openSUSE-SU-2026:21135-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21135-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21135-1
Upstream
CVE (564)
  • CVE-2026-10881
  • CVE-2026-10882
  • CVE-2026-10883
  • CVE-2026-10884
  • CVE-2026-10885
  • CVE-2026-10886
  • CVE-2026-10887
  • CVE-2026-10888
  • CVE-2026-10889
  • CVE-2026-10890
  • CVE-2026-10891
  • CVE-2026-10892
  • CVE-2026-10893
  • CVE-2026-10894
  • CVE-2026-10895
  • CVE-2026-10896
  • CVE-2026-10897
  • CVE-2026-10898
  • CVE-2026-10899
  • CVE-2026-10900
  • CVE-2026-10901
  • CVE-2026-10902
  • CVE-2026-10903
  • CVE-2026-10904
  • CVE-2026-10905
  • CVE-2026-10906
  • CVE-2026-10907
  • CVE-2026-10908
  • CVE-2026-10909
  • CVE-2026-10910
  • CVE-2026-10911
  • CVE-2026-10912
  • CVE-2026-10913
  • CVE-2026-10914
  • CVE-2026-10915
  • CVE-2026-10916
  • CVE-2026-10917
  • CVE-2026-10918
  • CVE-2026-10919
  • CVE-2026-10920
  • CVE-2026-10921
  • CVE-2026-10922
  • CVE-2026-10923
  • CVE-2026-10924
  • CVE-2026-10925
  • CVE-2026-10926
  • CVE-2026-10927
  • CVE-2026-10928
  • CVE-2026-10929
  • CVE-2026-10930
  • CVE-2026-10931
  • CVE-2026-10932
  • CVE-2026-10933
  • CVE-2026-10934
  • CVE-2026-10935
  • CVE-2026-10936
  • CVE-2026-10937
  • CVE-2026-10938
  • CVE-2026-10939
  • CVE-2026-10940
  • CVE-2026-10941
  • CVE-2026-10942
  • CVE-2026-10943
  • CVE-2026-10944
  • CVE-2026-10945
  • CVE-2026-10946
  • CVE-2026-10947
  • CVE-2026-10948
  • CVE-2026-10949
  • CVE-2026-10950
  • CVE-2026-10951
  • CVE-2026-10952
  • CVE-2026-10953
  • CVE-2026-10954
  • CVE-2026-10955
  • CVE-2026-10956
  • CVE-2026-10957
  • CVE-2026-10958
  • CVE-2026-10959
  • CVE-2026-10960
  • CVE-2026-10961
  • CVE-2026-10962
  • CVE-2026-10963
  • CVE-2026-10964
  • CVE-2026-10965
  • CVE-2026-10966
  • CVE-2026-10967
  • CVE-2026-10968
  • CVE-2026-10969
  • CVE-2026-10970
  • CVE-2026-10971
  • CVE-2026-10972
  • CVE-2026-10973
  • CVE-2026-10974
  • CVE-2026-10975
  • CVE-2026-10976
  • CVE-2026-10977
  • CVE-2026-10978
  • CVE-2026-10979
  • CVE-2026-10980
  • CVE-2026-10981
  • CVE-2026-10982
  • CVE-2026-10983
  • CVE-2026-10984
  • CVE-2026-10985
  • CVE-2026-10986
  • CVE-2026-10987
  • CVE-2026-10988
  • CVE-2026-10989
  • CVE-2026-10990
  • CVE-2026-10991
  • CVE-2026-10992
  • CVE-2026-10993
  • CVE-2026-10994
  • CVE-2026-10995
  • CVE-2026-10996
  • CVE-2026-10997
  • CVE-2026-10998
  • CVE-2026-10999
  • CVE-2026-11000
  • CVE-2026-11001
  • CVE-2026-11002
  • CVE-2026-11003
  • CVE-2026-11004
  • CVE-2026-11005
  • CVE-2026-11006
  • CVE-2026-11007
  • CVE-2026-11008
  • CVE-2026-11009
  • CVE-2026-11010
  • CVE-2026-11011
  • CVE-2026-11012
  • CVE-2026-11013
  • CVE-2026-11014
  • CVE-2026-11015
  • CVE-2026-11016
  • CVE-2026-11017
  • CVE-2026-11018
  • CVE-2026-11019
  • CVE-2026-11020
  • CVE-2026-11021
  • CVE-2026-11022
  • CVE-2026-11023
  • CVE-2026-11024
  • CVE-2026-11025
  • CVE-2026-11026
  • CVE-2026-11027
  • CVE-2026-11028
  • CVE-2026-11029
  • CVE-2026-11030
  • CVE-2026-11031
  • CVE-2026-11032
  • CVE-2026-11033
  • CVE-2026-11034
  • CVE-2026-11035
  • CVE-2026-11036
  • CVE-2026-11037
  • CVE-2026-11038
  • CVE-2026-11039
  • CVE-2026-11040
  • CVE-2026-11041
  • CVE-2026-11042
  • CVE-2026-11043
  • CVE-2026-11044
  • CVE-2026-11045
  • CVE-2026-11046
  • CVE-2026-11047
  • CVE-2026-11048
  • CVE-2026-11049
  • CVE-2026-11050
  • CVE-2026-11051
  • CVE-2026-11052
  • CVE-2026-11053
  • CVE-2026-11054
  • CVE-2026-11055
  • CVE-2026-11056
  • CVE-2026-11057
  • CVE-2026-11058
  • CVE-2026-11059
  • CVE-2026-11060
  • CVE-2026-11061
  • CVE-2026-11062
  • CVE-2026-11063
  • CVE-2026-11064
  • CVE-2026-11065
  • CVE-2026-11066
  • CVE-2026-11067
  • CVE-2026-11068
  • CVE-2026-11069
  • CVE-2026-11070
  • CVE-2026-11071
  • CVE-2026-11072
  • CVE-2026-11073
  • CVE-2026-11074
  • CVE-2026-11075
  • CVE-2026-11076
  • CVE-2026-11077
  • CVE-2026-11078
  • CVE-2026-11079
  • CVE-2026-11080
  • CVE-2026-11081
  • CVE-2026-11082
  • CVE-2026-11083
  • CVE-2026-11084
  • CVE-2026-11085
  • CVE-2026-11086
  • CVE-2026-11087
  • CVE-2026-11088
  • CVE-2026-11089
  • CVE-2026-11090
  • CVE-2026-11091
  • CVE-2026-11092
  • CVE-2026-11093
  • CVE-2026-11094
  • CVE-2026-11095
  • CVE-2026-11096
  • CVE-2026-11097
  • CVE-2026-11098
  • CVE-2026-11099
  • CVE-2026-11100
  • CVE-2026-11101
  • CVE-2026-11102
  • CVE-2026-11103
  • CVE-2026-11104
  • CVE-2026-11105
  • CVE-2026-11106
  • CVE-2026-11107
  • CVE-2026-11108
  • CVE-2026-11109
  • CVE-2026-11110
  • CVE-2026-11111
  • CVE-2026-11112
  • CVE-2026-11113
  • CVE-2026-11114
  • CVE-2026-11115
  • CVE-2026-11116
  • CVE-2026-11117
  • CVE-2026-11118
  • CVE-2026-11119
  • CVE-2026-11120
  • CVE-2026-11121
  • CVE-2026-11122
  • CVE-2026-11123
  • CVE-2026-11124
  • CVE-2026-11125
  • CVE-2026-11126
  • CVE-2026-11127
  • CVE-2026-11128
  • CVE-2026-11129
  • CVE-2026-11130
  • CVE-2026-11131
  • CVE-2026-11132
  • CVE-2026-11133
  • CVE-2026-11134
  • CVE-2026-11135
  • CVE-2026-11136
  • CVE-2026-11137
  • CVE-2026-11138
  • CVE-2026-11139
  • CVE-2026-11140
  • CVE-2026-11141
  • CVE-2026-11142
  • CVE-2026-11143
  • CVE-2026-11144
  • CVE-2026-11145
  • CVE-2026-11146
  • CVE-2026-11147
  • CVE-2026-11148
  • CVE-2026-11149
  • CVE-2026-11150
  • CVE-2026-11151
  • CVE-2026-11152
  • CVE-2026-11153
  • CVE-2026-11154
  • CVE-2026-11155
  • CVE-2026-11156
  • CVE-2026-11157
  • CVE-2026-11158
  • CVE-2026-11159
  • CVE-2026-11160
  • CVE-2026-11161
  • CVE-2026-11162
  • CVE-2026-11163
  • CVE-2026-11164
  • CVE-2026-11165
  • CVE-2026-11166
  • CVE-2026-11167
  • CVE-2026-11168
  • CVE-2026-11169
  • CVE-2026-11170
  • CVE-2026-11171
  • CVE-2026-11172
  • CVE-2026-11173
  • CVE-2026-11174
  • CVE-2026-11175
  • CVE-2026-11176
  • CVE-2026-11177
  • CVE-2026-11178
  • CVE-2026-11179
  • CVE-2026-11180
  • CVE-2026-11181
  • CVE-2026-11182
  • CVE-2026-11183
  • CVE-2026-11184
  • CVE-2026-11185
  • CVE-2026-11186
  • CVE-2026-11187
  • CVE-2026-11188
  • CVE-2026-11189
  • CVE-2026-11190
  • CVE-2026-11191
  • CVE-2026-11192
  • CVE-2026-11193
  • CVE-2026-11194
  • CVE-2026-11195
  • CVE-2026-11196
  • CVE-2026-11197
  • CVE-2026-11198
  • CVE-2026-11199
  • CVE-2026-11200
  • CVE-2026-11201
  • CVE-2026-11202
  • CVE-2026-11203
  • CVE-2026-11204
  • CVE-2026-11205
  • CVE-2026-11206
  • CVE-2026-11207
  • CVE-2026-11208
  • CVE-2026-11209
  • CVE-2026-11210
  • CVE-2026-11211
  • CVE-2026-11212
  • CVE-2026-11213
  • CVE-2026-11214
  • CVE-2026-11215
  • CVE-2026-11216
  • CVE-2026-11217
  • CVE-2026-11218
  • CVE-2026-11219
  • CVE-2026-11220
  • CVE-2026-11221
  • CVE-2026-11222
  • CVE-2026-11223
  • CVE-2026-11224
  • CVE-2026-11225
  • CVE-2026-11226
  • CVE-2026-11227
  • CVE-2026-11228
  • CVE-2026-11229
  • CVE-2026-11230
  • CVE-2026-11231
  • CVE-2026-11232
  • CVE-2026-11233
  • CVE-2026-11234
  • CVE-2026-11235
  • CVE-2026-11236
  • CVE-2026-11237
  • CVE-2026-11238
  • CVE-2026-11239
  • CVE-2026-11240
  • CVE-2026-11241
  • CVE-2026-11242
  • CVE-2026-11243
  • CVE-2026-11244
  • CVE-2026-11245
  • CVE-2026-11246
  • CVE-2026-11247
  • CVE-2026-11248
  • CVE-2026-11249
  • CVE-2026-11250
  • CVE-2026-11251
  • CVE-2026-11252
  • CVE-2026-11253
  • CVE-2026-11254
  • CVE-2026-11255
  • CVE-2026-11256
  • CVE-2026-11257
  • CVE-2026-11258
  • CVE-2026-11259
  • CVE-2026-11260
  • CVE-2026-11261
  • CVE-2026-11262
  • CVE-2026-11263
  • CVE-2026-11264
  • CVE-2026-11265
  • CVE-2026-11266
  • CVE-2026-11267
  • CVE-2026-11268
  • CVE-2026-11269
  • CVE-2026-11270
  • CVE-2026-11271
  • CVE-2026-11272
  • CVE-2026-11273
  • CVE-2026-11274
  • CVE-2026-11275
  • CVE-2026-11276
  • CVE-2026-11277
  • CVE-2026-11278
  • CVE-2026-11279
  • CVE-2026-11280
  • CVE-2026-11281
  • CVE-2026-11282
  • CVE-2026-11283
  • CVE-2026-11284
  • CVE-2026-11285
  • CVE-2026-11286
  • CVE-2026-11287
  • CVE-2026-11288
  • CVE-2026-11289
  • CVE-2026-11290
  • CVE-2026-11291
  • CVE-2026-11292
  • CVE-2026-11293
  • CVE-2026-11294
  • CVE-2026-11295
  • CVE-2026-11296
  • CVE-2026-11297
  • CVE-2026-11298
  • CVE-2026-11299
  • CVE-2026-11300
  • CVE-2026-11301
  • CVE-2026-11302
  • CVE-2026-11303
  • CVE-2026-11304
  • CVE-2026-11305
  • CVE-2026-11306
  • CVE-2026-11307
  • CVE-2026-11308
  • CVE-2026-11309
  • CVE-2026-11628
  • CVE-2026-11629
  • CVE-2026-11630
  • CVE-2026-11631
  • CVE-2026-11632
  • CVE-2026-11633
  • CVE-2026-11634
  • CVE-2026-11635
  • CVE-2026-11636
  • CVE-2026-11637
  • CVE-2026-11638
  • CVE-2026-11639
  • CVE-2026-11640
  • CVE-2026-11641
  • CVE-2026-11642
  • CVE-2026-11643
  • CVE-2026-11644
  • CVE-2026-11645
  • CVE-2026-11646
  • CVE-2026-11647
  • CVE-2026-11648
  • CVE-2026-11649
  • CVE-2026-11650
  • CVE-2026-11651
  • CVE-2026-11652
  • CVE-2026-11653
  • CVE-2026-11654
  • CVE-2026-11655
  • CVE-2026-11656
  • CVE-2026-11657
  • CVE-2026-11658
  • CVE-2026-11659
  • CVE-2026-11660
  • CVE-2026-11661
  • CVE-2026-11662
  • CVE-2026-11663
  • CVE-2026-11664
  • CVE-2026-11665
  • CVE-2026-11666
  • CVE-2026-11667
  • CVE-2026-11668
  • CVE-2026-11669
  • CVE-2026-11670
  • CVE-2026-11671
  • CVE-2026-11672
  • CVE-2026-11673
  • CVE-2026-11674
  • CVE-2026-11675
  • CVE-2026-11676
  • CVE-2026-11677
  • CVE-2026-11678
  • CVE-2026-11679
  • CVE-2026-11680
  • CVE-2026-11681
  • CVE-2026-11682
  • CVE-2026-11683
  • CVE-2026-11684
  • CVE-2026-11685
  • CVE-2026-11686
  • CVE-2026-11687
  • CVE-2026-11688
  • CVE-2026-11689
  • CVE-2026-11690
  • CVE-2026-11691
  • CVE-2026-11692
  • CVE-2026-11693
  • CVE-2026-11694
  • CVE-2026-11695
  • CVE-2026-11696
  • CVE-2026-11697
  • CVE-2026-11698
  • CVE-2026-11699
  • CVE-2026-11700
  • CVE-2026-11701
  • CVE-2026-12007
  • CVE-2026-12008
  • CVE-2026-12009
  • CVE-2026-12010
  • CVE-2026-12011
  • CVE-2026-12012
  • CVE-2026-12013
  • CVE-2026-12014
  • CVE-2026-12015
  • CVE-2026-12016
  • CVE-2026-12017
  • CVE-2026-12018
  • CVE-2026-12019
  • CVE-2026-12020
  • CVE-2026-12022
  • CVE-2026-12023
  • CVE-2026-12024
  • CVE-2026-12025
  • CVE-2026-12026
  • CVE-2026-12027
  • CVE-2026-12028
  • CVE-2026-12029
  • CVE-2026-12030
  • CVE-2026-12031
  • CVE-2026-12032
  • CVE-2026-12033
  • CVE-2026-12034
  • CVE-2026-12035
  • CVE-2026-12437
  • CVE-2026-12438
  • CVE-2026-12439
  • CVE-2026-12440
  • CVE-2026-12441
  • CVE-2026-12442
  • CVE-2026-12443
  • CVE-2026-12444
  • CVE-2026-12445
  • CVE-2026-12446
  • CVE-2026-12447
  • CVE-2026-12448
  • CVE-2026-12449
  • CVE-2026-12450
  • CVE-2026-12451
  • CVE-2026-12452
  • CVE-2026-12453
  • CVE-2026-12454
  • CVE-2026-12455
  • CVE-2026-12456
  • CVE-2026-12457
  • CVE-2026-12458
  • CVE-2026-12459
  • CVE-2026-12460
  • CVE-2026-12461
  • CVE-2026-12462
  • CVE-2026-12463
  • CVE-2026-12464
  • CVE-2026-12465
  • CVE-2026-12466
  • CVE-2026-12467
  • CVE-2026-12468
  • CVE-2026-12469
Related
Published
2026-08-31T08:40:45Z
Modified
2026-09-02T11:26:18Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 149.0.7827.155 (boo#1268373):

    • CVE-2026-12437: Use after free in WebShare
    • CVE-2026-12438: Inappropriate implementation in WebView
    • CVE-2026-12439: Use after free in Digital Credentials
    • CVE-2026-12440: Use after free in DigitalCredentials
    • CVE-2026-12441: Use after free in File Input
    • CVE-2026-12442: Use after free in Passwords
    • CVE-2026-12443: Use after free in Web Authentication
    • CVE-2026-12444: Out of bounds read in Chromoting
    • CVE-2026-12445: Use after free in Extensions
    • CVE-2026-12446: Insufficient data validation in Passwords
    • CVE-2026-12447: Heap buffer overflow in WebRTC
    • CVE-2026-12448: Inappropriate implementation in WebView
    • CVE-2026-12449: Use after free in Chromoting
    • CVE-2026-12450: Inappropriate implementation in Media
    • CVE-2026-12451: Use after free in DigitalCredentials
    • CVE-2026-12452: Use after free in Downloads
    • CVE-2026-12453: Insufficient validation of untrusted input in Input
    • CVE-2026-12454: Race in Safe Browsing
    • CVE-2026-12455: Use after free in Tab Strip
    • CVE-2026-12456: Insufficient validation of untrusted input in Extensions
    • CVE-2026-12457: Insufficient data validation in Extensions
    • CVE-2026-12458: Incorrect security UI in Passwords
    • CVE-2026-12459: Inappropriate implementation in Serial
    • CVE-2026-12460: Insufficient policy enforcement in File System Access
    • CVE-2026-12461: Out of bounds read in WebRTC
    • CVE-2026-12462: Use after free in Media
    • CVE-2026-12463: Inappropriate implementation in Views
    • CVE-2026-12464: Use after free in Browser
    • CVE-2026-12465: Insufficient validation of untrusted input in Metrics
    • CVE-2026-12466: Heap buffer overflow in WebRTC
    • CVE-2026-12467: Use after free in Extensions
    • CVE-2026-12468: Inappropriate implementation in Updater
    • CVE-2026-12469: Uninitialized Use in GPU
  • Chromium 149.0.7827.114 (boo#1268158):

    • CVE-2026-12007: Use after free Core
    • CVE-2026-12008: Use after free DigitalCredentials
    • CVE-2026-12009: Insufficient validation of untrusted input Accessibility
    • CVE-2026-12010: Heap buffer overflow GPU
    • CVE-2026-12011: Use after free WebMIDI
    • CVE-2026-12012: Use after free Network
    • CVE-2026-12013: Use after free Media
    • CVE-2026-12014: Use after free Cast
    • CVE-2026-12015: Use after free Autofill
    • CVE-2026-12016: Insufficient validation of untrusted input DevTools
    • CVE-2026-12017: Insufficient validation of untrusted input Extensions
    • CVE-2026-12018: Inappropriate implementation Mojo
    • CVE-2026-12019: Out of bounds write Codecs
    • CVE-2026-12020: Use after free Autofill
    • CVE-2026-12022: Race Safe Browsing
    • CVE-2026-12023: Use after free GPU
    • CVE-2026-12024: Insufficient policy enforcement DevTools
    • CVE-2026-12025: Insufficient validation of untrusted input Network
    • CVE-2026-12026: Out of bounds read Video
    • CVE-2026-12027: Insufficient policy enforcement Headless
    • CVE-2026-12028: Use after free GPU
    • CVE-2026-12029: Use after free Video
    • CVE-2026-12030: Heap buffer overflow GPU
    • CVE-2026-12031: Inappropriate implementation Views
    • CVE-2026-12032: Inappropriate implementation Passwords
    • CVE-2026-12033: Out of bounds read VideoCapture
    • CVE-2026-12034: Insufficient validation of untrusted input Linux Toolkit Theming
    • CVE-2026-12035: Use after free View
  • Chromium 149.0.7827.102 (boo#1267911):

    • CVE-2026-11628: Use after free in Ozone
    • CVE-2026-11629: Use after free in Ozone
    • CVE-2026-11630: Use after free in File Input
    • CVE-2026-11631: Use after free in Aura
    • CVE-2026-11632: Use after free in TabStrip
    • CVE-2026-11633: Use after free in Bluetooth
    • CVE-2026-11634: Use after free in Gamepad
    • CVE-2026-11635: Use after free in Bluetooth
    • CVE-2026-11636: Use after free in Autofill
    • CVE-2026-11637: Use after free in Views
    • CVE-2026-11638: Use after free in Printing
    • CVE-2026-11639: Use after free in Compositing
    • CVE-2026-11640: Integer overflow in libyuv
    • CVE-2026-11641: Use after free in Bluetooth
    • CVE-2026-11642: Use after free in Web Apps
    • CVE-2026-11643: Use after free in Proxy
    • CVE-2026-11644: Use after free in Views
    • CVE-2026-11645: Out of bounds memory access in V8
    • CVE-2026-11646: Use after free in ViewTransitions
    • CVE-2026-11647: Use after free in Printing
    • CVE-2026-11648: Use after free in FullScreen
    • CVE-2026-11649: Use after free in V8
    • CVE-2026-11650: Use after free in V8
    • CVE-2026-11651: Use after free in Network
    • CVE-2026-11652: Use after free in Extensions
    • CVE-2026-11653: Insufficient validation of untrusted input in Extensions
    • CVE-2026-11654: Use after free in CameraCapture
    • CVE-2026-11655: Integer overflow in Media
    • CVE-2026-11656: Use after free in ServiceWorker
    • CVE-2026-11657: Use after free in Payments
    • CVE-2026-11658: Insufficient validation of untrusted input in Extensions
    • CVE-2026-11659: Insufficient validation of untrusted input in UI
    • CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
    • CVE-2026-11661: Use after free in Views
    • CVE-2026-11662: Type Confusion in Bindings
    • CVE-2026-11663: Use after free in Skia
    • CVE-2026-11664: Use after free in Payments
    • CVE-2026-11665: Out of bounds read in Dawn
    • CVE-2026-11666: Insufficient validation of untrusted input in Input
    • CVE-2026-11667: Out of bounds read in WebRTC
    • CVE-2026-11668: Uninitialized Use in Codecs
    • CVE-2026-11669: Integer overflow in Media
    • CVE-2026-11670: Use after free in PDF
    • CVE-2026-11671: Use after free in Navigation
    • CVE-2026-11672: Out of bounds write in GPU
    • CVE-2026-11673: Use after free in InterestGroups
    • CVE-2026-11674: Use after free in Guest View
    • CVE-2026-11675: Insufficient validation of untrusted input in Skia
    • CVE-2026-11676: Insufficient validation of untrusted input in Dawn
    • CVE-2026-11677: Race in Network
    • CVE-2026-11678: Integer overflow in libyuv
    • CVE-2026-11679: Use after free in Codecs
    • CVE-2026-11680: Use after free in Media
    • CVE-2026-11681: Use after free in Ozone
    • CVE-2026-11682: Insufficient validation of untrusted input in Views
    • CVE-2026-11683: Use after free in WebCodecs
    • CVE-2026-11684: Insufficient policy enforcement in Network
    • CVE-2026-11685: Insufficient data validation in MediaCapture
    • CVE-2026-11686: Insufficient validation of untrusted input in Dawn
    • CVE-2026-11687: Use after free in Dawn
    • CVE-2026-11688: Object lifecycle issue in SVG
    • CVE-2026-11689: Insufficient validation of untrusted input in Passwords
    • CVE-2026-11690: Out of bounds read and write in Media
    • CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
    • CVE-2026-11692: Use after free in Read Anything
    • CVE-2026-11693: Inappropriate implementation in Plugins
    • CVE-2026-11694: Use after free in ServiceWorker
    • CVE-2026-11695: Inappropriate implementation in Passwords
    • CVE-2026-11696: Uninitialized Use in Video
    • CVE-2026-11697: Insufficient validation of untrusted input in UI
    • CVE-2026-11698: Use after free in Bluetooth
    • CVE-2026-11699: Use after free in Bluetooth
    • CVE-2026-11700: Use after free in Tracing
    • CVE-2026-11701: Insufficient validation of untrusted input in Guest View
  • Chromium 149 (149.0.7827.53) stable (boo#1267706):

    • CVE-2026-10881: Out of bounds read and write in ANGLE
    • CVE-2026-10882: Use after free in Network
    • CVE-2026-10883: Out of bounds write in ANGLE
    • CVE-2026-10884: Use after free in Chromecast
    • CVE-2026-10885: Use after free in Chrome for iOS
    • CVE-2026-10886: Use after free in FileSystem
    • CVE-2026-10887: Use after free in Chromoting
    • CVE-2026-10888: Use after free in Cast Streaming
    • CVE-2026-10889: Out of bounds read in ANGLE
    • CVE-2026-10890: Use after free in Cast
    • CVE-2026-10891: Use after free in GFX
    • CVE-2026-10892: Out of bounds write in GPU
    • CVE-2026-10893: Use after free in Chromoting
    • CVE-2026-10894: Use after free in Printing
    • CVE-2026-10895: Use after free in Ozone
    • CVE-2026-10896: Use after free in Chrome for iOS
    • CVE-2026-10897: Out of bounds write in GPU
    • CVE-2026-10898: Stack buffer overflow in GPU
    • CVE-2026-10899: Use after free in Ozone
    • CVE-2026-10900: Use after free in Passwords
    • CVE-2026-10901: Use after free in Passwords
    • CVE-2026-10902: Use after free in Ozone
    • CVE-2026-10903: Use after free in WebRTC
    • CVE-2026-10904: Inappropriate implementation in V8
    • CVE-2026-10905: Use after free in Network
    • CVE-2026-10906: Use after free in WebAuthentication
    • CVE-2026-10907: Out of bounds write in ANGLE
    • CVE-2026-10908: Use after free in FullScreen
    • CVE-2026-10909: Use after free in Dawn
    • CVE-2026-10910: Type Confusion in V8
    • CVE-2026-10911: Insufficient validation of untrusted input in Media
    • CVE-2026-10912: Insufficient validation of untrusted input in Extensions
    • CVE-2026-10913: Use after free in ANGLE
    • CVE-2026-10914: Use after free in ANGLE
    • CVE-2026-10915: Use after free in Core
    • CVE-2026-10916: Insufficient validation of untrusted input in DevTools
    • CVE-2026-10917: Insufficient validation of untrusted input in Media
    • CVE-2026-10918: Use after free in Viz
    • CVE-2026-10919: Use after free in ANGLE
    • CVE-2026-10920: Insufficient validation of untrusted input in WebShare
    • CVE-2026-10921: Integer overflow in Dawn
    • CVE-2026-10922: Insufficient validation of untrusted input in DevTools
    • CVE-2026-10923: Use after free in WebAppInstalls
    • CVE-2026-10924: Integer overflow in Chromecast
    • CVE-2026-10925: Out of bounds write in Skia
    • CVE-2026-10926: Use after free in Cast
    • CVE-2026-10927: Out of bounds read in Dawn
    • CVE-2026-10928: Script injection in Headless
    • CVE-2026-10929: Heap buffer overflow in ANGLE
    • CVE-2026-10930: Out of bounds read in ANGLE
    • CVE-2026-10931: Use after free in FileSystem
    • CVE-2026-10932: Use after free in UI
    • CVE-2026-10933: Use after free in Audio
    • CVE-2026-10934: Use after free in Autofill
    • CVE-2026-10935: Inappropriate implementation in V8
    • CVE-2026-10936: Type Confusion in V8
    • CVE-2026-10937: Inappropriate implementation in Passwords
    • CVE-2026-10938: Insufficient validation of untrusted input in Input
    • CVE-2026-10939: Use after free in WebRTC
    • CVE-2026-10940: Race in Codecs
    • CVE-2026-10941: Out of bounds memory access in Skia
    • CVE-2026-10942: Insufficient validation of untrusted input in UI
    • CVE-2026-10943: Use after free in WebRTC
    • CVE-2026-10944: Insufficient policy enforcement in Autofill
    • CVE-2026-10945: Use after free in PDF
    • CVE-2026-10946: Heap buffer overflow in Media
    • CVE-2026-10947: Use after free in WebRTC
    • CVE-2026-10948: Use after free in WebRTC
    • CVE-2026-10949: Heap buffer overflow in Video
    • CVE-2026-10950: Insufficient policy enforcement in Autofill
    • CVE-2026-10951: Use after free in Autofill
    • CVE-2026-10952: Use after free in Chrome for iOS
    • CVE-2026-10953: Use after free in Core
    • CVE-2026-10954: Use after free in Actor
    • CVE-2026-10955: Type Confusion in ANGLE
    • CVE-2026-10956: Use after free in MimeHandlerView
    • CVE-2026-10957: Use after free in Glic
    • CVE-2026-10958: Use after free in Chrome for iOS
    • CVE-2026-10959: Use after free in Input
    • CVE-2026-10960: Uninitialized Use in Codecs
    • CVE-2026-10961: Use after free in Chrome for iOS
    • CVE-2026-10962: Type Confusion in Media
    • CVE-2026-10963: Integer overflow in V8
    • CVE-2026-10964: Integer overflow in V8
    • CVE-2026-10965: Integer overflow in DevTools
    • CVE-2026-10966: Insufficient validation of untrusted input in Codecs
    • CVE-2026-10967: Use after free in SurfaceCapture
    • CVE-2026-10968: Insufficient validation of untrusted input in Dawn
    • CVE-2026-10969: Insufficient validation of untrusted input in Extensions
    • CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
    • CVE-2026-10971: Insufficient validation of untrusted input in Printing
    • CVE-2026-10972: Use after free in Ozone
    • CVE-2026-10973: Uninitialized Use in Dawn
    • CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
    • CVE-2026-10975: Use after free in WebRTC
    • CVE-2026-10976: Uninitialized Use in Dawn
    • CVE-2026-10977: Uninitialized Use in Skia
    • CVE-2026-10978: Use after free in Chromoting
    • CVE-2026-10979: Out of bounds read in ANGLE
    • CVE-2026-10980: Insufficient validation of untrusted input in DevTools
    • CVE-2026-10981: Insufficient validation of untrusted input in Codecs
    • CVE-2026-10982: Use after free in WebXR
    • CVE-2026-10983: Insufficient validation of untrusted input in Dawn
    • CVE-2026-10984: Inappropriate implementation in Accessibility
    • CVE-2026-10985: Out of bounds read in Skia
    • CVE-2026-10986: Integer overflow in Media
    • CVE-2026-10987: Integer overflow in V8
    • CVE-2026-10988: Use after free in Views
    • CVE-2026-10989: Inappropriate implementation in V8
    • CVE-2026-10990: Use after free in Glic
    • CVE-2026-10991: Use after free in V8
    • CVE-2026-10992: Insufficient data validation in Animation
    • CVE-2026-10993: Heap buffer overflow in Skia
    • CVE-2026-10994: Uninitialized Use in ANGLE
    • CVE-2026-10995: Heap buffer overflow in TabStrip
    • CVE-2026-10996: Inappropriate implementation in Workers
    • CVE-2026-10997: Insufficient policy enforcement in Extensions
    • CVE-2026-10998: Out of bounds read in Media
    • CVE-2026-10999: Out of bounds memory access in ANGLE
    • CVE-2026-11000: Use after free in Fonts
    • CVE-2026-11001: Incorrect security UI in Payments
    • CVE-2026-11002: Use after free in Autofill
    • CVE-2026-11003: Use after free in WebRTC
    • CVE-2026-11004: Out of bounds read in ANGLE
    • CVE-2026-11005: Out of bounds read in ANGLE
    • CVE-2026-11006: Out of bounds read in Dawn
    • CVE-2026-11007: Insufficient validation of untrusted input in WebView
    • CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
    • CVE-2026-11009: Use after free in USB
    • CVE-2026-11010: Use after free in WebShare
    • CVE-2026-11011: Insufficient policy enforcement in Password Manager
    • CVE-2026-11012: Use after free in Serial
    • CVE-2026-11013: Insufficient validation of untrusted input in Network
    • CVE-2026-11014: Insufficient policy enforcement in Extensions
    • CVE-2026-11015: Out of bounds read in WebGPU
    • CVE-2026-11016: Insufficient validation of untrusted input in Network
    • CVE-2026-11017: Inappropriate implementation in Link Preview
    • CVE-2026-11018: Insufficient policy enforcement in Actor
    • CVE-2026-11019: Inappropriate implementation in Payments
    • CVE-2026-11020: Inappropriate implementation in Extensions
    • CVE-2026-11021: Insufficient validation of untrusted input in GPU
    • CVE-2026-11022: Insufficient validation of untrusted input in DevTools
    • CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
    • CVE-2026-11024: Stack buffer overflow in Skia
    • CVE-2026-11025: Insufficient policy enforcement in Navigation
    • CVE-2026-11026: Insufficient policy enforcement in Extensions
    • CVE-2026-11027: Insufficient validation of untrusted input in Glic
    • CVE-2026-11028: Use after free in Media
    • CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
    • CVE-2026-11030: Use after free in Network
    • CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
    • CVE-2026-11032: Insufficient data validation in Password Manager
    • CVE-2026-11033: Uninitialized Use in WebML
    • CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
    • CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
    • CVE-2026-11036: Inappropriate implementation in DOM
    • CVE-2026-11037: Out of bounds write in Codecs
    • CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
    • CVE-2026-11039: Uninitialized Use in Skia
    • CVE-2026-11040: Use after free in ANGLE
    • CVE-2026-11041: Insufficient validation of untrusted input in Media
    • CVE-2026-11042: Use after free in Views
    • CVE-2026-11043: Out of bounds write in ANGLE
    • CVE-2026-11044: Integer overflow in ANGLE
    • CVE-2026-11045: Insufficient validation of untrusted input in GPU
    • CVE-2026-11046: Insufficient validation of untrusted input in Media
    • CVE-2026-11047: Insufficient validation of untrusted input in Base
    • CVE-2026-11048: Inappropriate implementation in Extensions
    • CVE-2026-11049: Use after free in Password Manager
    • CVE-2026-11050: Use after free in V8
    • CVE-2026-11051: Out of bounds read in ANGLE
    • CVE-2026-11052: Type Confusion in GPU
    • CVE-2026-11053: VULNERABILITY in WebRTC
    • CVE-2026-11054: Use after free in WebRTC
    • CVE-2026-11055: Use after free in ANGLE
    • CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
    • CVE-2026-11057: Uninitialized Use in Skia
    • CVE-2026-11058: Integer overflow in CredentialProvider
    • CVE-2026-11059: Use after free in Blink
    • CVE-2026-11060: Use after free in Media
    • CVE-2026-11061: Out of bounds read in ANGLE
    • CVE-2026-11062: Insufficient policy enforcement in Extensions
    • CVE-2026-11063: Insufficient validation of untrusted input in WebNN
    • CVE-2026-11064: Uninitialized Use in GPU
    • CVE-2026-11065: Use after free in ANGLE
    • CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
    • CVE-2026-11067: Uninitialized Use in Dawn
    • CVE-2026-11068: Use after free in WebSockets
    • CVE-2026-11069: Insufficient validation of untrusted input in Cast
    • CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
    • CVE-2026-11071: Use after free in Base
    • CVE-2026-11072: Use after free in WebView
    • CVE-2026-11073: Use after free in WebGL
    • CVE-2026-11074: Use after free in WebRTC
    • CVE-2026-11075: Out of bounds read in V8
    • CVE-2026-11076: Type Confusion in CSS
    • CVE-2026-11077: Out of bounds read in Dawn
    • CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
    • CVE-2026-11079: Insufficient validation of untrusted input in Codecs
    • CVE-2026-11080: Use after free in WebView
    • CVE-2026-11081: Policy bypass in Canvas
    • CVE-2026-11082: Use after free in GPU
    • CVE-2026-11083: Inappropriate implementation in Password Manager
    • CVE-2026-11084: Inappropriate implementation in Password Manager
    • CVE-2026-11085: Integer overflow in GPU
    • CVE-2026-11086: Insufficient validation of untrusted input in Dawn
    • CVE-2026-11087: Uninitialized Use in ANGLE
    • CVE-2026-11088: Integer overflow in ANGLE
    • CVE-2026-11089: Uninitialized Use in Media
    • CVE-2026-11090: Uninitialized Use in ANGLE
    • CVE-2026-11091: Inappropriate implementation in Dawn
    • CVE-2026-11092: Insufficient policy enforcement in DevTools
    • CVE-2026-11093: Insufficient validation of untrusted input in Printing
    • CVE-2026-11094: Use after free in Codecs
    • CVE-2026-11095: Insufficient validation of untrusted input in Codecs
    • CVE-2026-11096: Out of bounds read in WebRTC
    • CVE-2026-11097: Inappropriate implementation in WebView
    • CVE-2026-11098: Insufficient validation of untrusted input in GPU
    • CVE-2026-11099: Vulnerability in Skia
    • CVE-2026-11100: Use after free in File Input
    • CVE-2026-11101: Uninitialized Use in Dawn
    • CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
    • CVE-2026-11103: Inappropriate implementation in Installer
    • CVE-2026-11104: Uninitialized Use in ANGLE
    • CVE-2026-11105: Insufficient validation of untrusted input in WebUI
    • CVE-2026-11106: Inappropriate implementation in Media
    • CVE-2026-11107: Inappropriate implementation in Downloads
    • CVE-2026-11108: Inappropriate implementation in NFC
    • CVE-2026-11109: Uninitialized Use in ANGLE
    • CVE-2026-11110: Uninitialized Use in ANGLE
    • CVE-2026-11111: Out of bounds read in ANGLE
    • CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
    • CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
    • CVE-2026-11114: Use after free in Device Trust
    • CVE-2026-11115: Use after free in Updater
    • CVE-2026-11116: Use after free in Chromoting
    • CVE-2026-11117: Use after free in Views
    • CVE-2026-11118: Use after free in WebRTC
    • CVE-2026-11119: Insufficient validation of untrusted input in GPU
    • CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
    • CVE-2026-11121: Insufficient validation of untrusted input in Skia
    • CVE-2026-11122: Inappropriate implementation in Keyboard
    • CVE-2026-11123: Uninitialized Use in ANGLE
    • CVE-2026-11124: Heap buffer overflow in Skia
    • CVE-2026-11125: Use after free in Compositing
    • CVE-2026-11126: Insufficient validation of untrusted input in DevTools
    • CVE-2026-11127: Inappropriate implementation in WebAPKs
    • CVE-2026-11128: Insufficient validation of untrusted input in Web Share
    • CVE-2026-11129: Inappropriate implementation in Extensions
    • CVE-2026-11130: Use after free in Media
    • CVE-2026-11131: Use after free in Autofill
    • CVE-2026-11132: Policy bypass in Paint
    • CVE-2026-11133: Insufficient policy enforcement in Paint
    • CVE-2026-11134: Insufficient data validation in Media
    • CVE-2026-11135: Insufficient policy enforcement in Autofill
    • CVE-2026-11136: Use after free in Canvas
    • CVE-2026-11137: Uninitialized Use in ANGLE
    • CVE-2026-11138: Uninitialized Use in ANGLE
    • CVE-2026-11139: Policy bypass in Paint
    • CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
    • CVE-2026-11141: Uninitialized Use in Audio
    • CVE-2026-11142: Policy bypass in Paint
    • CVE-2026-11143: Heap buffer overflow in Extensions
    • CVE-2026-11144: Use after free in Media
    • CVE-2026-11145: Race in Geolocation
    • CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
    • CVE-2026-11147: Use after free in WebML
    • CVE-2026-11148: Inappropriate implementation in Payments
    • CVE-2026-11149: Insufficient validation of untrusted input in Extensions
    • CVE-2026-11150: Inappropriate implementation in XML
    • CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
    • CVE-2026-11152: Object lifecycle issue in Dawn
    • CVE-2026-11153: Side-channel information leakage in Forms
    • CVE-2026-11154: Use after free in Dawn
    • CVE-2026-11155: Insufficient policy enforcement in CSS
    • CVE-2026-11156: Inappropriate implementation in CSS
    • CVE-2026-11157: Script injection in Accessibility
    • CVE-2026-11158: Insufficient validation of untrusted input in Downloads
    • CVE-2026-11159: Uninitialized Use in Skia
    • CVE-2026-11160: Out of bounds read in Input
    • CVE-2026-11161: Insufficient data validation in DataTransfer
    • CVE-2026-11162: Insufficient policy enforcement in CSS
    • CVE-2026-11163: Use after free in Messages
    • CVE-2026-11164: Use after free in Blink
    • CVE-2026-11165: Use after free in WebMIDI
    • CVE-2026-11166: Inappropriate implementation in SVG
    • CVE-2026-11167: Inappropriate implementation in WebView
    • CVE-2026-11168: Insufficient policy enforcement in Extensions
    • CVE-2026-11169: Inappropriate implementation in XML
    • CVE-2026-11170: Inappropriate implementation in Chromoting
    • CVE-2026-11171: Integer overflow in Blink
    • CVE-2026-11172: Incorrect security UI in Contact Picker
    • CVE-2026-11173: Out of bounds write in V8
    • CVE-2026-11174: Insufficient policy enforcement in Site Isolation
    • CVE-2026-11175: Incorrect security UI in Messages
    • CVE-2026-11176: Inappropriate implementation in Media
    • CVE-2026-11177: Use after free in Omnibox
    • CVE-2026-11178: Policy bypass in WebView
    • CVE-2026-11179: Inappropriate implementation in ORB
    • CVE-2026-11180: Policy bypass in SVG
    • CVE-2026-11181: Inappropriate implementation in Media Session
    • CVE-2026-11182: Inappropriate implementation in SVG
    • CVE-2026-11183: Out of bounds read in GWP-ASan
    • CVE-2026-11184: Insufficient policy enforcement in Actor
    • CVE-2026-11185: Use after free in V8
    • CVE-2026-11186: Inappropriate implementation in CSS
    • CVE-2026-11187: Insufficient policy enforcement in Glic
    • CVE-2026-11188: Use after free in USB
    • CVE-2026-11189: Insufficient validation of untrusted input in DevTools
    • CVE-2026-11190: Insufficient policy enforcement in Extensions
    • CVE-2026-11191: Out of bounds memory access in ANGLE
    • CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
    • CVE-2026-11193: Insufficient policy enforcement in Password Manager
    • CVE-2026-11194: Inappropriate implementation in Network
    • CVE-2026-11195: Inappropriate implementation in MHTML
    • CVE-2026-11196: Type Confusion in XML
    • CVE-2026-11197: Insufficient policy enforcement in Workers
    • CVE-2026-11198: Insufficient validation of untrusted input in Codecs
    • CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
    • CVE-2026-11200: Inappropriate implementation in WebRTC
    • CVE-2026-11201: Use after free in ServiceWorker
    • CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
    • CVE-2026-11203: Policy bypass in GPU
    • CVE-2026-11204: Inappropriate implementation in Signin
    • CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
    • CVE-2026-11206: Policy bypass in ServiceWorker
    • CVE-2026-11207: Insufficient validation of untrusted input in Autofill
    • CVE-2026-11208: Use after free in Codecs
    • CVE-2026-11209: Insufficient policy enforcement in Passwords
    • CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
    • CVE-2026-11211: Integer overflow in V8
    • CVE-2026-11212: Insufficient policy enforcement in DevTools
    • CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
    • CVE-2026-11214: Inappropriate implementation in Chrome for iOS
    • CVE-2026-11215: Inappropriate implementation in Cronet
    • CVE-2026-11216: Incorrect security UI in File Input
    • CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
    • CVE-2026-11218: Inappropriate implementation in PlatformIntegration
    • CVE-2026-11219: Insufficient data validation in Navigation
    • CVE-2026-11220: Insufficient validation of untrusted input in Navigation
    • CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
    • CVE-2026-11222: Incorrect security UI in Tab Strip
    • CVE-2026-11223: Insufficient validation of untrusted input in Network
    • CVE-2026-11224: Use after free in Chromoting
    • CVE-2026-11225: Incorrect security UI in WebUI
    • CVE-2026-11226: Insufficient policy enforcement in PreviewTab
    • CVE-2026-11227: Incorrect security UI in Tab Hover Cards
    • CVE-2026-11228: Incorrect security UI in File Input
    • CVE-2026-11229: Insufficient policy enforcement in Enterprise
    • CVE-2026-11230: Use after free in Extensions
    • CVE-2026-11231: Inappropriate implementation in Safe Browsing
    • CVE-2026-11232: Inappropriate implementation in TabGroups
    • CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
    • CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
    • CVE-2026-11235: Insufficient validation of untrusted input in Compositing
    • CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
    • CVE-2026-11237: Insufficient validation of untrusted input in Media
    • CVE-2026-11238: Inappropriate implementation in DevTools
    • CVE-2026-11239: Insufficient validation of untrusted input in Extensions
    • CVE-2026-11240: Insufficient validation of untrusted input in Loader
    • CVE-2026-11241: Insufficient validation of untrusted input in Cast
    • CVE-2026-11242: Insufficient validation of untrusted input in Plugins
    • CVE-2026-11243: Incorrect security UI in Downloads
    • CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
    • CVE-2026-11245: Inappropriate implementation in Payments
    • CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
    • CVE-2026-11247: Insufficient policy enforcement in CustomTabs
    • CVE-2026-11248: Policy bypass in Google Lens
    • CVE-2026-11249: Use after free in Network
    • CVE-2026-11250: Inappropriate implementation in DevTools
    • CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
    • CVE-2026-11252: Policy bypass in Content Settings
    • CVE-2026-11253: Race in Permissions
    • CVE-2026-11254: Inappropriate implementation in Permissions
    • CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
    • CVE-2026-11256: Out of bounds read in GPU
    • CVE-2026-11257: Inappropriate implementation in Browser
    • CVE-2026-11258: Inappropriate implementation in File System Access
    • CVE-2026-11259: Insufficient validation of untrusted input in Cast
    • CVE-2026-11260: Policy bypass in Permissions
    • CVE-2026-11261: Insufficient validation of untrusted input in PDF
    • CVE-2026-11262: Use after free in TabStrip
    • CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
    • CVE-2026-11264: Policy bypass in Content Security Policy
    • CVE-2026-11265: Insufficient data validation in Autofill
    • CVE-2026-11266: Policy bypass in SafeBrowsing
    • CVE-2026-11267: Insufficient policy enforcement in Extensions
    • CVE-2026-11268: Uninitialized Use in ANGLE
    • CVE-2026-11269: Inappropriate implementation in Extensions
    • CVE-2026-11270: Inappropriate implementation in UI
    • CVE-2026-11271: Incorrect security UI in Passwords
    • CVE-2026-11272: Insufficient validation of untrusted input in Reading List
    • CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
    • CVE-2026-11274: Inappropriate implementation in DOM Distiller
    • CVE-2026-11275: Insufficient policy enforcement in Page Info
    • CVE-2026-11276: Inappropriate implementation in Cast
    • CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
    • CVE-2026-11278: Inappropriate implementation in CustomTabs
    • CVE-2026-11279: Out of bounds read in DevTools
    • CVE-2026-11280: Insufficient validation of untrusted input in Signin
    • CVE-2026-11281: Integer overflow in Chromoting
    • CVE-2026-11282: Policy bypass in Sandbox
    • CVE-2026-11283: Policy bypass in Shortcuts
    • CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
    • CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
    • CVE-2026-11286: Insufficient validation of untrusted input in Wallet
    • CVE-2026-11287: Insufficient validation of untrusted input in Navigation
    • CVE-2026-11288: Policy bypass in CSS
    • CVE-2026-11289: Side-channel information leakage in Paint
    • CVE-2026-11290: Integer overflow in WebView
    • CVE-2026-11291: Policy bypass in Android Autofill
    • CVE-2026-11292: Policy bypass in Blink
    • CVE-2026-11293: Use after free in Input
    • CVE-2026-11294: Inappropriate implementation in Passwords
    • CVE-2026-11295: Inappropriate implementation in WebView
    • CVE-2026-11296: Inappropriate implementation in ImageCapture
    • CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
    • CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
    • CVE-2026-11299: Out of bounds read in Fonts
    • CVE-2026-11300: Inappropriate implementation in Permissions
    • CVE-2026-11301: Out of bounds read in LiveCaption
    • CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
    • CVE-2026-11303: Use after free in PDFium
    • CVE-2026-11304: Use after free in PDFium
    • CVE-2026-11305: Use after free in PDFium
    • CVE-2026-11306: Use after free in PDFium
    • CVE-2026-11307: Use after free in PDFium
    • CVE-2026-11308: Inappropriate implementation in Extensions
    • CVE-2026-11309: Insufficient policy enforcement in History
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
149.0.7827.155-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "149.0.7827.155-bp160.1.1",
            "chromium":  "149.0.7827.155-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21135-1.json"