openSUSE-SU-2026:20980-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20980-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20980-1
Upstream
CVE (28)
  • CVE-2026-12007
  • CVE-2026-12008
  • CVE-2026-12009
  • CVE-2026-12010
  • CVE-2026-12011
  • CVE-2026-12012
  • CVE-2026-12013
  • CVE-2026-12014
  • CVE-2026-12015
  • CVE-2026-12016
  • CVE-2026-12017
  • CVE-2026-12018
  • CVE-2026-12019
  • CVE-2026-12020
  • CVE-2026-12022
  • CVE-2026-12023
  • CVE-2026-12024
  • CVE-2026-12025
  • CVE-2026-12026
  • CVE-2026-12027
  • CVE-2026-12028
  • CVE-2026-12029
  • CVE-2026-12030
  • CVE-2026-12031
  • CVE-2026-12032
  • CVE-2026-12033
  • CVE-2026-12034
  • CVE-2026-12035
Related
CVE (28)
  • CVE-2026-12007
  • CVE-2026-12008
  • CVE-2026-12009
  • CVE-2026-12010
  • CVE-2026-12011
  • CVE-2026-12012
  • CVE-2026-12013
  • CVE-2026-12014
  • CVE-2026-12015
  • CVE-2026-12016
  • CVE-2026-12017
  • CVE-2026-12018
  • CVE-2026-12019
  • CVE-2026-12020
  • CVE-2026-12022
  • CVE-2026-12023
  • CVE-2026-12024
  • CVE-2026-12025
  • CVE-2026-12026
  • CVE-2026-12027
  • CVE-2026-12028
  • CVE-2026-12029
  • CVE-2026-12030
  • CVE-2026-12031
  • CVE-2026-12032
  • CVE-2026-12033
  • CVE-2026-12034
  • CVE-2026-12035
Withdrawn
2026-09-02T14:00:12Z
Published
2026-06-16T06:31:46Z
Modified
2026-09-02T14:00:12Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

Chromium 149.0.7827.114 (boo#1268158):

  • CVE-2026-12007: Use after free Core
  • CVE-2026-12008: Use after free DigitalCredentials
  • CVE-2026-12009: Insufficient validation of untrusted input Accessibility
  • CVE-2026-12010: Heap buffer overflow GPU
  • CVE-2026-12011: Use after free WebMIDI
  • CVE-2026-12012: Use after free Network
  • CVE-2026-12013: Use after free Media
  • CVE-2026-12014: Use after free Cast
  • CVE-2026-12015: Use after free Autofill
  • CVE-2026-12016: Insufficient validation of untrusted input DevTools
  • CVE-2026-12017: Insufficient validation of untrusted input Extensions
  • CVE-2026-12018: Inappropriate implementation Mojo
  • CVE-2026-12019: Out of bounds write Codecs
  • CVE-2026-12020: Use after free Autofill
  • CVE-2026-12022: Race Safe Browsing
  • CVE-2026-12023: Use after free GPU
  • CVE-2026-12024: Insufficient policy enforcement DevTools
  • CVE-2026-12025: Insufficient validation of untrusted input Network
  • CVE-2026-12026: Out of bounds read Video
  • CVE-2026-12027: Insufficient policy enforcement Headless
  • CVE-2026-12028: Use after free GPU
  • CVE-2026-12029: Use after free Video
  • CVE-2026-12030: Heap buffer overflow GPU
  • CVE-2026-12031: Inappropriate implementation Views
  • CVE-2026-12032: Inappropriate implementation Passwords
  • CVE-2026-12033: Out of bounds read VideoCapture
  • CVE-2026-12034: Insufficient validation of untrusted input Linux Toolkit Theming
  • CVE-2026-12035: Use after free Views
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
149.0.7827.114-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "149.0.7827.114-bp160.1.1",
            "chromium":  "149.0.7827.114-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20980-1.json"