openSUSE-SU-2026:22041-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22041-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22041-1
Upstream
CVE (246)
  • CVE-2026-106179
  • CVE-2026-106180
  • CVE-2026-106181
  • CVE-2026-106182
  • CVE-2026-106183
  • CVE-2026-106184
  • CVE-2026-106185
  • CVE-2026-106186
  • CVE-2026-106187
  • CVE-2026-106188
  • CVE-2026-106189
  • CVE-2026-106190
  • CVE-2026-106191
  • CVE-2026-106192
  • CVE-2026-106193
  • CVE-2026-106194
  • CVE-2026-106195
  • CVE-2026-106196
  • CVE-2026-106197
  • CVE-2026-106198
  • CVE-2026-106199
  • CVE-2026-106200
  • CVE-2026-106201
  • CVE-2026-106202
  • CVE-2026-106203
  • CVE-2026-106204
  • CVE-2026-106205
  • CVE-2026-106206
  • CVE-2026-106207
  • CVE-2026-106208
  • CVE-2026-106209
  • CVE-2026-106210
  • CVE-2026-106211
  • CVE-2026-106212
  • CVE-2026-106213
  • CVE-2026-106214
  • CVE-2026-106215
  • CVE-2026-106216
  • CVE-2026-106217
  • CVE-2026-106220
  • CVE-2026-106221
  • CVE-2026-106222
  • CVE-2026-106223
  • CVE-2026-106224
  • CVE-2026-106225
  • CVE-2026-106226
  • CVE-2026-106227
  • CVE-2026-106228
  • CVE-2026-106229
  • CVE-2026-106230
  • CVE-2026-106231
  • CVE-2026-106232
  • CVE-2026-106233
  • CVE-2026-106234
  • CVE-2026-106235
  • CVE-2026-106236
  • CVE-2026-106237
  • CVE-2026-106238
  • CVE-2026-106239
  • CVE-2026-106240
  • CVE-2026-106241
  • CVE-2026-106242
  • CVE-2026-106243
  • CVE-2026-106244
  • CVE-2026-106245
  • CVE-2026-106246
  • CVE-2026-106247
  • CVE-2026-106248
  • CVE-2026-106249
  • CVE-2026-106250
  • CVE-2026-106251
  • CVE-2026-106252
  • CVE-2026-106253
  • CVE-2026-106254
  • CVE-2026-106255
  • CVE-2026-106256
  • CVE-2026-106257
  • CVE-2026-106258
  • CVE-2026-106259
  • CVE-2026-106260
  • CVE-2026-106261
  • CVE-2026-106262
  • CVE-2026-106263
  • CVE-2026-106264
  • CVE-2026-106265
  • CVE-2026-106266
  • CVE-2026-106267
  • CVE-2026-106268
  • CVE-2026-106269
  • CVE-2026-106270
  • CVE-2026-106271
  • CVE-2026-106272
  • CVE-2026-106273
  • CVE-2026-106274
  • CVE-2026-106275
  • CVE-2026-106276
  • CVE-2026-106277
  • CVE-2026-106278
  • CVE-2026-106279
  • CVE-2026-106280
  • CVE-2026-106281
  • CVE-2026-106282
  • CVE-2026-106283
  • CVE-2026-106284
  • CVE-2026-106285
  • CVE-2026-106286
  • CVE-2026-106287
  • CVE-2026-106288
  • CVE-2026-106289
  • CVE-2026-106290
  • CVE-2026-106291
  • CVE-2026-106292
  • CVE-2026-106293
  • CVE-2026-106294
  • CVE-2026-106295
  • CVE-2026-106296
  • CVE-2026-106297
  • CVE-2026-106298
  • CVE-2026-106299
  • CVE-2026-106300
  • CVE-2026-106301
  • CVE-2026-106302
  • CVE-2026-106303
  • CVE-2026-106304
  • CVE-2026-106305
  • CVE-2026-106306
  • CVE-2026-106307
  • CVE-2026-106308
  • CVE-2026-106309
  • CVE-2026-106310
  • CVE-2026-106311
  • CVE-2026-106312
  • CVE-2026-106313
  • CVE-2026-106314
  • CVE-2026-106315
  • CVE-2026-106316
  • CVE-2026-106317
  • CVE-2026-106318
  • CVE-2026-106320
  • CVE-2026-106321
  • CVE-2026-106322
  • CVE-2026-106323
  • CVE-2026-106324
  • CVE-2026-106325
  • CVE-2026-106326
  • CVE-2026-106327
  • CVE-2026-106328
  • CVE-2026-106329
  • CVE-2026-106330
  • CVE-2026-106331
  • CVE-2026-106332
  • CVE-2026-106333
  • CVE-2026-106334
  • CVE-2026-106335
  • CVE-2026-106336
  • CVE-2026-106337
  • CVE-2026-106338
  • CVE-2026-106339
  • CVE-2026-106340
  • CVE-2026-106341
  • CVE-2026-106342
  • CVE-2026-106343
  • CVE-2026-106344
  • CVE-2026-106345
  • CVE-2026-106346
  • CVE-2026-106347
  • CVE-2026-106348
  • CVE-2026-106349
  • CVE-2026-106350
  • CVE-2026-106351
  • CVE-2026-106352
  • CVE-2026-106353
  • CVE-2026-106354
  • CVE-2026-106355
  • CVE-2026-106356
  • CVE-2026-106357
  • CVE-2026-106358
  • CVE-2026-106359
  • CVE-2026-106360
  • CVE-2026-106361
  • CVE-2026-106362
  • CVE-2026-106363
  • CVE-2026-106364
  • CVE-2026-106365
  • CVE-2026-106366
  • CVE-2026-106367
  • CVE-2026-106368
  • CVE-2026-106369
  • CVE-2026-106370
  • CVE-2026-106371
  • CVE-2026-106372
  • CVE-2026-106373
  • CVE-2026-106374
  • CVE-2026-106375
  • CVE-2026-106376
  • CVE-2026-106377
  • CVE-2026-106378
  • CVE-2026-106379
  • CVE-2026-106380
  • CVE-2026-106381
  • CVE-2026-106382
  • CVE-2026-106383
  • CVE-2026-106384
  • CVE-2026-106385
  • CVE-2026-106386
  • CVE-2026-106387
  • CVE-2026-106388
  • CVE-2026-106389
  • CVE-2026-106390
  • CVE-2026-106391
  • CVE-2026-106392
  • CVE-2026-106393
  • CVE-2026-106394
  • CVE-2026-106395
  • CVE-2026-106396
  • CVE-2026-106397
  • CVE-2026-106398
  • CVE-2026-106399
  • CVE-2026-106400
  • CVE-2026-106401
  • CVE-2026-106402
  • CVE-2026-106403
  • CVE-2026-106404
  • CVE-2026-106405
  • CVE-2026-106406
  • CVE-2026-106407
  • CVE-2026-106408
  • CVE-2026-106409
  • CVE-2026-106410
  • CVE-2026-106411
  • CVE-2026-106412
  • CVE-2026-106413
  • CVE-2026-106414
  • CVE-2026-106415
  • CVE-2026-106416
  • CVE-2026-106417
  • CVE-2026-106418
  • CVE-2026-106419
  • CVE-2026-106420
  • CVE-2026-106421
  • CVE-2026-106422
  • CVE-2026-106423
  • CVE-2026-106424
  • CVE-2026-106425
  • CVE-2026-106426
  • CVE-2026-106427
Related
Published
2026-10-09T02:54:37Z
Modified
2026-10-09T18:15:03Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354):
    • CVE-2026-106382: Use after free in Chromecast
    • CVE-2026-106197: Use after free in Browser
    • CVE-2026-106358: Use after free in Navigation
    • CVE-2026-106347: Use after free in Track
    • CVE-2026-106245: Uninitialized resource in ANGLE
    • CVE-2026-106327: Incorrect authorization in Core
    • CVE-2026-106366: Incomplete cleanup in CustomTabs
    • CVE-2026-106258: Uninitialized resource in ANGLE
    • CVE-2026-106376: Uninitialized resource in ANGLE
    • CVE-2026-106308: Incorrect reference resolution in Autofill
    • CVE-2026-106215: Uninitialized resource in ANGLE
    • CVE-2026-106369: Missing authorization in Translate
    • CVE-2026-106293: Type confusion in ANGLE
    • CVE-2026-106377: Race condition in Fonts
    • CVE-2026-106412: Race condition in Core
    • CVE-2026-106243: Incomplete cleanup in Proxy Auth
    • CVE-2026-106214: Information leak in Proxy
    • CVE-2026-106364: Incorrect authorization in Omnibox
    • CVE-2026-106239: Integer overflow in WebGL
    • CVE-2026-106426: Race condition in Fonts
    • CVE-2026-106419: Use after free in ANGLE
    • CVE-2026-106396: Improper input validation in Omnibox
    • CVE-2026-106323: Missing authorization in Chrome for iOS
    • CVE-2026-106231: Uninitialized resource in Dawn
    • CVE-2026-106202: Uninitialized resource in ANGLE
    • CVE-2026-106273: Uninitialized resource in Video
    • CVE-2026-106203: Incomplete cleanup in Autofill
    • CVE-2026-106332: Integer overflow in Compositing
    • CVE-2026-106281: Use after free in Tint
    • CVE-2026-106298: Use after free in Chrome Tabs
    • CVE-2026-106193: Use after free in Parser
    • CVE-2026-106255: Race condition in V8
    • CVE-2026-106393: Use after free in Storage
    • CVE-2026-106227: Use after free in Core
    • CVE-2026-106379: Uninitialized resource in Skia
    • CVE-2026-106211: Use after free in TabStrip
    • CVE-2026-106329: Incorrect authorization in FileSystem
    • CVE-2026-106248: Use after free in Bindings
    • CVE-2026-106235: Use after free in WebAudio
    • CVE-2026-106257: Use after free in HTML
    • CVE-2026-106268: Use after free in WebRTC
    • CVE-2026-106278: Use after free in Select
    • CVE-2026-106233: Use after free in Metrics
    • CVE-2026-106318: Use after free in Media
    • CVE-2026-106411: Use after free in Parser
    • CVE-2026-106423: Use after free in Media
    • CVE-2026-106346: Improper state validation in DevTools
    • CVE-2026-106190: Use after free in Media
    • CVE-2026-106357: Use after free in WebRTC
    • CVE-2026-106240: Type confusion in V8
    • CVE-2026-106184: Uninitialized resource in Media
    • CVE-2026-106383: Use after free in Media
    • CVE-2026-106349: Use after free in V8
    • CVE-2026-106421: Use after free in PDF
    • CVE-2026-106204: Use after free in PDF
    • CVE-2026-106200: Use after free in Track
    • CVE-2026-106265: UI misrepresentation in File
    • CVE-2026-106238: Race condition in Fonts
    • CVE-2026-106324: Incorrect authorization in WebAppInstalls
    • CVE-2026-106420: Incorrect calculation in API
    • CVE-2026-106222: Incorrect authorization in Sync
    • CVE-2026-106208: Missing authorization in API
    • CVE-2026-106286: Confused deputy in Omnibox
    • CVE-2026-106181: Incorrect reference resolution in DevTools
    • CVE-2026-106315: Use after free in Modularization
    • CVE-2026-106274: Incorrect reference resolution in Browser
    • CVE-2026-106365: Missing authorization in Animation
    • CVE-2026-106267: Missing authorization in Network
    • CVE-2026-106194: Missing authorization in WebAppInstalls
    • CVE-2026-106313: Incorrect authorization in Browser
    • CVE-2026-106283: Use after free in Streaming
    • CVE-2026-106291: Use after free in GarbageCollection
    • CVE-2026-106300: Race condition in CacheStorage
    • CVE-2026-106314: Incorrect authorization in Bluetooth
    • CVE-2026-106223: Uninitialized resource in GPU
    • CVE-2026-106242: Information leak in Omnibox
    • CVE-2026-106241: Incorrect authorization in Search
    • CVE-2026-106381: Incorrect authorization in Passwords
    • CVE-2026-106217: Missing authorization in Google Lens
    • CVE-2026-106425: Missing authorization in BrowserTag
    • CVE-2026-106225: Missing authorization in Autofill
    • CVE-2026-106363: Missing authorization in FullScreen
    • CVE-2026-106266: Confused deputy in Contextual Tasks
    • CVE-2026-106189: Code injection in ReaderMode
    • CVE-2026-106335: Use after free in Media
    • CVE-2026-106415: Information leak in Enterprise
    • CVE-2026-106224: Missing authorization in Google Lens
    • CVE-2026-106185: Improper input validation in Viz
    • CVE-2026-106244: Incorrect authorization in Permissions
    • CVE-2026-106407: Incorrect authorization in GetUserMedia
    • CVE-2026-106389: Incorrect authorization in USB
    • CVE-2026-106397: Incorrect authorization in Mobile
    • CVE-2026-106196: Missing authorization in Navigation
    • CVE-2026-106414: Improper input validation in Mobile
    • CVE-2026-106408: Protection mechanism failure in Mobile
    • CVE-2026-106261: Uninitialized resource in Video
    • CVE-2026-106406: Missing authorization in Mobile
    • CVE-2026-106290: Uninitialized resource in GPU
    • CVE-2026-106378: Privilege elevation in Sandbox
    • CVE-2026-106198: Missing authorization in FileSystem
    • CVE-2026-106326: Confused deputy in UI
    • CVE-2026-106354: Improper resource exposure in Extensions
    • CVE-2026-106342: Information leak in Autofill
    • CVE-2026-106424: Information leak in Audio
    • CVE-2026-106253: Incorrect authorization in Extensions
    • CVE-2026-106279: Incorrect reference resolution in Passwords
    • CVE-2026-106361: Incorrect provision of specified functionality in Mobile
    • CVE-2026-106402: Incorrect authorization in Extensions
    • CVE-2026-106311: Clickjacking in PermissionElement
    • CVE-2026-106246: Incorrect authorization in Browser
    • CVE-2026-106302: UI misrepresentation in PermissionElement
    • CVE-2026-106416: Code injection in Extensions
    • CVE-2026-106182: UI misrepresentation in Paint
    • CVE-2026-106282: UI misrepresentation in WebOTP
    • CVE-2026-106392: Information leak in WebAudio
    • CVE-2026-106188: Confused deputy in SignIn
    • CVE-2026-106370: Uninitialized resource in GPU
    • CVE-2026-106356: Clickjacking in EVP
    • CVE-2026-106405: Race condition in CustomTabs
    • CVE-2026-106322: Open redirect in AppManifest
    • CVE-2026-106280: Incorrect authorization in PermissionElement
    • CVE-2026-106206: Improper input validation in Mobile
    • CVE-2026-106180: Observable discrepancy in Animation
    • CVE-2026-106303: Observable discrepancy in Autofill AI
    • CVE-2026-106201: Race condition in V8
    • CVE-2026-106333: Incorrect authorization in Input
    • CVE-2026-106228: Confused deputy in Google Lens
    • CVE-2026-106289: Missing authorization in FedCM
    • CVE-2026-106277: Information leak in Animation
    • CVE-2026-106410: Missing authorization in Permissions
    • CVE-2026-106284: Out of bounds read in Printing
    • CVE-2026-106209: UI misrepresentation in Mobile
    • CVE-2026-106216: Cross-site request forgery in ReadingList
    • CVE-2026-106328: Incorrect authorization in PDF
    • CVE-2026-106387: Missing authorization in Mobile
    • CVE-2026-106400: Clickjacking in Messages
    • CVE-2026-106205: Missing authorization in Passwords
    • CVE-2026-106213: Race condition in WebAudio
    • CVE-2026-106230: Incorrect reference resolution in Offline
    • CVE-2026-106367: Missing authorization in Mobile
    • CVE-2026-106226: Improper input validation in Compositing
    • CVE-2026-106229: UI misrepresentation in FileSystem
    • CVE-2026-106232: UI misrepresentation in Browser
    • CVE-2026-106391: Incorrect authorization in WebShare
    • CVE-2026-106336: Observable discrepancy in Paint
    • CVE-2026-106403: Incorrect authorization in Accessibility
    • CVE-2026-106373: Use after free in Fonts
    • CVE-2026-106301: Confused deputy in Contextual Tasks
    • CVE-2026-106292: Buffer overflow in Fonts
    • CVE-2026-106262: Incomplete cleanup in GetUserMedia
    • CVE-2026-106360: Information leak in Payments
    • CVE-2026-106375: Incomplete cleanup in Dawn
    • CVE-2026-106348: Information leak in Animation
    • CVE-2026-106307: Incorrect authorization in Network
    • CVE-2026-106212: Incorrect authorization in Autofill
    • CVE-2026-106398: Incorrect authorization in Media
    • CVE-2026-106388: Missing authorization in DataTransfer
    • CVE-2026-106271: Missing authorization in Workers
    • CVE-2026-106395: Uninitialized resource in Dawn
    • CVE-2026-106304: Out of bounds read in ANGLE
    • CVE-2026-106401: Out of bounds write in Media
    • CVE-2026-106330: Information leak in Paint
    • CVE-2026-106295: Incorrect authorization in Unbounded Element
    • CVE-2026-106352: Incorrect authorization in WebProtect
    • CVE-2026-106337: UI misrepresentation in UI
    • CVE-2026-106263: Improper input validation in SignIn
    • CVE-2026-106404: Incorrect authorization in FontAccess
    • CVE-2026-106183: Missing authorization in Chromoting
    • CVE-2026-106386: Uninitialized resource in WebAudio
    • CVE-2026-106351: Observable discrepancy in Safebrowsing
    • CVE-2026-106384: Missing authorization in SiteIsolation
    • CVE-2026-106207: Race condition in V8
    • CVE-2026-106321: Information leak in Editing
    • CVE-2026-106210: Observable discrepancy in Scroll
    • CVE-2026-106254: Information leak in Mobile
    • CVE-2026-106372: Incorrect authorization in UI
    • CVE-2026-106341: Type confusion in V8
    • CVE-2026-106409: Incorrect reference resolution in WebAppInstalls
    • CVE-2026-106340: Missing authorization in CredentialProvider
    • CVE-2026-106276: UI misrepresentation in Payments
    • CVE-2026-106338: UI misrepresentation in PictureInPicture
    • CVE-2026-106317: UI misrepresentation in FullScreen
    • CVE-2026-106344: Missing authorization in Permissions
    • CVE-2026-106359: Confused deputy in DeviceBoundSessionCredentials
    • CVE-2026-106353: Improper input validation in Mobile
    • CVE-2026-106312: Missing authorization in SignIn
    • CVE-2026-106191: Missing authorization in Actor
    • CVE-2026-106250: Missing authorization in Actor
    • CVE-2026-106309: Incorrect authorization in Selection
    • CVE-2026-106187: Missing authorization in Permissions
    • CVE-2026-106394: Incomplete cleanup in Glic
    • CVE-2026-106306: Incorrect authorization in DevTools
    • CVE-2026-106427: Confused deputy in Mobile
    • CVE-2026-106252: Incorrect comparison in Fonts
    • CVE-2026-106287: Information loss in CORS
    • CVE-2026-106297: Incorrect authorization in Scheduling
    • CVE-2026-106260: Incorrect authorization in DevTools
    • CVE-2026-106362: Missing authorization in DevTools
    • CVE-2026-106275: Uninitialized resource in GPU
    • CVE-2026-106199: Incorrect authorization in Actor
    • CVE-2026-106299: Improper input validation in WebAudio
    • CVE-2026-106422: Incorrect authorization in API
    • CVE-2026-106186: Uncontrolled search path element in CredentialProvider
    • CVE-2026-106247: Buffer overflow in ANGLE
    • CVE-2026-106192: Information leak in Mobile
    • CVE-2026-106399: Out of bounds read in Skia
    • CVE-2026-106264: Missing authorization in Web Authentication (Passkeys & Security Keys)
    • CVE-2026-106285: UI misrepresentation in WebAppInstalls
    • CVE-2026-106220: Information leak in Passwords
    • CVE-2026-106417: Integer overflow in Media
    • CVE-2026-106221: Confused deputy in WebAPKs
    • CVE-2026-106259: Incorrect authorization in PermissionElement
    • CVE-2026-106296: Improper privilege management in UI
    • CVE-2026-106249: Incorrect authorization in Autofill
    • CVE-2026-106374: Type confusion in V8
    • CVE-2026-106380: UI misrepresentation in UI
    • CVE-2026-106179: UI misrepresentation in WebAppInstalls
    • CVE-2026-106368: UI misrepresentation in UI
    • CVE-2026-106237: Information leak in Permissions
    • CVE-2026-106331: Improper input validation in Extensions
    • CVE-2026-106270: Incorrect authorization in WebAppInstalls
    • CVE-2026-106350: Incorrect authorization in Browser
    • CVE-2026-106288: Missing authorization in Browser
    • CVE-2026-106305: UI misrepresentation in Mobile
    • CVE-2026-106418: Missing authorization in Network
    • CVE-2026-106343: Improper state validation in Autofill AI
    • CVE-2026-106371: Incorrect authorization in Transactions Platform
    • CVE-2026-106256: Information leak in Passwords
    • CVE-2026-106413: Race condition in Browser
    • CVE-2026-106339: Use of released resource in Core
    • CVE-2026-106320: Use of released resource in UI
    • CVE-2026-106195: Incorrect authorization in Chromoting
    • CVE-2026-106316: UI misrepresentation in Chromoting
    • CVE-2026-106385: Race condition in Chromoting
    • CVE-2026-106325: Incorrect reference resolution in Core
    • CVE-2026-106390: Incorrect provision of specified functionality in SanitizerAPI
    • CVE-2026-106294: Incomplete cleanup in Chromoting
    • CVE-2026-106334: Information leak in Payments
    • CVE-2026-106236: UI misrepresentation in Chromoting
    • CVE-2026-106251: UI misrepresentation in Chromoting
    • CVE-2026-106310: Use of released resource in FontAccess
    • CVE-2026-106345: Use of released resource in Session
    • CVE-2026-106272: UI misrepresentation in Chromoting
    • CVE-2026-106355: Missing authorization in Media
    • CVE-2026-106234: Use after free in Network
    • CVE-2026-106269: Use after free in CSS
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
155.0.8059.39-bp160.1.1

Ecosystem specific

{
    "binaries": [
        {
            "chromedriver": "155.0.8059.39-bp160.1.1",
            "chromium": "155.0.8059.39-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22041-1.json"