openSUSE-SU-2026:22202-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22202-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22202-1
Upstream
CVE (52)
  • CVE-2026-118304
  • CVE-2026-118305
  • CVE-2026-118306
  • CVE-2026-118307
  • CVE-2026-118308
  • CVE-2026-118309
  • CVE-2026-118310
  • CVE-2026-118311
  • CVE-2026-118312
  • CVE-2026-118313
  • CVE-2026-118314
  • CVE-2026-118315
  • CVE-2026-118316
  • CVE-2026-118317
  • CVE-2026-118318
  • CVE-2026-118319
  • CVE-2026-118320
  • CVE-2026-118321
  • CVE-2026-118322
  • CVE-2026-118327
  • CVE-2026-118328
  • CVE-2026-118329
  • CVE-2026-118330
  • CVE-2026-118331
  • CVE-2026-118332
  • CVE-2026-118333
  • CVE-2026-118334
  • CVE-2026-118335
  • CVE-2026-118336
  • CVE-2026-118337
  • CVE-2026-118338
  • CVE-2026-118339
  • CVE-2026-118340
  • CVE-2026-118341
  • CVE-2026-118342
  • CVE-2026-118343
  • CVE-2026-118344
  • CVE-2026-118345
  • CVE-2026-118346
  • CVE-2026-118347
  • CVE-2026-118348
  • CVE-2026-118349
  • CVE-2026-118350
  • CVE-2026-118351
  • CVE-2026-118352
  • CVE-2026-118353
  • CVE-2026-118354
  • CVE-2026-118355
  • CVE-2026-118356
  • CVE-2026-118357
  • CVE-2026-118358
  • CVE-2026-118359
Related
CVE (52)
  • CVE-2026-118304
  • CVE-2026-118305
  • CVE-2026-118306
  • CVE-2026-118307
  • CVE-2026-118308
  • CVE-2026-118309
  • CVE-2026-118310
  • CVE-2026-118311
  • CVE-2026-118312
  • CVE-2026-118313
  • CVE-2026-118314
  • CVE-2026-118315
  • CVE-2026-118316
  • CVE-2026-118317
  • CVE-2026-118318
  • CVE-2026-118319
  • CVE-2026-118320
  • CVE-2026-118321
  • CVE-2026-118322
  • CVE-2026-118327
  • CVE-2026-118328
  • CVE-2026-118329
  • CVE-2026-118330
  • CVE-2026-118331
  • CVE-2026-118332
  • CVE-2026-118333
  • CVE-2026-118334
  • CVE-2026-118335
  • CVE-2026-118336
  • CVE-2026-118337
  • CVE-2026-118338
  • CVE-2026-118339
  • CVE-2026-118340
  • CVE-2026-118341
  • CVE-2026-118342
  • CVE-2026-118343
  • CVE-2026-118344
  • CVE-2026-118345
  • CVE-2026-118346
  • CVE-2026-118347
  • CVE-2026-118348
  • CVE-2026-118349
  • CVE-2026-118350
  • CVE-2026-118351
  • CVE-2026-118352
  • CVE-2026-118353
  • CVE-2026-118354
  • CVE-2026-118355
  • CVE-2026-118356
  • CVE-2026-118357
  • CVE-2026-118358
  • CVE-2026-118359
Published
2026-10-29T05:01:21Z
Modified
2026-10-31T18:00:08Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 156.0.8078.73 (boo#1288218):
    • CVE-2026-118306: Memory corruption in FileSystem
    • CVE-2026-118331: Improper input validation in FileAPI
    • CVE-2026-118348: Improper input validation in Skia
    • CVE-2026-118344: Use after free in Layout
    • CVE-2026-118357: Use after free in FileSystem
    • CVE-2026-118318: Improper access control in V8
    • CVE-2026-118350: Use after free in Turbolev
    • CVE-2026-118339: Use after free in Animation
    • CVE-2026-118305: Memory corruption in Turbolev
    • CVE-2026-118317: Memory corruption in HTML
    • CVE-2026-118320: Memory corruption in V8
    • CVE-2026-118322: Memory corruption in ANGLE
    • CVE-2026-118329: Improper input validation in ANGLE
    • CVE-2026-118354: Improper input validation in Skia
    • CVE-2026-118340: Memory corruption in Skia
    • CVE-2026-118321: Improper input validation in Core
    • CVE-2026-118337: Improper access control in Forms
    • CVE-2026-118352: Memory corruption in Cache
    • CVE-2026-118355: Improper input validation in Command
    • CVE-2026-118307: Use after free in Paint
    • CVE-2026-118351: Memory corruption in Skia
    • CVE-2026-118328: Improper input validation in WebRTC
    • CVE-2026-118333: Missing authorization in Video
    • CVE-2026-118336: Improper input validation in Headless
    • CVE-2026-118358: Memory corruption in WebAudio
    • CVE-2026-118353: Use after free in Paint
    • CVE-2026-118349: Memory corruption in Payments
    • CVE-2026-118327: Memory corruption in Media
    • CVE-2026-118359: Memory corruption in V8
    • CVE-2026-118343: Improper input validation in ReadingList
    • CVE-2026-118311: Memory corruption in Media
    • CVE-2026-118334: Use after free in ImageCapture
    • CVE-2026-118332: Improper input validation in Compositing
    • CVE-2026-118313: Use after free in Video
    • CVE-2026-118345: Use after free in PDFium
    • CVE-2026-118304: Improper input validation in SVG
    • CVE-2026-118316: Improper input validation in V8
    • CVE-2026-118346: Use after free in Compositing
    • CVE-2026-118342: Out of bounds write in Editing
    • CVE-2026-118310: Improper input validation in Views
    • CVE-2026-118335: Improper input validation in Metrics
    • CVE-2026-118308: Use after free in SVG
    • CVE-2026-118314: Improper input validation in UI
    • CVE-2026-118347: Use after free in FileSystem
    • CVE-2026-118341: Use after free in Modularization
    • CVE-2026-118330: Use after free in Browser
    • CVE-2026-118315: Improper input validation in SVG
    • CVE-2026-118356: Use after free in WTF
    • CVE-2026-118309: Improper input validation in UI
    • CVE-2026-118319: Memory corruption in Skia
    • CVE-2026-118312: Memory corruption in Paint
    • CVE-2026-118338: Use after free in Animation
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
156.0.8078.73-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "156.0.8078.73-bp160.1.1",
            "chromium":  "156.0.8078.73-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22202-1.json"