openSUSE-SU-2026:21363-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21363-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21363-1
Upstream
CVE (15)
  • CVE-2026-15764
  • CVE-2026-15765
  • CVE-2026-15766
  • CVE-2026-15767
  • CVE-2026-15768
  • CVE-2026-15769
  • CVE-2026-15770
  • CVE-2026-15771
  • CVE-2026-15772
  • CVE-2026-15773
  • CVE-2026-15774
  • CVE-2026-15775
  • CVE-2026-15776
  • CVE-2026-15777
  • CVE-2026-15778
Related
CVE (15)
  • CVE-2026-15764
  • CVE-2026-15765
  • CVE-2026-15766
  • CVE-2026-15767
  • CVE-2026-15768
  • CVE-2026-15769
  • CVE-2026-15770
  • CVE-2026-15771
  • CVE-2026-15772
  • CVE-2026-15773
  • CVE-2026-15774
  • CVE-2026-15775
  • CVE-2026-15776
  • CVE-2026-15777
  • CVE-2026-15778
Withdrawn
2026-09-02T14:00:13Z
Published
2026-07-16T21:56:42Z
Modified
2026-09-02T14:00:13Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 150.0.7871.124 (boo#1271415):
    • CVE-2026-15764: Use after free in Ozone
    • CVE-2026-15765: Use after free in Ozone
    • CVE-2026-15766: Uninitialized Use in Skia
    • CVE-2026-15767: Heap buffer overflow in libyuv
    • CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
    • CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
    • CVE-2026-15770: Uninitialized Use in V8
    • CVE-2026-15771: Insufficient validation of untrusted input in Media
    • CVE-2026-15772: Use after free in GPU
    • CVE-2026-15773: Use after free in Core
    • CVE-2026-15774: Use after free in Skia
    • CVE-2026-15775: Insufficient policy enforcement in V8
    • CVE-2026-15776: Type Confusion in V8
    • CVE-2026-15777: Use after free in UI
    • CVE-2026-15778: Insufficient validation of untrusted input in Navigation
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
150.0.7871.124-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "150.0.7871.124-bp160.1.1",
            "chromium":  "150.0.7871.124-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21363-1.json"