insufficient validation of untrusted input in Media * CVE-2026-15772: Use after free in GPU * CVE-2026-15773: Use after free in Core * CVE-2026-15774: Use after free in Skia * CVE-2026-15775: Insufficient policy enforcement in V8 * CVE-2026-15776: Type Confusion in V8 * CVE-2026-15777: Use after free in UI * CVE-2026-15778: Insufficient validation of untrusted input in Navigation - Chromium 150.0.7871.114 (boo#1271093): * CVE-2026-15112: Use after free in Ozone * CVE-2026-15129: Use after free in Views * CVE-2026-15132: Uninitialized Use in V8 * CVE-2026-15133: Use after free in InterestGroups * CVE-2026-15108: Integer overflow in Extensions API * CVE-2026-15109: Uninitialized Use in ANGLE * CVE-2026-15110: Use after free in Extensions * CVE-2026-15111: Use after free in Views * CVE-2026-15113: Use after free in Autofill * CVE-2026-15114: Out of bounds read and write in Codecs * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls * CVE-2026-15116: Use after free in Actor * CVE-2026-15117: Use after free in Payments * CVE-2026-15118: Use after free in Input * CVE-2026-15119: Inappropriate implementation in GetUserMedia * CVE-2026-15120: Use after free in Core * CVE-2026-15121: Use after free in WebRTC * CVE-2026-15122: Insufficient validation of untrusted input in Codecs * CVE-2026-15123: Insufficient data validation in DOM * CVE-2026-15124: Insufficient policy enforcement in Passwords * CVE-2026-15125: Inappropriate implementation in Forms * CVE-2026-15126: Use after free in Forms * CVE-2026-15127: Inappropriate implementation in WebGL * CVE-2026-15128: Inappropriate implementation in Forms * CVE-2026-15130: Insufficient policy enforcement in Navigation * CVE-2026-15107: Use after free in IndexedDB * CVE-2026-15131: Insufficient data validation in Navigation - Chromium 150.0.7871.100: * stability improvements, no further information available - promote Chromium 150 (150.0.7871.46) to stable (boo#1270051) * CVE-2026-13774: Use after free in Extensions * CVE-2026-13775: Use after free in GPU * CVE-2026-14398: Use after free in ANGLE * CVE-2026-13776: Type Confusion in Dawn * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb * CVE-2026-13778: Use after free in WebUSB * CVE-2026-13779: Use after free in Chromoting * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE * CVE-2026-13781: Insufficient validation of untrusted input in Skia * CVE-2026-14417: Use after free in Dawn * CVE-2026-13782: Use after free in Browser * CVE-2026-13783: Use after free in Views * CVE-2026-13784: Use after free in Views * CVE-2026-14419: Use after free in Skia * CVE-2026-13785: Use after free in Bluetooth * CVE-2026-14420: Out of bounds read and write in Dawn * CVE-2026-13786: Use after free in Ozone * CVE-2026-14427: Heap buffer overflow in Skia * CVE-2026-13787: Use after free in Chromoting * CVE-2026-13788: Use after free in Fullscreen * CVE-2026-14382: Insufficient validation of untrusted input in ANGLE * CVE-2026-13790: Side-channel information leakage in Scroll * CVE-2026-14385: Heap buffer overflow in ANGLE * CVE-2026-13791: Insufficient validation of untrusted input in Downloads * CVE-2026-13792: Use after free in Touchbar * CVE-2026-13793: Insufficient policy enforcement in SVG * CVE-2026-14392: Out of bounds write in Tint * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls * CVE-2026-14422: Out of bounds read and write in Tint * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS * CVE-2026-14426: Use after free in V8 * CVE-2026-13796: Integer overflow in Chromecast * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast * CVE-2026-14386: Out of bounds read in ANGLE * CVE-2026-13798: Heap buffer overflow in Chromecast * CVE-2026-13799: Use after free in QUIC * CVE-2026-13800: Inappropriate implementation in Updater * CVE-2026-13801: Integer overflow in Chromecast * CVE-2026-13802: Use after free in Views * CVE-2026-13803: Type Confusion in Chrome Tabs * CVE-2026-13804: Use after free in Chromecast * CVE-2026-13805: Use after free in GFX * CVE-2026-14390: Use after free in ANGLE * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility * CVE-2026-13807: Use after free in Import * CVE-2026-13808: Insufficient data validation in Chrome for iOS * CVE-2026-13809: Side-channel information leakage in Safe Browsing * CVE-2026-13810: Inappropriate implementation in Input * CVE-2026-13811: Use after free in IME * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS * CVE-2026-13814: Use after free in Views * CVE-2026-13815: Use after free in Blink * CVE-2026-13816: Insufficient validation of untrusted input in File Input * CVE-2026-14396: Out of bounds read in ANGLE * CVE-2026-13817: Insufficient validation of untrusted input in Glic * CVE-2026-13818: Inappropriate implementation in Passwords * CVE-2026-13819: Out of bounds read in ANGLE * CVE-2026-13820: Out of bounds read in Skia * CVE-2026-14400: Out of bounds write in ANGLE * CVE-2026-14401: Insufficient validation of untrusted input in ANGLE * CVE-2026-14402: Uninitialized Use in ANGLE * CVE-2026-13821: Use after free in Canvas * CVE-2026-13822: Inappropriate implementation in Extensions * CVE-2026-13823: Use after free in Glic * CVE-2026-13824: Insufficient validation of untrusted input in Extensions * CVE-2026-13825: Uninitialized Use in Dawn * CVE-2026-13826: Inappropriate implementation in Autofill * CVE-2026-13827: Use after free in Updater * CVE-2026-13828: Inappropriate implementation in Enterprise * CVE-2026-13829: Insufficient validation of untrusted input in Settings * CVE-2026-13830: Use after free in Chromoting * CVE-2026-13831: Use after free in GPU * CVE-2026-13832: Use after free in Headless * CVE-2026-14411: Insufficient validation of untrusted in

Correctif disponible

Publication

2026-08-31T08:41:53Z

Mise à jour

2026-09-02T11:26:18.741953796Z

Pile logicielle: system

Vérifiez votre serveur →