openSUSE-SU-2026:21921-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21921-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21921-1
Upstream
CVE (16)
  • CVE-2026-93372
  • CVE-2026-93373
  • CVE-2026-93374
  • CVE-2026-93375
  • CVE-2026-93376
  • CVE-2026-93377
  • CVE-2026-93378
  • CVE-2026-93379
  • CVE-2026-93380
  • CVE-2026-93381
  • CVE-2026-93382
  • CVE-2026-93383
  • CVE-2026-93384
  • CVE-2026-93385
  • CVE-2026-93386
  • CVE-2026-93387
Related
CVE (16)
  • CVE-2026-93372
  • CVE-2026-93373
  • CVE-2026-93374
  • CVE-2026-93375
  • CVE-2026-93376
  • CVE-2026-93377
  • CVE-2026-93378
  • CVE-2026-93379
  • CVE-2026-93380
  • CVE-2026-93381
  • CVE-2026-93382
  • CVE-2026-93383
  • CVE-2026-93384
  • CVE-2026-93385
  • CVE-2026-93386
  • CVE-2026-93387
Published
2026-09-20T05:23:04Z
Modified
2026-09-25T18:23:13Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 153.0.8010.52 (boo#1281123):
    • CVE-2026-93374: Use after free in Dawn
    • CVE-2026-93372: Buffer overflow in WebGL
    • CVE-2026-93375: Incorrect reference resolution in Tracing
    • CVE-2026-93382: Use after free in PDFium
    • CVE-2026-93387: Improper state validation in Skia
    • CVE-2026-93373: Use after free in Extensions
    • CVE-2026-93381: Buffer overflow in PDFium
    • CVE-2026-93379: Incorrect authorization in ORB
    • CVE-2026-93377: Type confusion in V8
    • CVE-2026-93380: Race condition in FileSystem
    • CVE-2026-93384: Server-side request forgery in Omnibox
    • CVE-2026-93383: Information leak in Permissions
    • CVE-2026-93376: Out of bounds read in DataTransfer
    • CVE-2026-93378: Missing authorization in Storage
    • CVE-2026-93385: Information leak in Paint
    • CVE-2026-93386: UI misrepresentation in WebAppInstalls
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
153.0.8010.52-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "153.0.8010.52-bp160.1.1",
            "chromium":  "153.0.8010.52-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21921-1.json"