openSUSE-SU-2026:21921-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21921-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21921-1
Upstream
CVE (288)
  • CVE-2026-87429
  • CVE-2026-87430
  • CVE-2026-87431
  • CVE-2026-87432
  • CVE-2026-87433
  • CVE-2026-87434
  • CVE-2026-87435
  • CVE-2026-87436
  • CVE-2026-87437
  • CVE-2026-87438
  • CVE-2026-87439
  • CVE-2026-87440
  • CVE-2026-87441
  • CVE-2026-87442
  • CVE-2026-87443
  • CVE-2026-87444
  • CVE-2026-87445
  • CVE-2026-87446
  • CVE-2026-87447
  • CVE-2026-87448
  • CVE-2026-87449
  • CVE-2026-87450
  • CVE-2026-87451
  • CVE-2026-87452
  • CVE-2026-87453
  • CVE-2026-87454
  • CVE-2026-87455
  • CVE-2026-87456
  • CVE-2026-87457
  • CVE-2026-87458
  • CVE-2026-87459
  • CVE-2026-87460
  • CVE-2026-87461
  • CVE-2026-87462
  • CVE-2026-87463
  • CVE-2026-87464
  • CVE-2026-87465
  • CVE-2026-87466
  • CVE-2026-87467
  • CVE-2026-87468
  • CVE-2026-87469
  • CVE-2026-87470
  • CVE-2026-87471
  • CVE-2026-87472
  • CVE-2026-87473
  • CVE-2026-87474
  • CVE-2026-87475
  • CVE-2026-87476
  • CVE-2026-87477
  • CVE-2026-87478
  • CVE-2026-87479
  • CVE-2026-87480
  • CVE-2026-87481
  • CVE-2026-87482
  • CVE-2026-87483
  • CVE-2026-87484
  • CVE-2026-87485
  • CVE-2026-87486
  • CVE-2026-87487
  • CVE-2026-87488
  • CVE-2026-87489
  • CVE-2026-87490
  • CVE-2026-87491
  • CVE-2026-87492
  • CVE-2026-87493
  • CVE-2026-87494
  • CVE-2026-87495
  • CVE-2026-87496
  • CVE-2026-87497
  • CVE-2026-87498
  • CVE-2026-87499
  • CVE-2026-87500
  • CVE-2026-87501
  • CVE-2026-87502
  • CVE-2026-87503
  • CVE-2026-87504
  • CVE-2026-87505
  • CVE-2026-87506
  • CVE-2026-87507
  • CVE-2026-87508
  • CVE-2026-87509
  • CVE-2026-87510
  • CVE-2026-87511
  • CVE-2026-87512
  • CVE-2026-87513
  • CVE-2026-87514
  • CVE-2026-87515
  • CVE-2026-87516
  • CVE-2026-87517
  • CVE-2026-87518
  • CVE-2026-87519
  • CVE-2026-87520
  • CVE-2026-87521
  • CVE-2026-87522
  • CVE-2026-87523
  • CVE-2026-87524
  • CVE-2026-87525
  • CVE-2026-87526
  • CVE-2026-87527
  • CVE-2026-87528
  • CVE-2026-87529
  • CVE-2026-87530
  • CVE-2026-87531
  • CVE-2026-87532
  • CVE-2026-87533
  • CVE-2026-87534
  • CVE-2026-87535
  • CVE-2026-87536
  • CVE-2026-87537
  • CVE-2026-87538
  • CVE-2026-87539
  • CVE-2026-87540
  • CVE-2026-87541
  • CVE-2026-87542
  • CVE-2026-87543
  • CVE-2026-87544
  • CVE-2026-87545
  • CVE-2026-87546
  • CVE-2026-87547
  • CVE-2026-87548
  • CVE-2026-87549
  • CVE-2026-87550
  • CVE-2026-87551
  • CVE-2026-87552
  • CVE-2026-87553
  • CVE-2026-87554
  • CVE-2026-87555
  • CVE-2026-87556
  • CVE-2026-87557
  • CVE-2026-87558
  • CVE-2026-87559
  • CVE-2026-87560
  • CVE-2026-87561
  • CVE-2026-87562
  • CVE-2026-87563
  • CVE-2026-87564
  • CVE-2026-87565
  • CVE-2026-87566
  • CVE-2026-87567
  • CVE-2026-87568
  • CVE-2026-87569
  • CVE-2026-87570
  • CVE-2026-87571
  • CVE-2026-87572
  • CVE-2026-87573
  • CVE-2026-87574
  • CVE-2026-87575
  • CVE-2026-87576
  • CVE-2026-87577
  • CVE-2026-87578
  • CVE-2026-87579
  • CVE-2026-87580
  • CVE-2026-87581
  • CVE-2026-87582
  • CVE-2026-87583
  • CVE-2026-87584
  • CVE-2026-87585
  • CVE-2026-87586
  • CVE-2026-87587
  • CVE-2026-87588
  • CVE-2026-87589
  • CVE-2026-87590
  • CVE-2026-87591
  • CVE-2026-87592
  • CVE-2026-87593
  • CVE-2026-87594
  • CVE-2026-87595
  • CVE-2026-87596
  • CVE-2026-87597
  • CVE-2026-87598
  • CVE-2026-87599
  • CVE-2026-87600
  • CVE-2026-87601
  • CVE-2026-87602
  • CVE-2026-87603
  • CVE-2026-87604
  • CVE-2026-87605
  • CVE-2026-87606
  • CVE-2026-87607
  • CVE-2026-87608
  • CVE-2026-87609
  • CVE-2026-87610
  • CVE-2026-87611
  • CVE-2026-87612
  • CVE-2026-87613
  • CVE-2026-87614
  • CVE-2026-87615
  • CVE-2026-87616
  • CVE-2026-87617
  • CVE-2026-87618
  • CVE-2026-87619
  • CVE-2026-87620
  • CVE-2026-87621
  • CVE-2026-87622
  • CVE-2026-87623
  • CVE-2026-87624
  • CVE-2026-87625
  • CVE-2026-87626
  • CVE-2026-87627
  • CVE-2026-87628
  • CVE-2026-87629
  • CVE-2026-87630
  • CVE-2026-87631
  • CVE-2026-87632
  • CVE-2026-87633
  • CVE-2026-87634
  • CVE-2026-87635
  • CVE-2026-87636
  • CVE-2026-87637
  • CVE-2026-87638
  • CVE-2026-87639
  • CVE-2026-87640
  • CVE-2026-87641
  • CVE-2026-87642
  • CVE-2026-87643
  • CVE-2026-87644
  • CVE-2026-87645
  • CVE-2026-87646
  • CVE-2026-87647
  • CVE-2026-87648
  • CVE-2026-87649
  • CVE-2026-87650
  • CVE-2026-87651
  • CVE-2026-87652
  • CVE-2026-87653
  • CVE-2026-87654
  • CVE-2026-87655
  • CVE-2026-87656
  • CVE-2026-87657
  • CVE-2026-87658
  • CVE-2026-91708
  • CVE-2026-91709
  • CVE-2026-91710
  • CVE-2026-91711
  • CVE-2026-91712
  • CVE-2026-91713
  • CVE-2026-91714
  • CVE-2026-91715
  • CVE-2026-91716
  • CVE-2026-91717
  • CVE-2026-91718
  • CVE-2026-91719
  • CVE-2026-91720
  • CVE-2026-91721
  • CVE-2026-91722
  • CVE-2026-91723
  • CVE-2026-91724
  • CVE-2026-91725
  • CVE-2026-91726
  • CVE-2026-91727
  • CVE-2026-91728
  • CVE-2026-91729
  • CVE-2026-91730
  • CVE-2026-91731
  • CVE-2026-91732
  • CVE-2026-91733
  • CVE-2026-91734
  • CVE-2026-91735
  • CVE-2026-91736
  • CVE-2026-91737
  • CVE-2026-91738
  • CVE-2026-91739
  • CVE-2026-91740
  • CVE-2026-91741
  • CVE-2026-91742
  • CVE-2026-91743
  • CVE-2026-91744
  • CVE-2026-91745
  • CVE-2026-91746
  • CVE-2026-91747
  • CVE-2026-91748
  • CVE-2026-91749
  • CVE-2026-93372
  • CVE-2026-93373
  • CVE-2026-93374
  • CVE-2026-93375
  • CVE-2026-93376
  • CVE-2026-93377
  • CVE-2026-93378
  • CVE-2026-93379
  • CVE-2026-93380
  • CVE-2026-93381
  • CVE-2026-93382
  • CVE-2026-93383
  • CVE-2026-93384
  • CVE-2026-93385
  • CVE-2026-93386
  • CVE-2026-93387
Related
Published
2026-10-28T07:48:31Z
Modified
2026-11-01T17:28:13Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 153.0.8010.52 (boo#1281123):

    • CVE-2026-93374: Use after free in Dawn
    • CVE-2026-93372: Buffer overflow in WebGL
    • CVE-2026-93375: Incorrect reference resolution in Tracing
    • CVE-2026-93382: Use after free in PDFium
    • CVE-2026-93387: Improper state validation in Skia
    • CVE-2026-93373: Use after free in Extensions
    • CVE-2026-93381: Buffer overflow in PDFium
    • CVE-2026-93379: Incorrect authorization in ORB
    • CVE-2026-93377: Type confusion in V8
    • CVE-2026-93380: Race condition in FileSystem
    • CVE-2026-93384: Server-side request forgery in Omnibox
    • CVE-2026-93383: Information leak in Permissions
    • CVE-2026-93376: Out of bounds read in DataTransfer
    • CVE-2026-93378: Missing authorization in Storage
    • CVE-2026-93385: Information leak in Paint
    • CVE-2026-93386: UI misrepresentation in WebAppInstalls
  • Chromium 153.0.8010.47 (boo#1280687):

    • CVE-2026-91726: Out of bounds read in WebGL
    • CVE-2026-91721: Use after free in Internals
    • CVE-2026-91749: Use after free in Workers
    • CVE-2026-91724: Use after free in Input
    • CVE-2026-91728: Integer overflow in V8
    • CVE-2026-91734: Incorrect authorization in Core
    • CVE-2026-91727: Incorrect reference resolution in Extensions
    • CVE-2026-91743: Race condition in Core
    • CVE-2026-91744: Race condition in PlatformIntegration
    • CVE-2026-91712: Race condition in Extensions
    • CVE-2026-91748: Race condition in Extensions
    • CVE-2026-91720: Uninitialized resource in ANGLE
    • CVE-2026-91731: Type confusion in Compositing
    • CVE-2026-91747: Use after free in Skia
    • CVE-2026-91733: Improper state validation in Skia
    • CVE-2026-91741: Type confusion in CacheStorage
    • CVE-2026-91709: Type confusion in ServiceWorker
    • CVE-2026-91717: Missing authorization in Android
    • CVE-2026-91735: Incorrect authorization in WebUI
    • CVE-2026-91708: Race condition in Network
    • CVE-2026-91736: Use after free in DOM
    • CVE-2026-91740: Uninitialized resource in Skia
    • CVE-2026-91710: Use after free in WebAppInstalls
    • CVE-2026-91718: Use after free in Core
    • CVE-2026-91716: Use after free in Auth
    • CVE-2026-91746: Integer overflow in Compositing
    • CVE-2026-91729: Use after free in DigitalCredentials
    • CVE-2026-91737: Use after free in PDF
    • CVE-2026-91711: Out of bounds write in ServiceWorker
    • CVE-2026-91715: Type confusion in ServiceWorker
    • CVE-2026-91745: Use after free in V8
    • CVE-2026-91723: Race condition in WebAppInstalls
    • CVE-2026-91732: Missing authorization in AppManifest
    • CVE-2026-91742: Confused deputy in PriceTracking
    • CVE-2026-91714: Observable discrepancy in Fonts
    • CVE-2026-91725: Observable discrepancy in CSS
    • CVE-2026-91739: Missing authorization in Transactions Platform
    • CVE-2026-91713: Missing authorization in Browser
    • CVE-2026-91738: Improper input validation in ANGLE
    • CVE-2026-91730: Incomplete cleanup in GetUserMedia
    • CVE-2026-91722: Use after free in Input
    • CVE-2026-91719: Code injection in XML
  • Chromium 153.0.8010.36 (boo#1279840):

    • CVE-2026-87464: Use after free in WebGL
    • CVE-2026-87488: Use after free in WebGL
    • CVE-2026-87438: Out of bounds write in WebGL
    • CVE-2026-87527: Buffer overflow in WebGL
    • CVE-2026-87628: Use after free in Cast
    • CVE-2026-87512: Use after free in ANGLE
    • CVE-2026-87585: Double free in PDFium
    • CVE-2026-87444: Memory corruption in Codecs
    • CVE-2026-87447: Incorrect authorization in Network
    • CVE-2026-87440: Out of bounds read in Media
    • CVE-2026-87633: Use after free in Views
    • CVE-2026-87525: Out of bounds read in Chromoting
    • CVE-2026-87578: Use after free in Receiver
    • CVE-2026-87517: Race condition in Mobile
    • CVE-2026-87524: Use after free in Core
    • CVE-2026-87569: Missing authorization in Views
    • CVE-2026-87554: Race condition in Chromoting
    • CVE-2026-87467: Race condition in Updater
    • CVE-2026-87492: Incorrect authorization in DevTools
    • CVE-2026-87520: Use after free in Dawn
    • CVE-2026-87514: Use after free in Views
    • CVE-2026-87650: Out of bounds read in WebGL
    • CVE-2026-87596: Out of bounds read in ANGLE
    • CVE-2026-87654: Buffer overflow in ANGLE
    • CVE-2026-87604: Out of bounds read in ANGLE
    • CVE-2026-87621: Out of bounds write in ANGLE
    • CVE-2026-87647: Uninitialized resource in GPU
    • CVE-2026-87646: Use after free in Web Authentication
    • CVE-2026-87500: Improper validation of array index in ANGLE
    • CVE-2026-87572: Injection in DevTools
    • CVE-2026-87460: Use after free in Platform
    • CVE-2026-87542: Use after free in Input
    • CVE-2026-87639: Use after free in WebPackaging
    • CVE-2026-87552: Missing authorization in TrustedWebActivities
    • CVE-2026-87651: Incorrect authorization in Paint
    • CVE-2026-87587: Use after free in V8
    • CVE-2026-87564: Type confusion in V8
    • CVE-2026-87498: Missing authorization in WebUI
    • CVE-2026-87499: Incorrect authorization in Network
    • CVE-2026-87607: Use after free in Device
    • CVE-2026-87558: Use after free in Payments
    • CVE-2026-87581: Use after free in Payments
    • CVE-2026-87480: Use after free in Printing
    • CVE-2026-87612: Type confusion in V8
    • CVE-2026-87536: Use after free in V8
    • CVE-2026-87474: Use after free in Payments
    • CVE-2026-87504: Use after free in Core
    • CVE-2026-87640: Out of bounds read in WebView
    • CVE-2026-87491: Out of bounds write in V8
    • CVE-2026-87478: Observable discrepancy in Autofill
    • CVE-2026-87446: Incomplete cleanup in Extensions
    • CVE-2026-87657: Use after free in V8
    • CVE-2026-87434: Missing authorization in CORS
    • CVE-2026-87487: Missing authorization in FileSystem
    • CVE-2026-87453: Confused deputy in BackgroundFetch
    • CVE-2026-87588: Use after free in Chromecast
    • CVE-2026-87636: Type confusion in XML
    • CVE-2026-87611: Missing authorization in FileSystem
    • CVE-2026-87606: Missing authorization in SiteIsolation
    • CVE-2026-87456: Uninitialized resource in Media
    • CVE-2026-87553: Improper input validation in SiteIsolation
    • CVE-2026-87658: Information leak in Extensions
    • CVE-2026-87465: Incorrect authorization in Downloads
    • CVE-2026-87515: Incorrect authorization in FileAPI
    • CVE-2026-87547: Incorrect reference resolution in FileSystem
    • CVE-2026-87442: Confused deputy in Prerender
    • CVE-2026-87506: Privilege elevation in WebUI
    • CVE-2026-87433: Race condition in FileAPI
    • CVE-2026-87557: Missing authorization in LocalNetworkAccess
    • CVE-2026-87457: Race condition in Updater
    • CVE-2026-87503: Inappropriate implementation in Downloads
    • CVE-2026-87481: Incorrect authorization in WebView
    • CVE-2026-87537: Missing authorization in Extensions
    • CVE-2026-87471: Incorrect authorization in ServiceWorker
    • CVE-2026-87485: Incorrect authorization in CORS
    • CVE-2026-87652: Incorrect authorization in PushAPI
    • CVE-2026-87582: Confused deputy in DataTransfer
    • CVE-2026-87466: Incorrect authorization in Workers
    • CVE-2026-87603: Missing authorization in FileSystem
    • CVE-2026-87615: Race condition in Payments
    • CVE-2026-87642: Uninitialized resource in WebGL
    • CVE-2026-87577: Incorrect authorization in Isolated
    • CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials
    • CVE-2026-87613: Incorrect reference resolution in Extensions
    • CVE-2026-87645: Improper state validation in Safebrowsing
    • CVE-2026-87443: Missing authorization in Actor
    • CVE-2026-87630: Integer overflow in WebRTC
    • CVE-2026-87590: Improper input validation in Passwords
    • CVE-2026-87580: Incorrect authorization in WebAppInstalls
    • CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades
    • CVE-2026-87497: Uninitialized resource in Codecs
    • CVE-2026-87579: Buffer overflow in WebRTC
    • CVE-2026-87576: Uninitialized resource in GPU
    • CVE-2026-87476: Incorrect authorization in Loader
    • CVE-2026-87475: Missing authorization in Omnibox
    • CVE-2026-87436: Incomplete cleanup in Browser
    • CVE-2026-87479: Insufficient policy enforcement in Extensions
    • CVE-2026-87513: Missing authorization in ControlledFrame
    • CVE-2026-87432: Incorrect authorization in Navigation
    • CVE-2026-87560: Missing authorization in Browser
    • CVE-2026-87521: Information leak in WebMCP
    • CVE-2026-87539: Observable discrepancy in Network
    • CVE-2026-87648: Use after free in ANGLE
    • CVE-2026-87534: Missing authorization in WebView
    • CVE-2026-87562: Incorrect reference resolution in Accessibility
    • CVE-2026-87556: Missing authorization in Browser
    • CVE-2026-87508: Incorrect authorization in Loader
    • CVE-2026-87643: Integer overflow in GPU
    • CVE-2026-87573: Improper input validation in Network
    • CVE-2026-87548: Improper state validation in Installer
    • CVE-2026-87501: UI misrepresentation in Passwords
    • CVE-2026-87452: Incorrect authorization in GPU
    • CVE-2026-87516: Observable discrepancy in Navigation
    • CVE-2026-87599: Improper input validation in Interstitials
    • CVE-2026-87507: UI misrepresentation in Downloads
    • CVE-2026-87559: UI misrepresentation in UI
    • CVE-2026-87472: Improper input validation in FedCM
    • CVE-2026-87486: Clickjacking in TrustedWebActivities
    • CVE-2026-87655: Clickjacking in Downloads
    • CVE-2026-87462: UI misrepresentation in FedCM
    • CVE-2026-87649: UI misrepresentation in Downloads
    • CVE-2026-87445: UI misrepresentation in Session
    • CVE-2026-87567: UI misrepresentation in UrlFormatting
    • CVE-2026-87496: UI misrepresentation in Browser
    • CVE-2026-87441: Missing authorization in Downloads
    • CVE-2026-87549: Incomplete cleanup in Downloads
    • CVE-2026-87458: UI misrepresentation in Geometry
    • CVE-2026-87574: Information leak in ServiceWorker
    • CVE-2026-87495: Information leak in Scroll
    • CVE-2026-87541: Information leak in Navigation
    • CVE-2026-87451: Information leak in Downloads
    • CVE-2026-87570: Incorrect authorization in SiteIsolation
    • CVE-2026-87555: Uninitialized resource in GPU
    • CVE-2026-87600: Improper input validation in Safebrowsing
    • CVE-2026-87532: Improper state validation in Safebrowsing
    • CVE-2026-87439: Information leak in ServiceWorker
    • CVE-2026-87450: Incorrect authorization in Permissions
    • CVE-2026-87505: Incorrect authorization in FileSystem
    • CVE-2026-87622: Missing authorization in FedCM
    • CVE-2026-87540: Incorrect authorization in Isolated
    • CVE-2026-87594: Incorrect authorization in DataTransfer
    • CVE-2026-87518: Observable discrepancy in Safebrowsing
    • CVE-2026-87589: Incorrect authorization in SiteIsolation
    • CVE-2026-87484: UI misrepresentation in Geometry
    • CVE-2026-87530: Uncontrolled search path element in CredentialProvider
    • CVE-2026-87550: Improper encoding or escaping of output in CSS
    • CVE-2026-87494: Use after free in Browser
    • CVE-2026-87483: Incorrect authorization in Browser
    • CVE-2026-87454: Information leak in Enterprise
    • CVE-2026-87616: Improper initialization in Views
    • CVE-2026-87535: Information loss or omission in Safebrowsing
    • CVE-2026-87644: Incorrect authorization in Views
    • CVE-2026-87533: Use after free in DevTools
    • CVE-2026-87635: UI misrepresentation in Payments
    • CVE-2026-87641: Race condition in Browser
    • CVE-2026-87431: Missing authorization in Extensions
    • CVE-2026-87493: Missing authorization in FileSystem
    • CVE-2026-87625: Use after free in V8
    • CVE-2026-87468: Incorrect authorization in Isolated
    • CVE-2026-87563: Origin validation error in Paint
    • CVE-2026-87510: Improper input validation in FileAPI
    • CVE-2026-87435: Information leak in ControlledFrame
    • CVE-2026-87531: Information leak in CORS
    • CVE-2026-87637: Use after free in Extensions
    • CVE-2026-87529: Numeric truncation error in Media
    • CVE-2026-87470: Improper quantity validation in Tint
    • CVE-2026-87586: Out of bounds read in ANGLE
    • CVE-2026-87584: Incorrect authorization in WebUI
    • CVE-2026-87632: Cross-site scripting in SanitizerAPI
    • CVE-2026-87528: Type confusion in Rust
    • CVE-2026-87623: Observable discrepancy in DOM
    • CVE-2026-87566: Observable discrepancy in Layout
    • CVE-2026-87638: Out of bounds write in Media
    • CVE-2026-87455: Use after free in Aura
    • CVE-2026-87591: Incorrect authorization in Extensions
    • CVE-2026-87526: Use after free in Passwords
    • CVE-2026-87609: Use after free in Sharing
    • CVE-2026-87610: Incorrect authorization in Omnibox
    • CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials
    • CVE-2026-87629: Incorrect authorization in Sources
    • CVE-2026-87653: UI misrepresentation in FullScreen
    • CVE-2026-87634: Use after free in WebPackaging
    • CVE-2026-87429: Missing authorization in ServiceWorker
    • CVE-2026-87618: Incorrect reference resolution in Storage
    • CVE-2026-87614: Incorrect authorization in ServiceWorker
    • CVE-2026-87619: Observable discrepancy in Prefetch
    • CVE-2026-87561: Incorrect authorization in Web Authentication
    • CVE-2026-87598: Incorrect authorization in ServiceWorker
    • CVE-2026-87519: Incorrect authorization in Safebrowsing
    • CVE-2026-87543: Missing authorization in Core
    • CVE-2026-87522: Missing authorization in WebView
    • CVE-2026-87568: Improper input validation in Chromium
    • CVE-2026-87656: Improper state validation in Safebrowsing
    • CVE-2026-87511: Missing authorization in DevTools
    • CVE-2026-87627: Interpretation conflict in Safebrowsing
    • CVE-2026-87595: Server-side request forgery in Mobile
    • CVE-2026-87592: Out of bounds read in Tint
    • CVE-2026-87620: Observable discrepancy in SVG
    • CVE-2026-87502: Confused deputy in Fullscreen
    • CVE-2026-87448: Use after free in DevTools
    • CVE-2026-87459: Observable discrepancy in Select
    • CVE-2026-87463: Incorrect authorization in Certificate
    • CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing
    • CVE-2026-87538: Clickjacking in Input
    • CVE-2026-87545: Information leak in Mobile
    • CVE-2026-87617: Use after free in DevTools
    • CVE-2026-87523: Race condition in DataTransfer
    • CVE-2026-87565: Information leak in Passwords
    • CVE-2026-87597: UI misrepresentation in CustomTabs
    • CVE-2026-87624: UI misrepresentation in Passwords
    • CVE-2026-87605: Missing authorization in Contacts
    • CVE-2026-87490: Information leak in Transactions Platform
    • CVE-2026-87583: UI misrepresentation in Passwords
    • CVE-2026-87509: Incorrect authorization in Updater
    • CVE-2026-87473: Incorrect authorization in FileHandling
    • CVE-2026-87461: Information leak in Core
    • CVE-2026-87631: Missing authorization in DOM
    • CVE-2026-87469: Improper input validation in Extensions
    • CVE-2026-87489: Memory corruption in V8
    • CVE-2026-87575: Incorrect authorization in Loader
    • CVE-2026-87571: Improper certificate validation in Loader
    • CVE-2026-87477: Information leak in Core
    • CVE-2026-87551: Improper certificate validation in CORS
    • CVE-2026-87608: Improper certificate validation in FedCM
    • CVE-2026-87437: Information leak in Frames
    • CVE-2026-87602: Out of bounds read in ANGLE
    • CVE-2026-87601: Race condition in V8
    • CVE-2026-87544: Incorrect authorization in Extensions
    • CVE-2026-87430: Buffer overflow in WebRTC
    • CVE-2026-87593: Information leak in Editing
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
153.0.8010.52-bp160.1.1

Ecosystem specific

{
    "binaries": [
        {
            "chromedriver": "153.0.8010.52-bp160.1.1",
            "chromium": "153.0.8010.52-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21921-1.json"