openSUSE-SU-2026:20588-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20588-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20588-1
Upstream
CVE (31)
  • CVE-2026-6296
  • CVE-2026-6297
  • CVE-2026-6298
  • CVE-2026-6299
  • CVE-2026-6300
  • CVE-2026-6301
  • CVE-2026-6302
  • CVE-2026-6303
  • CVE-2026-6304
  • CVE-2026-6305
  • CVE-2026-6306
  • CVE-2026-6307
  • CVE-2026-6308
  • CVE-2026-6309
  • CVE-2026-6310
  • CVE-2026-6311
  • CVE-2026-6312
  • CVE-2026-6313
  • CVE-2026-6314
  • CVE-2026-6315
  • CVE-2026-6316
  • CVE-2026-6317
  • CVE-2026-6318
  • CVE-2026-6319
  • CVE-2026-6358
  • CVE-2026-6359
  • CVE-2026-6360
  • CVE-2026-6361
  • CVE-2026-6362
  • CVE-2026-6363
  • CVE-2026-6364
Related
CVE (31)
  • CVE-2026-6296
  • CVE-2026-6297
  • CVE-2026-6298
  • CVE-2026-6299
  • CVE-2026-6300
  • CVE-2026-6301
  • CVE-2026-6302
  • CVE-2026-6303
  • CVE-2026-6304
  • CVE-2026-6305
  • CVE-2026-6306
  • CVE-2026-6307
  • CVE-2026-6308
  • CVE-2026-6309
  • CVE-2026-6310
  • CVE-2026-6311
  • CVE-2026-6312
  • CVE-2026-6313
  • CVE-2026-6314
  • CVE-2026-6315
  • CVE-2026-6316
  • CVE-2026-6317
  • CVE-2026-6318
  • CVE-2026-6319
  • CVE-2026-6358
  • CVE-2026-6359
  • CVE-2026-6360
  • CVE-2026-6361
  • CVE-2026-6362
  • CVE-2026-6363
  • CVE-2026-6364
Withdrawn
2026-09-02T14:00:15Z
Published
2026-04-18T08:01:34Z
Modified
2026-09-02T14:00:15Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 147.0.7727.101 (boo#1262174)
    • CVE-2026-6296: Heap buffer overflow in ANGLE
    • CVE-2026-6297: Use after free in Proxy
    • CVE-2026-6298: Heap buffer overflow in Skia
    • CVE-2026-6299: Use after free in Prerender
    • CVE-2026-6358: Use after free in XR
    • CVE-2026-6359: Use after free in Video
    • CVE-2026-6300: Use after free in CSS
    • CVE-2026-6301: Type Confusion in Turbofan
    • CVE-2026-6302: Use after free in Video
    • CVE-2026-6303: Use after free in Codecs
    • CVE-2026-6304: Use after free in Graphite
    • CVE-2026-6305: Heap buffer overflow in PDFium
    • CVE-2026-6306: Heap buffer overflow in PDFium
    • CVE-2026-6307: Type Confusion in Turbofan
    • CVE-2026-6308: Out of bounds read in Media
    • CVE-2026-6309: Use after free in Viz
    • CVE-2026-6360: Use after free in FileSystem
    • CVE-2026-6310: Use after free in Dawn
    • CVE-2026-6311: Uninitialized Use in Accessibility
    • CVE-2026-6312: Insufficient policy enforcement in Passwords
    • CVE-2026-6313: Insufficient policy enforcement in CORS
    • CVE-2026-6314: Out of bounds write in GPU
    • CVE-2026-6315: Use after free in Permissions
    • CVE-2026-6316: Use after free in Forms
    • CVE-2026-6361: Heap buffer overflow in PDFium
    • CVE-2026-6362: Use after free in Codecs
    • CVE-2026-6317: Use after free in Cast
    • CVE-2026-6363: Type Confusion in V8
    • CVE-2026-6318: Use after free in Codecs
    • CVE-2026-6319: Use after free in Payments
    • CVE-2026-6364: Out of bounds read in Skia
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
147.0.7727.101-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "147.0.7727.101-bp160.1.1",
            "chromium":  "147.0.7727.101-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20588-1.json"