openSUSE-SU-2026:21724-1

openSUSE-SU-2026:21724-1 · Security update for chromium

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

This update for chromium fixes the following issues: Changes in chromium: - Chromium 152.0.7977.64 (boo#1276749, stable released 2026-08-25): * CVE-2026-79282: Use after free in ANGLE * CVE-2026-79290: Use after free in Aura * CVE-2026-79054: Use after free in Chromecast * CVE-2026-79121: Improper input validation in Chromecast * CVE-2026-79224: Use after free in Chromecast * CVE-2026-79052: Use after free in Aura * CVE-2026-79150: Use after free in Views * CVE-2026-78935: Use of uninitialized variable in Mobile * CVE-2026-79012: Use after free in Safebrowsing * CVE-2026-79200: Use after free in Aura * CVE-2026-78989: Out of bounds read in ANGLE * CVE-2026-79069: Memory corruption in Tint * CVE-2026-79175: Type confusion in Accessibility * CVE-2026-79218: Incorrect authorization in Sandbox * CVE-2026-79195: Use after free in Script * CVE-2026-78939: Use after free in Chromecast * CVE-2026-79194: Use after free in Chromoting * CVE-2026-79247: Use after free in Chromoting * CVE-2026-79219: Use after free in Bluetooth * CVE-2026-79047: Use after free in Views * CVE-2026-79292: Integer overflow in Chromecast * CVE-2026-78986: Uninitialized resource in GPU * CVE-2026-79039: Use after free in Mobile * CVE-2026-78934: Race condition in ReadAloud * CVE-2026-79011: UI misrepresentation in Browser * CVE-2026-78911: Incorrect authorization in USB * CVE-2026-79257: Use after free in Views * CVE-2026-79202: Use after free in Chromecast * CVE-2026-79212: Missing authorization in Passwords * CVE-2026-79183: Use after free in Accessibility * CVE-2026-79155: Race condition in FileSystem * CVE-2026-79093: Incorrect authorization in Paint * CVE-2026-79019: Out of bounds write in ANGLE * CVE-2026-79187: Use after free in WebRTC * CVE-2026-79288: Improper input validation in Autofill * CVE-2026-79130: Buffer overflow in ANGLE * CVE-2026-78965: Uninitialized resource in ANGLE * CVE-2026-79117: Race condition in WebAppInstalls * CVE-2026-79082: Incorrect authorization in Transactions Platform * CVE-2026-79111: Improper input validation in Dawn * CVE-2026-79072: Improper state validation in Performance * CVE-2026-79142: Buffer overflow in ANGLE * CVE-2026-78948: Buffer overflow in WebGL * CVE-2026-78908: Information leak in Canvas * CVE-2026-78895: Information leak in Paint * CVE-2026-79043: Out of bounds write in ANGLE * CVE-2026-79235: Use after free in WebGL * CVE-2026-79232: Use after free in Aura * CVE-2026-79118: Uninitialized resource in ANGLE * CVE-2026-79174: Incorrect authorization in Extensions * CVE-2026-78900: Improper input validation in Media * CVE-2026-79188: Out of bounds write in ANGLE * CVE-2026-79189: Out of bounds write in ANGLE * CVE-2026-79048: Out of bounds write in ANGLE * CVE-2026-79240: Out of bounds write in ANGLE * CVE-2026-79014: Race condition in Autofill * CVE-2026-79198: Use after free in Platform * CVE-2026-79131: Out of bounds write in ANGLE * CVE-2026-79149: Use after free in ANGLE * CVE-2026-79275: Use after free in ANGLE * CVE-2026-79138: Out of bounds write in ANGLE * CVE-2026-79026: Use after free in Extensions * CVE-2026-79027: Use after free in WebRTC * CVE-2026-78904: Type confusion in ANGLE * CVE-2026-78899: Use after free in V8 * CVE-2026-78954: Incorrect authorization in Extensions * CVE-2026-79274: Information leak in GPU * CVE-2026-78938: Type confusion in V8 * CVE-2026-78952: Out of bounds write in Crashpad * CVE-2026-79236: Type confusion in V8 * CVE-2026-79078: Use after free in FedCM * CVE-2026-79209: Type confusion in Animation * CVE-2026-79030: Observable discrepancy in Autofill * CVE-2026-79216: Buffer overflow in Blink * CVE-2026-79007: Uninitialized resource in GPU * CVE-2026-78893: Information leak in QUIC * CVE-2026-79222: Incorrect authorization in CustomTabs * CVE-2026-79071: Race condition in GPU * CVE-2026-79076: Improper input validation in Sync * CVE-2026-79088: Incorrect authorization in FileSystem * CVE-2026-79104: Missing authorization in Sensor * CVE-2026-79044: Missing authorization in WebAppInstalls * CVE-2026-78958: Uninitialized resource in Skia * CVE-2026-78961: Incorrect authorization in Core * CVE-2026-79262: Incorrect authorization in Network * CVE-2026-79106: Improper input validation in Input * CVE-2026-79176: UI misrepresentation in Extensions * CVE-2026-78966: Externally controlled reference in QUIC * CVE-2026-79186: Incorrect authorization in Network * CVE-2026-79267: Race condition in Workers * CVE-2026-79016: Observable discrepancy in SVG * CVE-2026-79010: Operation on a resource after expiration or release in Network * CVE-2026-79286: Missing authorization in CustomTabs * CVE-2026-78945: Use after free in Views * CVE-2026-78999: Improper privilege management in Navigation * CVE-2026-78941: Information leak in Core * CVE-2026-79032: Improper input validation in Network * CVE-2026-79109: Improper input validation in Printing * CVE-2026-79256: Externally controlled reference in WebView * CVE-2026-79237: Incorrect authorization in Navigation * CVE-2026-78898: Incorrect authorization in Downloads * CVE-2026-78985: Incorrect reference resolution in FileSystem * CVE-2026-79028: Observable discrepancy in Network * CVE-2026-79210: Use after free in Audio * CVE-2026-79046: Race condition in Permissions * CVE-2026-79129: Use after free in Sessions * CVE-2026-78937: Use after free in Search * CVE-2026-78987: Information leak in Canvas * CVE-2026-78990: Use after free in Compositing * CVE-2026-78909: Use after free in Views * CVE-2026-79271: Information leak in DOM * CVE-2026-79144: Information leak in Skia * CVE-2026-79065: Improper input validation in Network * CVE-2026-79192: Improper input validation in Variations * CVE-2026-79140: Use after free in Views * CVE-2026-79128: Use after free in Views * CVE-2026-78942: Incorrect reference resolution in Loader * CVE-2026-79116: Missing authorization in Viz * CVE-2026-79006: Protection mechanism failure in HttpsUpgrades * CVE-2026-79095: Information leak in Payments * CVE-2026-79084: Inadequate encryption strength in Notifications * CVE-2026-78991: Race condition in WebProtect * CVE-2026-79248: Incorrect authorization in Input * CVE-2026-78891: Buffer overflow in WebRTC * CVE-2026-79031: Improper resource exposure in Preload * CVE-2026-79110: Missing authorization in Preload * CVE-2026-79136: Incorrect authorization in ServiceWorker * CVE-2026-78907: Incorrect authorization in WebProtect * CVE-2026-79087: Injection in Chrome Tabs * CVE-2026-79231: Buffer overflow in Media * CVE-2026-78969: Uninitialized resource in Video * CVE-2026-79137: Incorrect authorization in Extensions * CVE-2026-79057: Race condition in Start * CVE-2026-78894: Race condition in Payments * CVE-2026-79264: Incorrect reference resolution in Preload * CVE-2026-78910: Buffer overflow in V8 * CVE-2026-79066: Improper input validation in Navigation * CVE-2026-79255: Improper input validation in WebRTC * CVE-2026-79086: Missing authorization in CustomTabs * CVE-2026-79038: Incorrect authorization in WebProtect * CVE-2026-78940: Improper initialization in Network * CVE-2026-79107: Incorrect authorization in TabGroups * CVE-2026-79120: Uninitialized resource in ANGLE * CVE-2026-79270: Uninitialized resource in ANGLE * CVE-2026-79067: Missing authorization in Network * CVE-2026-79213: Incorrect authorization in WebAppInstalls * CVE-2026-78943: Improper input validation in Editing * CVE-2026-79259: Improper input validation in Safebrowsing * CVE-2026-79208: Missing authorization in HTTP2 * CVE-2026-79251: Improper input validation in Network * CVE-2026-79226: Improper privilege management in Regional Capabilities * CVE-2026-79042: Missing authorization in Payments * CVE-2026-79122: Informa

Fix available

Published

2026-09-01T06:30:12Z

Updated

2026-09-02T18:00:03.655961852Z

Stack: system

Check your server →