openSUSE-SU-2026:20460-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20460-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20460-1
Upstream
CVE (86)
Related
CVE (86)
Published
2026-08-31T08:40:11Z
Modified
2026-09-02T11:26:18Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 146.0.7680.177 (boo#1261249)

    • CVE-2026-5273: Use after free in CSS
    • CVE-2026-5272: Heap buffer overflow in GPU
    • CVE-2026-5274: Integer overflow in Codecs
    • CVE-2026-5275: Heap buffer overflow in ANGLE
    • CVE-2026-5276: Insufficient policy enforcement in WebUSB
    • CVE-2026-5277: Integer overflow in ANGLE
    • CVE-2026-5278: Use after free in Web MIDI
    • CVE-2026-5279: Object corruption in V8
    • CVE-2026-5280: Use after free in WebCodecs
    • CVE-2026-5281: Use after free in Dawn
    • CVE-2026-5282: Out of bounds read in WebCodecs
    • CVE-2026-5283: Inappropriate implementation in ANGLE
    • CVE-2026-5284: Use after free in Dawn
    • CVE-2026-5285: Use after free in WebGL
    • CVE-2026-5286: Use after free in Dawn
    • CVE-2026-5287: Use after free in PDF
    • CVE-2026-5288: Use after free in WebView
    • CVE-2026-5289: Use after free in Navigation
    • CVE-2026-5290: Use after free in Compositing
    • CVE-2026-5291: Inappropriate implementation in WebGL
    • CVE-2026-5292: Out of bounds read in WebCodecs

  • Chromium 146.0.7680.164 (boo#1260376)

    • CVE-2026-4673: Heap buffer overflow in WebAudio
    • CVE-2026-4674: Out of bounds read in CSS
    • CVE-2026-4675: Heap buffer overflow in WebGL
    • CVE-2026-4676: Use after free in Dawn
    • CVE-2026-4677: Out of bounds read in WebAudio
    • CVE-2026-4678: Use after free in WebGPU
    • CVE-2026-4679: Integer overflow in Fonts
    • CVE-2026-4680: Use after free in FedCM

  • Chromium 146.0.7680.153 (boo#1259964):

    • CVE-2026-4439: Out of bounds memory access in WebGL
    • CVE-2026-4440: Out of bounds read and write in WebGL
    • CVE-2026-4441: Use after free in Base
    • CVE-2026-4442: Heap buffer overflow in CSS
    • CVE-2026-4443: Heap buffer overflow in WebAudio
    • CVE-2026-4444: Stack buffer overflow in WebRTC
    • CVE-2026-4445: Use after free in WebRTC
    • CVE-2026-4446: Use after free in WebRTC
    • CVE-2026-4447: Inappropriate implementation in V8
    • CVE-2026-4448: Heap buffer overflow in ANGLE
    • CVE-2026-4449: Use after free in Blink
    • CVE-2026-4450: Out of bounds write in V8
    • CVE-2026-4451: Insufficient validation of untrusted input in Navigation
    • CVE-2026-4452: Integer overflow in ANGLE
    • CVE-2026-4453: Integer overflow in Dawn
    • CVE-2026-4454: Use after free in Network
    • CVE-2026-4455: Heap buffer overflow in PDFium
    • CVE-2026-4456: Use after free in Digital Credentials API
    • CVE-2026-4457: Type Confusion in V8
    • CVE-2026-4458: Use after free in Extensions
    • CVE-2026-4459: Out of bounds read and write in WebAudio
    • CVE-2026-4460: Out of bounds read in Skia
    • CVE-2026-4461: Inappropriate implementation in V8
    • CVE-2026-4462: Out of bounds read in Blink
    • CVE-2026-4463: Heap buffer overflow in WebRTC
    • CVE-2026-4464: Integer overflow in ANGLE

  • Chromium 146.0.7680.80:

    • CVE-2026-3909: Out of bounds write in Skia (boo#1259659)

  • Chromium 146.0.7680.75 (released 2026-03-12) (boo#1259648)

    • CVE-2026-3910: Inappropriate implementation in V8.

  • Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)

    • CVE-2026-3913: Heap buffer overflow in WebML
    • CVE-2026-3914: Integer overflow in WebML
    • CVE-2026-3915: Heap buffer overflow in WebML
    • CVE-2026-3916: Out of bounds read in Web Speech
    • CVE-2026-3917: Use after free in Agents
    • CVE-2026-3918: Use after free in WebMCP
    • CVE-2026-3919: Use after free in Extensions
    • CVE-2026-3920: Out of bounds memory access in WebML
    • CVE-2026-3921: Use after free in TextEncoding
    • CVE-2026-3922: Use after free in MediaStream
    • CVE-2026-3923: Use after free in WebMIDI
    • CVE-2026-3924: Use after free in WindowDialog
    • CVE-2026-3925: Incorrect security UI in LookalikeChecks
    • CVE-2026-3926: Out of bounds read in V8
    • CVE-2026-3927: Incorrect security UI in PictureInPicture
    • CVE-2026-3928: Insufficient policy enforcement in Extensions
    • CVE-2026-3929: Side-channel information leakage in ResourceTiming
    • CVE-2026-3930: Unsafe navigation in Navigation
    • CVE-2026-3931: Heap buffer overflow in Skia
    • CVE-2026-3932: Insufficient policy enforcement in PDF
    • CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
    • CVE-2026-3935: Incorrect security UI in WebAppInstalls
    • CVE-2026-3936: Use after free in WebView
    • CVE-2026-3937: Incorrect security UI in Downloads
    • CVE-2026-3938: Insufficient policy enforcement in Clipboard
    • CVE-2026-3939: Insufficient policy enforcement in PDF
    • CVE-2026-3940: Insufficient policy enforcement in DevTools
    • CVE-2026-3941: Insufficient policy enforcement in DevTools
    • CVE-2026-3942: Incorrect security UI in PictureInPicture
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
146.0.7680.177-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "146.0.7680.177-bp160.1.1",
            "chromium":  "146.0.7680.177-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20460-1.json"