openSUSE-SU-2026:21724-1

openSUSE-SU-2026:21724-1 · Security update for chromium

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for chromium fixes the following issues: Changes in chromium: - Chromium 152.0.7977.64 (boo#1276749, stable released 2026-08-25): * CVE-2026-79282: Use after free in ANGLE * CVE-2026-79290: Use after free in Aura * CVE-2026-79054: Use after free in Chromecast * CVE-2026-79121: Improper input validation in Chromecast * CVE-2026-79224: Use after free in Chromecast * CVE-2026-79052: Use after free in Aura * CVE-2026-79150: Use after free in Views * CVE-2026-78935: Use of uninitialized variable in Mobile * CVE-2026-79012: Use after free in Safebrowsing * CVE-2026-79200: Use after free in Aura * CVE-2026-78989: Out of bounds read in ANGLE * CVE-2026-79069: Memory corruption in Tint * CVE-2026-79175: Type confusion in Accessibility * CVE-2026-79218: Incorrect authorization in Sandbox * CVE-2026-79195: Use after free in Script * CVE-2026-78939: Use after free in Chromecast * CVE-2026-79194: Use after free in Chromoting * CVE-2026-79247: Use after free in Chromoting * CVE-2026-79219: Use after free in Bluetooth * CVE-2026-79047: Use after free in Views * CVE-2026-79292: Integer overflow in Chromecast * CVE-2026-78986: Uninitialized resource in GPU * CVE-2026-79039: Use after free in Mobile * CVE-2026-78934: Race condition in ReadAloud * CVE-2026-79011: UI misrepresentation in Browser * CVE-2026-78911: Incorrect authorization in USB * CVE-2026-79257: Use after free in Views * CVE-2026-79202: Use after free in Chromecast * CVE-2026-79212: Missing authorization in Passwords * CVE-2026-79183: Use after free in Accessibility * CVE-2026-79155: Race condition in FileSystem * CVE-2026-79093: Incorrect authorization in Paint * CVE-2026-79019: Out of bounds write in ANGLE * CVE-2026-79187: Use after free in WebRTC * CVE-2026-79288: Improper input validation in Autofill * CVE-2026-79130: Buffer overflow in ANGLE * CVE-2026-78965: Uninitialized resource in ANGLE * CVE-2026-79117: Race condition in WebAppInstalls * CVE-2026-79082: Incorrect authorization in Transactions Platform * CVE-2026-79111: Improper input validation in Dawn * CVE-2026-79072: Improper state validation in Performance * CVE-2026-79142: Buffer overflow in ANGLE * CVE-2026-78948: Buffer overflow in WebGL * CVE-2026-78908: Information leak in Canvas * CVE-2026-78895: Information leak in Paint * CVE-2026-79043: Out of bounds write in ANGLE * CVE-2026-79235: Use after free in WebGL * CVE-2026-79232: Use after free in Aura * CVE-2026-79118: Uninitialized resource in ANGLE * CVE-2026-79174: Incorrect authorization in Extensions * CVE-2026-78900: Improper input validation in Media * CVE-2026-79188: Out of bounds write in ANGLE * CVE-2026-79189: Out of bounds write in ANGLE * CVE-2026-79048: Out of bounds write in ANGLE * CVE-2026-79240: Out of bounds write in ANGLE * CVE-2026-79014: Race condition in Autofill * CVE-2026-79198: Use after free in Platform * CVE-2026-79131: Out of bounds write in ANGLE * CVE-2026-79149: Use after free in ANGLE * CVE-2026-79275: Use after free in ANGLE * CVE-2026-79138: Out of bounds write in ANGLE * CVE-2026-79026: Use after free in Extensions * CVE-2026-79027: Use after free in WebRTC * CVE-2026-78904: Type confusion in ANGLE * CVE-2026-78899: Use after free in V8 * CVE-2026-78954: Incorrect authorization in Extensions * CVE-2026-79274: Information leak in GPU * CVE-2026-78938: Type confusion in V8 * CVE-2026-78952: Out of bounds write in Crashpad * CVE-2026-79236: Type confusion in V8 * CVE-2026-79078: Use after free in FedCM * CVE-2026-79209: Type confusion in Animation * CVE-2026-79030: Observable discrepancy in Autofill * CVE-2026-79216: Buffer overflow in Blink * CVE-2026-79007: Uninitialized resource in GPU * CVE-2026-78893: Information leak in QUIC * CVE-2026-79222: Incorrect authorization in CustomTabs * CVE-2026-79071: Race condition in GPU * CVE-2026-79076: Improper input validation in Sync * CVE-2026-79088: Incorrect authorization in FileSystem * CVE-2026-79104: Missing authorization in Sensor * CVE-2026-79044: Missing authorization in WebAppInstalls * CVE-2026-78958: Uninitialized resource in Skia * CVE-2026-78961: Incorrect authorization in Core * CVE-2026-79262: Incorrect authorization in Network * CVE-2026-79106: Improper input validation in Input * CVE-2026-79176: UI misrepresentation in Extensions * CVE-2026-78966: Externally controlled reference in QUIC * CVE-2026-79186: Incorrect authorization in Network * CVE-2026-79267: Race condition in Workers * CVE-2026-79016: Observable discrepancy in SVG * CVE-2026-79010: Operation on a resource after expiration or release in Network * CVE-2026-79286: Missing authorization in CustomTabs * CVE-2026-78945: Use after free in Views * CVE-2026-78999: Improper privilege management in Navigation * CVE-2026-78941: Information leak in Core * CVE-2026-79032: Improper input validation in Network * CVE-2026-79109: Improper input validation in Printing * CVE-2026-79256: Externally controlled reference in WebView * CVE-2026-79237: Incorrect authorization in Navigation * CVE-2026-78898: Incorrect authorization in Downloads * CVE-2026-78985: Incorrect reference resolution in FileSystem * CVE-2026-79028: Observable discrepancy in Network * CVE-2026-79210: Use after free in Audio * CVE-2026-79046: Race condition in Permissions * CVE-2026-79129: Use after free in Sessions * CVE-2026-78937: Use after free in Search * CVE-2026-78987: Information leak in Canvas * CVE-2026-78990: Use after free in Compositing * CVE-2026-78909: Use after free in Views * CVE-2026-79271: Information leak in DOM * CVE-2026-79144: Information leak in Skia * CVE-2026-79065: Improper input validation in Network * CVE-2026-79192: Improper input validation in Variations * CVE-2026-79140: Use after free in Views * CVE-2026-79128: Use after free in Views * CVE-2026-78942: Incorrect reference resolution in Loader * CVE-2026-79116: Missing authorization in Viz * CVE-2026-79006: Protection mechanism failure in HttpsUpgrades * CVE-2026-79095: Information leak in Payments * CVE-2026-79084: Inadequate encryption strength in Notifications * CVE-2026-78991: Race condition in WebProtect * CVE-2026-79248: Incorrect authorization in Input * CVE-2026-78891: Buffer overflow in WebRTC * CVE-2026-79031: Improper resource exposure in Preload * CVE-2026-79110: Missing authorization in Preload * CVE-2026-79136: Incorrect authorization in ServiceWorker * CVE-2026-78907: Incorrect authorization in WebProtect * CVE-2026-79087: Injection in Chrome Tabs * CVE-2026-79231: Buffer overflow in Media * CVE-2026-78969: Uninitialized resource in Video * CVE-2026-79137: Incorrect authorization in Extensions * CVE-2026-79057: Race condition in Start * CVE-2026-78894: Race condition in Payments * CVE-2026-79264: Incorrect reference resolution in Preload * CVE-2026-78910: Buffer overflow in V8 * CVE-2026-79066: Improper input validation in Navigation * CVE-2026-79255: Improper input validation in WebRTC * CVE-2026-79086: Missing authorization in CustomTabs * CVE-2026-79038: Incorrect authorization in WebProtect * CVE-2026-78940: Improper initialization in Network * CVE-2026-79107: Incorrect authorization in TabGroups * CVE-2026-79120: Uninitialized resource in ANGLE * CVE-2026-79270: Uninitialized resource in ANGLE * CVE-2026-79067: Missing authorization in Network * CVE-2026-79213: Incorrect authorization in WebAppInstalls * CVE-2026-78943: Improper input validation in Editing * CVE-2026-79259: Improper input validation in Safebrowsing * CVE-2026-79208: Missing authorization in HTTP2 * CVE-2026-79251: Improper input validation in Network * CVE-2026-79226: Improper privilege management in Regional Capabilities * CVE-2026-79042: Missing authorization in Payments * CVE-2026-79122: Informa

Correctif disponible

Publication

2026-09-01T06:30:12Z

Mise à jour

2026-09-02T18:00:03.655961852Z

Pile logicielle: system

Vérifiez votre serveur →