openSUSE-SU-2026:20849-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20849-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20849-1
Upstream
CVE (373)
  • CVE-2026-10000
  • CVE-2026-10001
  • CVE-2026-10002
  • CVE-2026-10003
  • CVE-2026-10004
  • CVE-2026-10005
  • CVE-2026-10006
  • CVE-2026-10007
  • CVE-2026-10008
  • CVE-2026-10009
  • CVE-2026-10010
  • CVE-2026-10011
  • CVE-2026-10012
  • CVE-2026-10013
  • CVE-2026-10014
  • CVE-2026-10015
  • CVE-2026-10016
  • CVE-2026-10017
  • CVE-2026-10018
  • CVE-2026-10019
  • CVE-2026-10020
  • CVE-2026-10021
  • CVE-2026-10022
  • CVE-2026-7896
  • CVE-2026-7897
  • CVE-2026-7898
  • CVE-2026-7899
  • CVE-2026-7900
  • CVE-2026-7901
  • CVE-2026-7902
  • CVE-2026-7903
  • CVE-2026-7904
  • CVE-2026-7905
  • CVE-2026-7906
  • CVE-2026-7907
  • CVE-2026-7908
  • CVE-2026-7909
  • CVE-2026-7910
  • CVE-2026-7911
  • CVE-2026-7912
  • CVE-2026-7913
  • CVE-2026-7914
  • CVE-2026-7915
  • CVE-2026-7916
  • CVE-2026-7917
  • CVE-2026-7918
  • CVE-2026-7919
  • CVE-2026-7920
  • CVE-2026-7921
  • CVE-2026-7922
  • CVE-2026-7923
  • CVE-2026-7924
  • CVE-2026-7925
  • CVE-2026-7926
  • CVE-2026-7927
  • CVE-2026-7928
  • CVE-2026-7929
  • CVE-2026-7930
  • CVE-2026-7931
  • CVE-2026-7932
  • CVE-2026-7933
  • CVE-2026-7934
  • CVE-2026-7935
  • CVE-2026-7936
  • CVE-2026-7937
  • CVE-2026-7938
  • CVE-2026-7939
  • CVE-2026-7940
  • CVE-2026-7941
  • CVE-2026-7942
  • CVE-2026-7943
  • CVE-2026-7944
  • CVE-2026-7945
  • CVE-2026-7946
  • CVE-2026-7947
  • CVE-2026-7948
  • CVE-2026-7949
  • CVE-2026-7950
  • CVE-2026-7951
  • CVE-2026-7952
  • CVE-2026-7953
  • CVE-2026-7954
  • CVE-2026-7955
  • CVE-2026-7956
  • CVE-2026-7957
  • CVE-2026-7958
  • CVE-2026-7959
  • CVE-2026-7960
  • CVE-2026-7961
  • CVE-2026-7962
  • CVE-2026-7963
  • CVE-2026-7964
  • CVE-2026-7965
  • CVE-2026-7966
  • CVE-2026-7967
  • CVE-2026-7968
  • CVE-2026-7969
  • CVE-2026-7970
  • CVE-2026-7971
  • CVE-2026-7972
  • CVE-2026-7973
  • CVE-2026-7974
  • CVE-2026-7975
  • CVE-2026-7976
  • CVE-2026-7977
  • CVE-2026-7978
  • CVE-2026-7979
  • CVE-2026-7980
  • CVE-2026-7981
  • CVE-2026-7982
  • CVE-2026-7983
  • CVE-2026-7984
  • CVE-2026-7985
  • CVE-2026-7986
  • CVE-2026-7987
  • CVE-2026-7988
  • CVE-2026-7989
  • CVE-2026-7990
  • CVE-2026-7991
  • CVE-2026-7992
  • CVE-2026-7993
  • CVE-2026-7994
  • CVE-2026-7995
  • CVE-2026-7996
  • CVE-2026-7997
  • CVE-2026-7998
  • CVE-2026-7999
  • CVE-2026-8000
  • CVE-2026-8001
  • CVE-2026-8002
  • CVE-2026-8003
  • CVE-2026-8004
  • CVE-2026-8005
  • CVE-2026-8006
  • CVE-2026-8007
  • CVE-2026-8008
  • CVE-2026-8009
  • CVE-2026-8010
  • CVE-2026-8011
  • CVE-2026-8012
  • CVE-2026-8013
  • CVE-2026-8014
  • CVE-2026-8015
  • CVE-2026-8016
  • CVE-2026-8017
  • CVE-2026-8018
  • CVE-2026-8019
  • CVE-2026-8020
  • CVE-2026-8021
  • CVE-2026-8022
  • CVE-2026-8509
  • CVE-2026-8510
  • CVE-2026-8511
  • CVE-2026-8512
  • CVE-2026-8513
  • CVE-2026-8514
  • CVE-2026-8515
  • CVE-2026-8516
  • CVE-2026-8517
  • CVE-2026-8518
  • CVE-2026-8519
  • CVE-2026-8520
  • CVE-2026-8521
  • CVE-2026-8522
  • CVE-2026-8523
  • CVE-2026-8524
  • CVE-2026-8525
  • CVE-2026-8526
  • CVE-2026-8527
  • CVE-2026-8528
  • CVE-2026-8529
  • CVE-2026-8530
  • CVE-2026-8531
  • CVE-2026-8532
  • CVE-2026-8533
  • CVE-2026-8534
  • CVE-2026-8535
  • CVE-2026-8536
  • CVE-2026-8537
  • CVE-2026-8538
  • CVE-2026-8539
  • CVE-2026-8540
  • CVE-2026-8541
  • CVE-2026-8542
  • CVE-2026-8543
  • CVE-2026-8544
  • CVE-2026-8545
  • CVE-2026-8546
  • CVE-2026-8547
  • CVE-2026-8548
  • CVE-2026-8549
  • CVE-2026-8550
  • CVE-2026-8551
  • CVE-2026-8552
  • CVE-2026-8553
  • CVE-2026-8554
  • CVE-2026-8555
  • CVE-2026-8556
  • CVE-2026-8557
  • CVE-2026-8558
  • CVE-2026-8559
  • CVE-2026-8560
  • CVE-2026-8561
  • CVE-2026-8562
  • CVE-2026-8563
  • CVE-2026-8564
  • CVE-2026-8565
  • CVE-2026-8566
  • CVE-2026-8567
  • CVE-2026-8568
  • CVE-2026-8569
  • CVE-2026-8570
  • CVE-2026-8571
  • CVE-2026-8572
  • CVE-2026-8573
  • CVE-2026-8574
  • CVE-2026-8575
  • CVE-2026-8576
  • CVE-2026-8577
  • CVE-2026-8578
  • CVE-2026-8579
  • CVE-2026-8580
  • CVE-2026-8581
  • CVE-2026-8582
  • CVE-2026-8583
  • CVE-2026-8584
  • CVE-2026-8585
  • CVE-2026-8586
  • CVE-2026-8587
  • CVE-2026-9110
  • CVE-2026-9111
  • CVE-2026-9112
  • CVE-2026-9113
  • CVE-2026-9114
  • CVE-2026-9115
  • CVE-2026-9116
  • CVE-2026-9117
  • CVE-2026-9118
  • CVE-2026-9119
  • CVE-2026-9120
  • CVE-2026-9121
  • CVE-2026-9122
  • CVE-2026-9123
  • CVE-2026-9124
  • CVE-2026-9126
  • CVE-2026-9872
  • CVE-2026-9873
  • CVE-2026-9874
  • CVE-2026-9875
  • CVE-2026-9876
  • CVE-2026-9877
  • CVE-2026-9878
  • CVE-2026-9879
  • CVE-2026-9880
  • CVE-2026-9881
  • CVE-2026-9882
  • CVE-2026-9883
  • CVE-2026-9884
  • CVE-2026-9885
  • CVE-2026-9886
  • CVE-2026-9887
  • CVE-2026-9888
  • CVE-2026-9889
  • CVE-2026-9890
  • CVE-2026-9891
  • CVE-2026-9892
  • CVE-2026-9893
  • CVE-2026-9894
  • CVE-2026-9895
  • CVE-2026-9896
  • CVE-2026-9897
  • CVE-2026-9898
  • CVE-2026-9899
  • CVE-2026-9900
  • CVE-2026-9901
  • CVE-2026-9902
  • CVE-2026-9903
  • CVE-2026-9904
  • CVE-2026-9905
  • CVE-2026-9906
  • CVE-2026-9907
  • CVE-2026-9908
  • CVE-2026-9909
  • CVE-2026-9910
  • CVE-2026-9911
  • CVE-2026-9912
  • CVE-2026-9913
  • CVE-2026-9914
  • CVE-2026-9915
  • CVE-2026-9916
  • CVE-2026-9917
  • CVE-2026-9918
  • CVE-2026-9919
  • CVE-2026-9920
  • CVE-2026-9921
  • CVE-2026-9922
  • CVE-2026-9923
  • CVE-2026-9924
  • CVE-2026-9925
  • CVE-2026-9926
  • CVE-2026-9927
  • CVE-2026-9928
  • CVE-2026-9929
  • CVE-2026-9930
  • CVE-2026-9931
  • CVE-2026-9932
  • CVE-2026-9933
  • CVE-2026-9934
  • CVE-2026-9935
  • CVE-2026-9936
  • CVE-2026-9937
  • CVE-2026-9938
  • CVE-2026-9939
  • CVE-2026-9940
  • CVE-2026-9941
  • CVE-2026-9942
  • CVE-2026-9943
  • CVE-2026-9944
  • CVE-2026-9945
  • CVE-2026-9946
  • CVE-2026-9947
  • CVE-2026-9948
  • CVE-2026-9949
  • CVE-2026-9950
  • CVE-2026-9951
  • CVE-2026-9952
  • CVE-2026-9953
  • CVE-2026-9954
  • CVE-2026-9955
  • CVE-2026-9956
  • CVE-2026-9957
  • CVE-2026-9958
  • CVE-2026-9959
  • CVE-2026-9960
  • CVE-2026-9961
  • CVE-2026-9962
  • CVE-2026-9963
  • CVE-2026-9964
  • CVE-2026-9965
  • CVE-2026-9966
  • CVE-2026-9967
  • CVE-2026-9968
  • CVE-2026-9969
  • CVE-2026-9970
  • CVE-2026-9971
  • CVE-2026-9972
  • CVE-2026-9973
  • CVE-2026-9974
  • CVE-2026-9975
  • CVE-2026-9976
  • CVE-2026-9977
  • CVE-2026-9978
  • CVE-2026-9979
  • CVE-2026-9980
  • CVE-2026-9981
  • CVE-2026-9982
  • CVE-2026-9983
  • CVE-2026-9984
  • CVE-2026-9985
  • CVE-2026-9986
  • CVE-2026-9987
  • CVE-2026-9988
  • CVE-2026-9989
  • CVE-2026-9990
  • CVE-2026-9991
  • CVE-2026-9992
  • CVE-2026-9993
  • CVE-2026-9994
  • CVE-2026-9995
  • CVE-2026-9996
  • CVE-2026-9997
  • CVE-2026-9998
  • CVE-2026-9999
Related
Published
2026-08-31T08:40:44Z
Modified
2026-09-02T11:26:18Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 148.0.7778.215 (boo#1266471):

    • CVE-2026-9872: Out of bounds write in GPU
    • CVE-2026-9873: Use after free in Network
    • CVE-2026-9874: Use after free in Dawn
    • CVE-2026-9875: Out of bounds read in WebGL
    • CVE-2026-9876: Use after free in WebGL
    • CVE-2026-9877: Use after free in ANGLE
    • CVE-2026-9878: Use after free in ANGLE
    • CVE-2026-9879: Out of bounds write in ANGLE
    • CVE-2026-9880: Insufficient validation of untrusted input in WebGL
    • CVE-2026-9881: Use after free in Bluetooth
    • CVE-2026-9882: Integer overflow in ANGLE
    • CVE-2026-9883: Use after free in Base
    • CVE-2026-9884: Use after free in Browser
    • CVE-2026-9885: Insufficient validation of untrusted input in UI
    • CVE-2026-9886: Use after free in Base
    • CVE-2026-9887: Use after free in Proxy
    • CVE-2026-9888: Use after free in WebView
    • CVE-2026-9889: Out of bounds read and write in Dawn
    • CVE-2026-9890: Use after free in XR
    • CVE-2026-9891: Use after free in Extensions
    • CVE-2026-9892: Inappropriate implementation in Skia
    • CVE-2026-9893: Use after free in Skia
    • CVE-2026-9894: Use after free in GPU
    • CVE-2026-9895: Out of bounds read in GPU
    • CVE-2026-9896: Out of bounds write in V8
    • CVE-2026-9897: Use after free in DOM
    • CVE-2026-9898: Insufficient validation of untrusted input in GPU
    • CVE-2026-9899: Use after free in ANGLE
    • CVE-2026-9900: Out of bounds write in ANGLE
    • CVE-2026-9901: Use after free in ANGLE
    • CVE-2026-9902: Use after free in Accessibility
    • CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
    • CVE-2026-9904: Use after free in ANGLE
    • CVE-2026-9905: Use after free in Accessibility
    • CVE-2026-9906: Out of bounds write in GPU
    • CVE-2026-9907: Out of bounds read in Dawn
    • CVE-2026-9908: Out of bounds read in ANGLE
    • CVE-2026-9909: Integer overflow in Skia
    • CVE-2026-9910: Out of bounds memory access in ANGLE
    • CVE-2026-9911: Integer overflow in ANGLE
    • CVE-2026-9912: Inappropriate implementation in GPU
    • CVE-2026-9913: Inappropriate implementation in ANGLE
    • CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
    • CVE-2026-9915: Heap buffer overflow in ANGLE
    • CVE-2026-9916: Out of bounds write in ANGLE
    • CVE-2026-9917: Uninitialized Use in WebGL
    • CVE-2026-9918: Inappropriate implementation in Tint
    • CVE-2026-9919: Out of bounds read in WebGL
    • CVE-2026-9920: Uninitialized Use in GPU
    • CVE-2026-9921: Uninitialized Use in WebGL
    • CVE-2026-9922: Use after free in GPU
    • CVE-2026-9923: Use after free in Skia
    • CVE-2026-9924: Heap buffer overflow in ANGLE
    • CVE-2026-9925: Use after free in ANGLE
    • CVE-2026-9926: Heap buffer overflow in ANGLE
    • CVE-2026-9927: Use after free in ANGLE
    • CVE-2026-9928: Out of bounds read in ANGLE
    • CVE-2026-9929: Inappropriate implementation in WebGL
    • CVE-2026-9930: Out of bounds write in Dawn
    • CVE-2026-9931: Use after free in GPU
    • CVE-2026-9932: Use after free in ANGLE
    • CVE-2026-9933: Use after free in Input
    • CVE-2026-9934: Use after free in Aura
    • CVE-2026-9935: Uninitialized Use in ANGLE
    • CVE-2026-9936: Use after free in GFX
    • CVE-2026-9937: Use after free in UI
    • CVE-2026-9938: Inappropriate implementation in V8
    • CVE-2026-9939: Heap buffer overflow in WebCodecs
    • CVE-2026-9940: Heap buffer overflow in ANGLE
    • CVE-2026-9941: Use after free in ANGLE
    • CVE-2026-9942: Uninitialized Use in ANGLE
    • CVE-2026-9943: Out of bounds read in WebGL
    • CVE-2026-9944: Uninitialized Use in ANGLE
    • CVE-2026-9945: Use after free in Media
    • CVE-2026-9946: Use after free in ANGLE
    • CVE-2026-9947: Use after free in XML
    • CVE-2026-9948: Use after free in Views
    • CVE-2026-9949: Use after free in Core
    • CVE-2026-9950: Insufficient validation of untrusted input in iOS
    • CVE-2026-9951: Use after free in UI
    • CVE-2026-9952: Use after free in WebAudio
    • CVE-2026-9953: Out of bounds read in ANGLE
    • CVE-2026-9954: Use after free in TabStrip
    • CVE-2026-9955: Inappropriate implementation in iOS
    • CVE-2026-9956: Use after free in iOS
    • CVE-2026-9957: Use after free in PDF
    • CVE-2026-9958: Use after free in PDFium
    • CVE-2026-9959: Race in WebRTC
    • CVE-2026-9960: Integer overflow in PDFium
    • CVE-2026-9961: Use after free in SurfaceCapture
    • CVE-2026-9962: Use after free in WebRTC
    • CVE-2026-9963: Uninitialized Use in iOS
    • CVE-2026-9964: Use after free in Bluetooth
    • CVE-2026-9965: Out of bounds write in ANGLE
    • CVE-2026-9966: Integer overflow in XML
    • CVE-2026-9967: Out of bounds write in GPU
    • CVE-2026-9968: Integer overflow in V8
    • CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
    • CVE-2026-9970: Use after free in WebGL
    • CVE-2026-9971: Inappropriate implementation in iOS
    • CVE-2026-9972: Uninitialized Use in Gamepad
    • CVE-2026-9973: Out of bounds write in V8
    • CVE-2026-9974: Out of bounds write in GPU
    • CVE-2026-9975: Out of bounds read and write in ANGLE
    • CVE-2026-9976: Inappropriate implementation in USB
    • CVE-2026-9977: Insufficient validation of untrusted input in WebShare
    • CVE-2026-9978: Use after free in Glic
    • CVE-2026-9979: Insufficient validation of untrusted input in Input
    • CVE-2026-9980: Insufficient validation of untrusted input in Printing
    • CVE-2026-9981: Inappropriate implementation in Skia
    • CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
    • CVE-2026-9983: Type Confusion in Skia
    • CVE-2026-9984: Use after free in UI
    • CVE-2026-9985: Insufficient validation of untrusted input in Media
    • CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
    • CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
    • CVE-2026-9988: Use after free in WebRTC
    • CVE-2026-9989: Inappropriate implementation in Media
    • CVE-2026-9990: Use after free in WebAppInstalls
    • CVE-2026-9991: Inappropriate implementation in Media
    • CVE-2026-9992: Use after free in Network
    • CVE-2026-9993: Use after free in Views
    • CVE-2026-9994: Use after free in Core
    • CVE-2026-9995: Use after free in WebXR
    • CVE-2026-9996: Out of bounds read in WebRTC
    • CVE-2026-9997: Use after free in Input
    • CVE-2026-9998: Integer overflow in Skia
    • CVE-2026-9999: Inappropriate implementation in ANGLE
    • CVE-2026-10000: Use after free in Passwords
    • CVE-2026-10001: Use after free in PerformanceManager
    • CVE-2026-10002: Use after free in PDFium
    • CVE-2026-10003: Use after free in Views
    • CVE-2026-10004: Insufficient validation of untrusted input in Passwords
    • CVE-2026-10005: Use after free in WebAppInstalls
    • CVE-2026-10006: Race in WebAudio
    • CVE-2026-10007: Use after free in SVG
    • CVE-2026-10008: Uninitialized Use in GPU
    • CVE-2026-10009: Integer overflow in Skia
    • CVE-2026-10010: Inappropriate implementation in Input
    • CVE-2026-10011: Inappropriate implementation in Skia
    • CVE-2026-10012: Use after free in Skia
    • CVE-2026-10013: Use after free in WebCodecs
    • CVE-2026-10014: Use after free in WebMIDI
    • CVE-2026-10015: Integer overflow in WTF
    • CVE-2026-10016: Use after free in DOM
    • CVE-2026-10017: Out of bounds read in Headless
    • CVE-2026-10018: Integer overflow in ANGLE
    • CVE-2026-10019: Integer overflow in ANGLE
    • CVE-2026-10020: Insufficient validation of untrusted input in Skia
    • CVE-2026-10021: Insufficient validation of untrusted input in USB
    • CVE-2026-10022: Type Confusion in V8
  • Chromium 148.0.7778.178 (boo#1265848)

    • CVE-2026-9111: Use after free in WebRTC
    • CVE-2026-9110: Inappropriate implementation in UI
    • CVE-2026-9112: Use after free in GPU
    • CVE-2026-9113: Out of bounds read in GPU
    • CVE-2026-9114: Use after free in QUIC
    • CVE-2026-9115: Insufficient policy enforcement in Service Worker
    • CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
    • CVE-2026-9117: Type Confusion in GFX
    • CVE-2026-9118: Use after free in XR
    • CVE-2026-9119: Heap buffer overflow in WebRTC
    • CVE-2026-9120: Use after free in WebRTC
    • CVE-2026-9126: Use after free in DOM
    • CVE-2026-9121: Out of bounds read in GPU
    • CVE-2026-9122: Out of bounds read in GPU
    • CVE-2026-9123: Heap buffer overflow in Chromecast
    • CVE-2026-9124: Insufficient validation of untrusted input in Input
  • add system-wide chromium.conf as in fedora package enable several features by default and disable ai features allow to override via setting CHROMIUM_USER_FLAGS

  • Chromium 148.0.7778.167 (boo#1265159)

  • Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)

    • CVE-2026-7896: Integer overflow in Blink
    • CVE-2026-7897: Use after free in Mobile
    • CVE-2026-7898: Use after free in Chromoting
    • CVE-2026-7899: Out of bounds read and write in V8
    • CVE-2026-7900: Heap buffer overflow in ANGLE
    • CVE-2026-7901: Use after free in ANGLE
    • CVE-2026-7902: Out of bounds memory access in V8
    • CVE-2026-7903: Integer overflow in ANGLE
    • CVE-2026-7904: Out of bounds read in Fonts
    • CVE-2026-7905: Insufficient validation of untrusted input in Media
    • CVE-2026-7906: Use after free in SVG
    • CVE-2026-7907: Use after free in DOM
    • CVE-2026-7908: Use after free in Fullscreen
    • CVE-2026-7909: Inappropriate implementation in ServiceWorker
    • CVE-2026-7910: Use after free in Views
    • CVE-2026-7911: Use after free in Aura
    • CVE-2026-7912: Integer overflow in GPU
    • CVE-2026-7913: Insufficient policy enforcement in DevTools
    • CVE-2026-7914: Type Confusion in Accessibility
    • CVE-2026-7915: Insufficient data validation in DevTools
    • CVE-2026-7916: Insufficient data validation in InterestGroups
    • CVE-2026-7917: Use after free in Fullscreen
    • CVE-2026-7918: Use after free in GPU
    • CVE-2026-7919: Use after free in Aura
    • CVE-2026-7920: Use after free in Skia
    • CVE-2026-7921: Use after free in Passwords
    • CVE-2026-7922: Use after free in ServiceWorker
    • CVE-2026-7923: Out of bounds write in Skia
    • CVE-2026-7924: Uninitialized Use in Dawn
    • CVE-2026-7925: Use after free in Chromoting
    • CVE-2026-7926: Use after free in PresentationAPI
    • CVE-2026-7927: Type Confusion in Runtime
    • CVE-2026-7928: Use after free in WebRTC
    • CVE-2026-7929: Use after free in MediaRecording
    • CVE-2026-7930: Insufficient validation of untrusted input in Cookies
    • CVE-2026-7931: Insufficient validation of untrusted input in iOS
    • CVE-2026-7932: Insufficient policy enforcement in Downloads
    • CVE-2026-7933: Out of bounds read in WebCodecs
    • CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
    • CVE-2026-7935: Inappropriate implementation in Speech
    • CVE-2026-7936: Object lifecycle issue in V8
    • CVE-2026-7937: Insufficient policy enforcement in DevTools
    • CVE-2026-7938: Use after free in CSS
    • CVE-2026-7939: Inappropriate implementation in SanitizerAPI
    • CVE-2026-7940: Use after free in V8
    • CVE-2026-7941: Insufficient validation of untrusted input in Mobile
    • CVE-2026-7942: Integer overflow in ANGLE
    • CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
    • CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
    • CVE-2026-7945: Insufficient validation of untrusted input in COOP
    • CVE-2026-7946: Insufficient policy enforcement in WebUI
    • CVE-2026-7947: Insufficient validation of untrusted input in Network
    • CVE-2026-7948: Race in Chromoting
    • CVE-2026-7949: Out of bounds read in Skia
    • CVE-2026-7950: Out of bounds read and write in GFX
    • CVE-2026-7951: Out of bounds write in WebRTC
    • CVE-2026-7952: Insufficient policy enforcement in Extensions
    • CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
    • CVE-2026-7954: Race in Shared Storage
    • CVE-2026-7955: Uninitialized Use in GPU
    • CVE-2026-7956: Use after free in Navigation
    • CVE-2026-7957: Out of bounds write in Media
    • CVE-2026-7958: Inappropriate implementation in ServiceWorker
    • CVE-2026-7959: Inappropriate implementation in Navigation
    • CVE-2026-7960: Race in Speech
    • CVE-2026-7961: Insufficient validation of untrusted input in Permissions
    • CVE-2026-7962: Insufficient policy enforcement in DirectSockets
    • CVE-2026-7963: Inappropriate implementation in ServiceWorker
    • CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
    • CVE-2026-7965: Insufficient validation of untrusted input in DevTools
    • CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
    • CVE-2026-7967: Insufficient validation of untrusted input in Navigation
    • CVE-2026-7968: Insufficient validation of untrusted input in CORS
    • CVE-2026-7969: Integer overflow in Network
    • CVE-2026-7970: Use after free in TopChrome
    • CVE-2026-7971: Inappropriate implementation in ORB
    • CVE-2026-7972: Uninitialized Use in GPU
    • CVE-2026-7973: Integer overflow in Dawn
    • CVE-2026-7974: Use after free in Blink
    • CVE-2026-7975: Use after free in DevTools
    • CVE-2026-7976: Use after free in Views
    • CVE-2026-7977: Inappropriate implementation in Canvas
    • CVE-2026-7978: Inappropriate implementation in Companion
    • CVE-2026-7979: Inappropriate implementation in Media
    • CVE-2026-7980: Use after free in WebAudio
    • CVE-2026-7981: Out of bounds read in Codecs
    • CVE-2026-7982: Uninitialized Use in WebCodecs
    • CVE-2026-7983: Out of bounds read in Dawn
    • CVE-2026-7984: Use after free in ReadingMode
    • CVE-2026-7985: Use after free in GPU
    • CVE-2026-7986: Insufficient policy enforcement in Autofill
    • CVE-2026-7987: Use after free in WebRTC
    • CVE-2026-7988: Type Confusion in WebRTC
    • CVE-2026-7989: Insufficient data validation in DataTransfer
    • CVE-2026-7990: Insufficient validation of untrusted input in Updater
    • CVE-2026-7991: Use after free in UI
    • CVE-2026-7992: Insufficient validation of untrusted input in UI
    • CVE-2026-7993: Insufficient validation of untrusted input in Payments
    • CVE-2026-7994: Inappropriate implementation in Chromoting
    • CVE-2026-7995: Out of bounds read in AdFilter
    • CVE-2026-7996: Insufficient validation of untrusted input in SSL
    • CVE-2026-7997: Insufficient validation of untrusted input in Updater
    • CVE-2026-7998: Insufficient validation of untrusted input in Dialog
    • CVE-2026-7999: Inappropriate implementation in V8
    • CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
    • CVE-2026-8001: Use after free in Printing
    • CVE-2026-8002: Use after free in Audio
    • CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
    • CVE-2026-8004: Insufficient policy enforcement in DevTools
    • CVE-2026-8005: Insufficient validation of untrusted input in Cast
    • CVE-2026-8006: Insufficient policy enforcement in DevTools
    • CVE-2026-8007: Insufficient validation of untrusted input in Cast
    • CVE-2026-8008: Inappropriate implementation in DevTools
    • CVE-2026-8009: Inappropriate implementation in Cast
    • CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
    • CVE-2026-8011: Insufficient policy enforcement in Search
    • CVE-2026-8012: Inappropriate implementation in MHTML
    • CVE-2026-8013: Insufficient validation of untrusted input in FedCM
    • CVE-2026-8014: Inappropriate implementation in Preload
    • CVE-2026-8015: Inappropriate implementation in Media
    • CVE-2026-8016: Use after free in WebRTC
    • CVE-2026-8017: Side-channel information leakage in Media
    • CVE-2026-8018: Insufficient policy enforcement in DevTools
    • CVE-2026-8019: Insufficient policy enforcement in WebApp
    • CVE-2026-8020: Uninitialized Use in GPU
    • CVE-2026-8021: Script injection in UI
    • CVE-2026-8022: Inappropriate implementation in MHTML
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
148.0.7778.215-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "148.0.7778.215-bp160.1.1",
            "chromium":  "148.0.7778.215-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20849-1.json"