Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Chromium could let attackers execute code or crash
published 2 months ago
Summary
The Chromium web browser versions 146.0.7680.177 and 146.0.7680.164 contain several memory‑handling mistakes that could allow a malicious web page to run unwanted code or cause the browser to stop working. Updating Chromium on your openSUSE system to the latest release will patch these issues and keep your browsing safe.
What to do
- Update opensuse chromium to version 146.0.7680.177-bp160.1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| openSUSE:Leap 16.0 | opensuse | chromium |
< 146.0.7680.177-bp160.1.1 Fix: upgrade to 146.0.7680.177-bp160.1.1
|
Original advisory text
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
- Chromium 146.0.7680.177 (boo#1261249)
* CVE-2026-5273: Use after free in CSS
* CVE-2026-5272: Heap buffer overflow in GPU
* CVE-2026-5274: Integer overflow in Codecs
* CVE-2026-5275: Heap buffer overflow in ANGLE
* CVE-2026-5276: Insufficient policy enforcement in WebUSB
* CVE-2026-5277: Integer overflow in ANGLE
* CVE-2026-5278: Use after free in Web MIDI
* CVE-2026-5279: Object corruption in V8
* CVE-2026-5280: Use after free in WebCodecs
* CVE-2026-5281: Use after free in Dawn
* CVE-2026-5282: Out of bounds read in WebCodecs
* CVE-2026-5283: Inappropriate implementation in ANGLE
* CVE-2026-5284: Use after free in Dawn
* CVE-2026-5285: Use after free in WebGL
* CVE-2026-5286: Use after free in Dawn
* CVE-2026-5287: Use after free in PDF
* CVE-2026-5288: Use after free in WebView
* CVE-2026-5289: Use after free in Navigation
* CVE-2026-5290: Use after free in Compositing
* CVE-2026-5291: Inappropriate implementation in WebGL
* CVE-2026-5292: Out of bounds read in WebCodecs
- Chromium 146.0.7680.164 (boo#1260376)
* CVE-2026-4673: Heap buffer overflow in WebAudio
* CVE-2026-4674: Out of bounds read in CSS
* CVE-2026-4675: Heap buffer overflow in WebGL
* CVE-2026-4676: Use after free in Dawn
* CVE-2026-4677: Out of bounds read in WebAudio
* CVE-2026-4678: Use after free in WebGPU
* CVE-2026-4679: Integer overflow in Fonts
* CVE-2026-4680: Use after free in FedCM
- Chromium 146.0.7680.153 (boo#1259964):
* CVE-2026-4439: Out of bounds memory access in WebGL
* CVE-2026-4440: Out of bounds read and write in WebGL
* CVE-2026-4441: Use after free in Base
* CVE-2026-4442: Heap buffer overflow in CSS
* CVE-2026-4443: Heap buffer overflow in WebAudio
* CVE-2026-4444: Stack buffer overflow in WebRTC
* CVE-2026-4445: Use after free in WebRTC
* CVE-2026-4446: Use after free in WebRTC
* CVE-2026-4447: Inappropriate implementation in V8
* CVE-2026-4448: Heap buffer overflow in ANGLE
* CVE-2026-4449: Use after free in Blink
* CVE-2026-4450: Out of bounds write in V8
* CVE-2026-4451: Insufficient validation of untrusted input in Navigation
* CVE-2026-4452: Integer overflow in ANGLE
* CVE-2026-4453: Integer overflow in Dawn
* CVE-2026-4454: Use after free in Network
* CVE-2026-4455: Heap buffer overflow in PDFium
* CVE-2026-4456: Use after free in Digital Credentials API
* CVE-2026-4457: Type Confusion in V8
* CVE-2026-4458: Use after free in Extensions
* CVE-2026-4459: Out of bounds read and write in WebAudio
* CVE-2026-4460: Out of bounds read in Skia
* CVE-2026-4461: Inappropriate implementation in V8
* CVE-2026-4462: Out of bounds read in Blink
* CVE-2026-4463: Heap buffer overflow in WebRTC
* CVE-2026-4464: Integer overflow in ANGLE
- Chromium 146.0.7680.80:
* CVE-2026-3909: Out of bounds write in Skia (boo#1259659)
- Chromium 146.0.7680.75 (released 2026-03-12) (boo#1259648)
* CVE-2026-3910: Inappropriate implementation in V8.
- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
* CVE-2026-3913: Heap buffer overflow in WebML
* CVE-2026-3914: Integer overflow in WebML
* CVE-2026-3915: Heap buffer overflow in WebML
* CVE-2026-3916: Out of bounds read in Web Speech
* CVE-2026-3917: Use after free in Agents
* CVE-2026-3918: Use after free in WebMCP
* CVE-2026-3919: Use after free in Extensions
* CVE-2026-3920: Out of bounds memory access in WebML
* CVE-2026-3921: Use after free in TextEncoding
* CVE-2026-3922: Use after free in MediaStream
* CVE-2026-3923: Use after free in WebMIDI
* CVE-2026-3924: Use after free in WindowDialog
* CVE-2026-3925: Incorrect security UI in LookalikeChecks
* CVE-2026-3926: Out of bounds read in V8
* CVE-2026-3927: Incorrect security UI in PictureInPicture
* CVE-2026-3928: Insufficient policy enforcement in Extensions
* CVE-2026-3929: Side-channel information leakage in ResourceTiming
* CVE-2026-3930: Unsafe navigation in Navigation
* CVE-2026-3931: Heap buffer overflow in Skia
* CVE-2026-3932: Insufficient policy enforcement in PDF
* CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
* CVE-2026-3935: Incorrect security UI in WebAppInstalls
* CVE-2026-3936: Use after free in WebView
* CVE-2026-3937: Incorrect security UI in Downloads
* CVE-2026-3938: Insufficient policy enforcement in Clipboard
* CVE-2026-3939: Insufficient policy enforcement in PDF
* CVE-2026-3940: Insufficient policy enforcement in DevTools
* CVE-2026-3941: Insufficient policy enforcement in DevTools
* CVE-2026-3942: Incorrect security UI in PictureInPicture
Changes in chromium:
- Chromium 146.0.7680.177 (boo#1261249)
* CVE-2026-5273: Use after free in CSS
* CVE-2026-5272: Heap buffer overflow in GPU
* CVE-2026-5274: Integer overflow in Codecs
* CVE-2026-5275: Heap buffer overflow in ANGLE
* CVE-2026-5276: Insufficient policy enforcement in WebUSB
* CVE-2026-5277: Integer overflow in ANGLE
* CVE-2026-5278: Use after free in Web MIDI
* CVE-2026-5279: Object corruption in V8
* CVE-2026-5280: Use after free in WebCodecs
* CVE-2026-5281: Use after free in Dawn
* CVE-2026-5282: Out of bounds read in WebCodecs
* CVE-2026-5283: Inappropriate implementation in ANGLE
* CVE-2026-5284: Use after free in Dawn
* CVE-2026-5285: Use after free in WebGL
* CVE-2026-5286: Use after free in Dawn
* CVE-2026-5287: Use after free in PDF
* CVE-2026-5288: Use after free in WebView
* CVE-2026-5289: Use after free in Navigation
* CVE-2026-5290: Use after free in Compositing
* CVE-2026-5291: Inappropriate implementation in WebGL
* CVE-2026-5292: Out of bounds read in WebCodecs
- Chromium 146.0.7680.164 (boo#1260376)
* CVE-2026-4673: Heap buffer overflow in WebAudio
* CVE-2026-4674: Out of bounds read in CSS
* CVE-2026-4675: Heap buffer overflow in WebGL
* CVE-2026-4676: Use after free in Dawn
* CVE-2026-4677: Out of bounds read in WebAudio
* CVE-2026-4678: Use after free in WebGPU
* CVE-2026-4679: Integer overflow in Fonts
* CVE-2026-4680: Use after free in FedCM
- Chromium 146.0.7680.153 (boo#1259964):
* CVE-2026-4439: Out of bounds memory access in WebGL
* CVE-2026-4440: Out of bounds read and write in WebGL
* CVE-2026-4441: Use after free in Base
* CVE-2026-4442: Heap buffer overflow in CSS
* CVE-2026-4443: Heap buffer overflow in WebAudio
* CVE-2026-4444: Stack buffer overflow in WebRTC
* CVE-2026-4445: Use after free in WebRTC
* CVE-2026-4446: Use after free in WebRTC
* CVE-2026-4447: Inappropriate implementation in V8
* CVE-2026-4448: Heap buffer overflow in ANGLE
* CVE-2026-4449: Use after free in Blink
* CVE-2026-4450: Out of bounds write in V8
* CVE-2026-4451: Insufficient validation of untrusted input in Navigation
* CVE-2026-4452: Integer overflow in ANGLE
* CVE-2026-4453: Integer overflow in Dawn
* CVE-2026-4454: Use after free in Network
* CVE-2026-4455: Heap buffer overflow in PDFium
* CVE-2026-4456: Use after free in Digital Credentials API
* CVE-2026-4457: Type Confusion in V8
* CVE-2026-4458: Use after free in Extensions
* CVE-2026-4459: Out of bounds read and write in WebAudio
* CVE-2026-4460: Out of bounds read in Skia
* CVE-2026-4461: Inappropriate implementation in V8
* CVE-2026-4462: Out of bounds read in Blink
* CVE-2026-4463: Heap buffer overflow in WebRTC
* CVE-2026-4464: Integer overflow in ANGLE
- Chromium 146.0.7680.80:
* CVE-2026-3909: Out of bounds write in Skia (boo#1259659)
- Chromium 146.0.7680.75 (released 2026-03-12) (boo#1259648)
* CVE-2026-3910: Inappropriate implementation in V8.
- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
* CVE-2026-3913: Heap buffer overflow in WebML
* CVE-2026-3914: Integer overflow in WebML
* CVE-2026-3915: Heap buffer overflow in WebML
* CVE-2026-3916: Out of bounds read in Web Speech
* CVE-2026-3917: Use after free in Agents
* CVE-2026-3918: Use after free in WebMCP
* CVE-2026-3919: Use after free in Extensions
* CVE-2026-3920: Out of bounds memory access in WebML
* CVE-2026-3921: Use after free in TextEncoding
* CVE-2026-3922: Use after free in MediaStream
* CVE-2026-3923: Use after free in WebMIDI
* CVE-2026-3924: Use after free in WindowDialog
* CVE-2026-3925: Incorrect security UI in LookalikeChecks
* CVE-2026-3926: Out of bounds read in V8
* CVE-2026-3927: Incorrect security UI in PictureInPicture
* CVE-2026-3928: Insufficient policy enforcement in Extensions
* CVE-2026-3929: Side-channel information leakage in ResourceTiming
* CVE-2026-3930: Unsafe navigation in Navigation
* CVE-2026-3931: Heap buffer overflow in Skia
* CVE-2026-3932: Insufficient policy enforcement in PDF
* CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
* CVE-2026-3935: Incorrect security UI in WebAppInstalls
* CVE-2026-3936: Use after free in WebView
* CVE-2026-3937: Incorrect security UI in Downloads
* CVE-2026-3938: Insufficient policy enforcement in Clipboard
* CVE-2026-3939: Insufficient policy enforcement in PDF
* CVE-2026-3940: Insufficient policy enforcement in DevTools
* CVE-2026-3941: Insufficient policy enforcement in DevTools
* CVE-2026-3942: Incorrect security UI in PictureInPicture
References
- https://bugzilla.suse.com/1261249 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-5272 URL
- https://www.suse.com/security/cve/CVE-2026-5273 URL
- https://www.suse.com/security/cve/CVE-2026-5274 URL
- https://www.suse.com/security/cve/CVE-2026-5275 URL
- https://www.suse.com/security/cve/CVE-2026-5276 URL
- https://www.suse.com/security/cve/CVE-2026-5277 URL
- https://www.suse.com/security/cve/CVE-2026-5278 URL
- https://www.suse.com/security/cve/CVE-2026-5279 URL
- https://www.suse.com/security/cve/CVE-2026-5280 URL
- https://www.suse.com/security/cve/CVE-2026-5281 URL
- https://www.suse.com/security/cve/CVE-2026-5282 URL
- https://www.suse.com/security/cve/CVE-2026-5283 URL
- https://www.suse.com/security/cve/CVE-2026-5284 URL
- https://www.suse.com/security/cve/CVE-2026-5285 URL
- https://www.suse.com/security/cve/CVE-2026-5286 URL
- https://www.suse.com/security/cve/CVE-2026-5287 URL
- https://www.suse.com/security/cve/CVE-2026-5288 URL
- https://www.suse.com/security/cve/CVE-2026-5289 URL
- https://www.suse.com/security/cve/CVE-2026-5290 URL
- https://www.suse.com/security/cve/CVE-2026-5291 URL
- https://www.suse.com/security/cve/CVE-2026-5292 URL
- https://bugzilla.suse.com/1259530 Third Party Advisory
- https://bugzilla.suse.com/1259648 Third Party Advisory
- https://bugzilla.suse.com/1259659 Third Party Advisory
- https://bugzilla.suse.com/1259964 Third Party Advisory
- https://bugzilla.suse.com/1260376 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-3909 URL
- https://www.suse.com/security/cve/CVE-2026-3910 URL
- https://www.suse.com/security/cve/CVE-2026-3913 URL
- https://www.suse.com/security/cve/CVE-2026-3914 URL
- https://www.suse.com/security/cve/CVE-2026-3915 URL
- https://www.suse.com/security/cve/CVE-2026-3916 URL
- https://www.suse.com/security/cve/CVE-2026-3917 URL
- https://www.suse.com/security/cve/CVE-2026-3918 URL
- https://www.suse.com/security/cve/CVE-2026-3919 URL
- https://www.suse.com/security/cve/CVE-2026-3920 URL
- https://www.suse.com/security/cve/CVE-2026-3921 URL
- https://www.suse.com/security/cve/CVE-2026-3922 URL
- https://www.suse.com/security/cve/CVE-2026-3923 URL
- https://www.suse.com/security/cve/CVE-2026-3924 URL
- https://www.suse.com/security/cve/CVE-2026-3925 URL
- https://www.suse.com/security/cve/CVE-2026-3926 URL
- https://www.suse.com/security/cve/CVE-2026-3927 URL
- https://www.suse.com/security/cve/CVE-2026-3928 URL
- https://www.suse.com/security/cve/CVE-2026-3929 URL
- https://www.suse.com/security/cve/CVE-2026-3930 URL
- https://www.suse.com/security/cve/CVE-2026-3931 URL
- https://www.suse.com/security/cve/CVE-2026-3932 URL
- https://www.suse.com/security/cve/CVE-2026-3934 URL
- https://www.suse.com/security/cve/CVE-2026-3935 URL
- https://www.suse.com/security/cve/CVE-2026-3936 URL
- https://www.suse.com/security/cve/CVE-2026-3937 URL
- https://www.suse.com/security/cve/CVE-2026-3938 URL
- https://www.suse.com/security/cve/CVE-2026-3939 URL
- https://www.suse.com/security/cve/CVE-2026-3940 URL
- https://www.suse.com/security/cve/CVE-2026-3941 URL
- https://www.suse.com/security/cve/CVE-2026-3942 URL
- https://www.suse.com/security/cve/CVE-2026-4439 URL
- https://www.suse.com/security/cve/CVE-2026-4440 URL
- https://www.suse.com/security/cve/CVE-2026-4441 URL
- https://www.suse.com/security/cve/CVE-2026-4442 URL
- https://www.suse.com/security/cve/CVE-2026-4443 URL
- https://www.suse.com/security/cve/CVE-2026-4444 URL
- https://www.suse.com/security/cve/CVE-2026-4445 URL
- https://www.suse.com/security/cve/CVE-2026-4446 URL
- https://www.suse.com/security/cve/CVE-2026-4447 URL
- https://www.suse.com/security/cve/CVE-2026-4448 URL
- https://www.suse.com/security/cve/CVE-2026-4449 URL
- https://www.suse.com/security/cve/CVE-2026-4450 URL
- https://www.suse.com/security/cve/CVE-2026-4451 URL
- https://www.suse.com/security/cve/CVE-2026-4452 URL
- https://www.suse.com/security/cve/CVE-2026-4453 URL
- https://www.suse.com/security/cve/CVE-2026-4454 URL
- https://www.suse.com/security/cve/CVE-2026-4455 URL
- https://www.suse.com/security/cve/CVE-2026-4456 URL
- https://www.suse.com/security/cve/CVE-2026-4457 URL
- https://www.suse.com/security/cve/CVE-2026-4458 URL
- https://www.suse.com/security/cve/CVE-2026-4459 URL
- https://www.suse.com/security/cve/CVE-2026-4460 URL
- https://www.suse.com/security/cve/CVE-2026-4461 URL
- https://www.suse.com/security/cve/CVE-2026-4462 URL
- https://www.suse.com/security/cve/CVE-2026-4463 URL
- https://www.suse.com/security/cve/CVE-2026-4464 URL
- https://www.suse.com/security/cve/CVE-2026-4673 URL
- https://www.suse.com/security/cve/CVE-2026-4674 URL
- https://www.suse.com/security/cve/CVE-2026-4675 URL
- https://www.suse.com/security/cve/CVE-2026-4676 URL
- https://www.suse.com/security/cve/CVE-2026-4677 URL
- https://www.suse.com/security/cve/CVE-2026-4678 URL
- https://www.suse.com/security/cve/CVE-2026-4679 URL
- https://www.suse.com/security/cve/CVE-2026-4680 URL
Timeline
Published31 Aug 2026
Updated2 Sep 2026
First seen5 Apr 2026
Sources
openSUSE-SU-2026:20460-1 · OSV
Track software like this
Free during beta