openSUSE-SU-2026:20422-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20422-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20422-1
Upstream
CVE (26)
  • CVE-2026-4439
  • CVE-2026-4440
  • CVE-2026-4441
  • CVE-2026-4442
  • CVE-2026-4443
  • CVE-2026-4444
  • CVE-2026-4445
  • CVE-2026-4446
  • CVE-2026-4447
  • CVE-2026-4448
  • CVE-2026-4449
  • CVE-2026-4450
  • CVE-2026-4451
  • CVE-2026-4452
  • CVE-2026-4453
  • CVE-2026-4454
  • CVE-2026-4455
  • CVE-2026-4456
  • CVE-2026-4457
  • CVE-2026-4458
  • CVE-2026-4459
  • CVE-2026-4460
  • CVE-2026-4461
  • CVE-2026-4462
  • CVE-2026-4463
  • CVE-2026-4464
Related
CVE (26)
  • CVE-2026-4439
  • CVE-2026-4440
  • CVE-2026-4441
  • CVE-2026-4442
  • CVE-2026-4443
  • CVE-2026-4444
  • CVE-2026-4445
  • CVE-2026-4446
  • CVE-2026-4447
  • CVE-2026-4448
  • CVE-2026-4449
  • CVE-2026-4450
  • CVE-2026-4451
  • CVE-2026-4452
  • CVE-2026-4453
  • CVE-2026-4454
  • CVE-2026-4455
  • CVE-2026-4456
  • CVE-2026-4457
  • CVE-2026-4458
  • CVE-2026-4459
  • CVE-2026-4460
  • CVE-2026-4461
  • CVE-2026-4462
  • CVE-2026-4463
  • CVE-2026-4464
Withdrawn
2026-09-02T14:00:15Z
Published
2026-03-24T07:22:02Z
Modified
2026-09-02T14:00:15Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 146.0.7680.153 (boo#1259964):
    • CVE-2026-4439: Out of bounds memory access in WebGL
    • CVE-2026-4440: Out of bounds read and write in WebGL
    • CVE-2026-4441: Use after free in Base
    • CVE-2026-4442: Heap buffer overflow in CSS
    • CVE-2026-4443: Heap buffer overflow in WebAudio
    • CVE-2026-4444: Stack buffer overflow in WebRTC
    • CVE-2026-4445: Use after free in WebRTC
    • CVE-2026-4446: Use after free in WebRTC
    • CVE-2026-4447: Inappropriate implementation in V8
    • CVE-2026-4448: Heap buffer overflow in ANGLE
    • CVE-2026-4449: Use after free in Blink
    • CVE-2026-4450: Out of bounds write in V8
    • CVE-2026-4451: Insufficient validation of untrusted input in Navigation
    • CVE-2026-4452: Integer overflow in ANGLE
    • CVE-2026-4453: Integer overflow in Dawn
    • CVE-2026-4454: Use after free in Network
    • CVE-2026-4455: Heap buffer overflow in PDFium
    • CVE-2026-4456: Use after free in Digital Credentials API
    • CVE-2026-4457: Type Confusion in V8
    • CVE-2026-4458: Use after free in Extensions
    • CVE-2026-4459: Out of bounds read and write in WebAudio
    • CVE-2026-4460: Out of bounds read in Skia
    • CVE-2026-4461: Inappropriate implementation in V8
    • CVE-2026-4462: Out of bounds read in Blink
    • CVE-2026-4463: Heap buffer overflow in WebRTC
    • CVE-2026-4464: Integer overflow in ANGLE
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
146.0.7680.153-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "146.0.7680.153-bp160.1.1",
            "chromium":  "146.0.7680.153-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20422-1.json"