openSUSE-SU-2026:20372-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20372-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20372-1
Upstream
CVE (31)
Related
CVE (31)
Withdrawn
2026-09-02T14:00:14Z
Published
2026-03-17T10:11:02Z
Modified
2026-09-02T14:00:14Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 146.0.7680.80: * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)

  • Chromium 146.0.7680.75 (released 2026-03-12) (boo#1259648)

    • CVE-2026-3910: Inappropriate implementation in V8.

  • Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)

    • CVE-2026-3913: Heap buffer overflow in WebML
    • CVE-2026-3914: Integer overflow in WebML
    • CVE-2026-3915: Heap buffer overflow in WebML
    • CVE-2026-3916: Out of bounds read in Web Speech
    • CVE-2026-3917: Use after free in Agents
    • CVE-2026-3918: Use after free in WebMCP
    • CVE-2026-3919: Use after free in Extensions
    • CVE-2026-3920: Out of bounds memory access in WebML
    • CVE-2026-3921: Use after free in TextEncoding
    • CVE-2026-3922: Use after free in MediaStream
    • CVE-2026-3923: Use after free in WebMIDI
    • CVE-2026-3924: Use after free in WindowDialog
    • CVE-2026-3925: Incorrect security UI in LookalikeChecks
    • CVE-2026-3926: Out of bounds read in V8
    • CVE-2026-3927: Incorrect security UI in PictureInPicture
    • CVE-2026-3928: Insufficient policy enforcement in Extensions
    • CVE-2026-3929: Side-channel information leakage in ResourceTiming
    • CVE-2026-3930: Unsafe navigation in Navigation
    • CVE-2026-3931: Heap buffer overflow in Skia
    • CVE-2026-3932: Insufficient policy enforcement in PDF
    • CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
    • CVE-2026-3935: Incorrect security UI in WebAppInstalls
    • CVE-2026-3936: Use after free in WebView
    • CVE-2026-3937: Incorrect security UI in Downloads
    • CVE-2026-3938: Insufficient policy enforcement in Clipboard
    • CVE-2026-3939: Insufficient policy enforcement in PDF
    • CVE-2026-3940: Insufficient policy enforcement in DevTools
    • CVE-2026-3941: Insufficient policy enforcement in DevTools
    • CVE-2026-3942: Incorrect security UI in PictureInPicture
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
146.0.7680.80-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "146.0.7680.80-bp160.1.1",
            "chromium":  "146.0.7680.80-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20372-1.json"