Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Chromium browser update patches many security weaknesses
published 2 months ago
Summary
The latest Chromium release fixes a series of coding errors that could let attackers run malicious code, read or change data, or bypass security checks. These issues affect the browser’s core engine and several features such as web graphics, extensions, and address bar suggestions. Install the newest Chromium version as soon as possible to keep your browsing environment safe.
What to do
- Update opensuse chromium to version 142.0.7444.162-bp160.1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| openSUSE:Leap 16.0 | opensuse | chromium |
< 142.0.7444.162-bp160.1.1 Fix: upgrade to 142.0.7444.162-bp160.1.1
|
Original advisory text
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
Chromium 142.0.7444.175 (boo#1253698):
* CVE-2025-13223: Type Confusion in V8
* CVE-2025-13224: Type Confusion in V8
Chromium 142.0.7444.162 (boo#1253267):
* CVE-2025-13042: Inappropriate implementation in V8
Chromium 142.0.7444.134 (boo#1253089):
* CVE-2025-12725: Out of bounds write in WebGPU
* CVE-2025-12726: Inappropriate implementation in Views
* CVE-2025-12727: Inappropriate implementation in V8
* CVE-2025-12728: Inappropriate implementation in Omnibox
* CVE-2025-12729: Inappropriate implementation in Omnibox
Chromium 142.0.7444.59, the stable channel promotion of 142.
Security fixes (boo#1252881):
* CVE-2025-12428: Type Confusion in V8
* CVE-2025-12429: Inappropriate implementation in V8
* CVE-2025-12430: Object lifecycle issue in Media
* CVE-2025-12431: Inappropriate implementation in Extensions
* CVE-2025-12432: Race in V8
* CVE-2025-12433: Inappropriate implementation in V8
* CVE-2025-12434: Race in Storage
* CVE-2025-12435: Incorrect security UI in Omnibox
* CVE-2025-12436: Policy bypass in Extensions
* CVE-2025-12437: Use after free in PageInfo
* CVE-2025-12438: Use after free in Ozone
* CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
* CVE-2025-12440: Inappropriate implementation in Autofill
* CVE-2025-12441: Out of bounds read in V8
* CVE-2025-12443: Out of bounds read in WebXR
* CVE-2025-12444: Incorrect security UI in Fullscreen UI
* CVE-2025-12445: Policy bypass in Extensions
* CVE-2025-12446: Incorrect security UI in SplitView
* CVE-2025-12447: Incorrect security UI in Omnibox
Changes in chromium:
Chromium 142.0.7444.175 (boo#1253698):
* CVE-2025-13223: Type Confusion in V8
* CVE-2025-13224: Type Confusion in V8
Chromium 142.0.7444.162 (boo#1253267):
* CVE-2025-13042: Inappropriate implementation in V8
Chromium 142.0.7444.134 (boo#1253089):
* CVE-2025-12725: Out of bounds write in WebGPU
* CVE-2025-12726: Inappropriate implementation in Views
* CVE-2025-12727: Inappropriate implementation in V8
* CVE-2025-12728: Inappropriate implementation in Omnibox
* CVE-2025-12729: Inappropriate implementation in Omnibox
Chromium 142.0.7444.59, the stable channel promotion of 142.
Security fixes (boo#1252881):
* CVE-2025-12428: Type Confusion in V8
* CVE-2025-12429: Inappropriate implementation in V8
* CVE-2025-12430: Object lifecycle issue in Media
* CVE-2025-12431: Inappropriate implementation in Extensions
* CVE-2025-12432: Race in V8
* CVE-2025-12433: Inappropriate implementation in V8
* CVE-2025-12434: Race in Storage
* CVE-2025-12435: Incorrect security UI in Omnibox
* CVE-2025-12436: Policy bypass in Extensions
* CVE-2025-12437: Use after free in PageInfo
* CVE-2025-12438: Use after free in Ozone
* CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
* CVE-2025-12440: Inappropriate implementation in Autofill
* CVE-2025-12441: Out of bounds read in V8
* CVE-2025-12443: Out of bounds read in WebXR
* CVE-2025-12444: Incorrect security UI in Fullscreen UI
* CVE-2025-12445: Policy bypass in Extensions
* CVE-2025-12446: Incorrect security UI in SplitView
* CVE-2025-12447: Incorrect security UI in Omnibox
References
- https://bugzilla.suse.com/1252881 Third Party Advisory
- https://bugzilla.suse.com/1253089 Third Party Advisory
- https://bugzilla.suse.com/1253267 Third Party Advisory
- https://bugzilla.suse.com/1253698 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2025-12428 URL
- https://www.suse.com/security/cve/CVE-2025-12429 URL
- https://www.suse.com/security/cve/CVE-2025-12430 URL
- https://www.suse.com/security/cve/CVE-2025-12431 URL
- https://www.suse.com/security/cve/CVE-2025-12432 URL
- https://www.suse.com/security/cve/CVE-2025-12433 URL
- https://www.suse.com/security/cve/CVE-2025-12434 URL
- https://www.suse.com/security/cve/CVE-2025-12435 URL
- https://www.suse.com/security/cve/CVE-2025-12436 URL
- https://www.suse.com/security/cve/CVE-2025-12437 URL
- https://www.suse.com/security/cve/CVE-2025-12438 URL
- https://www.suse.com/security/cve/CVE-2025-12439 URL
- https://www.suse.com/security/cve/CVE-2025-12440 URL
- https://www.suse.com/security/cve/CVE-2025-12441 URL
- https://www.suse.com/security/cve/CVE-2025-12443 URL
- https://www.suse.com/security/cve/CVE-2025-12444 URL
- https://www.suse.com/security/cve/CVE-2025-12445 URL
- https://www.suse.com/security/cve/CVE-2025-12446 URL
- https://www.suse.com/security/cve/CVE-2025-12447 URL
- https://www.suse.com/security/cve/CVE-2025-12725 URL
- https://www.suse.com/security/cve/CVE-2025-12726 URL
- https://www.suse.com/security/cve/CVE-2025-12727 URL
- https://www.suse.com/security/cve/CVE-2025-12728 URL
- https://www.suse.com/security/cve/CVE-2025-12729 URL
- https://www.suse.com/security/cve/CVE-2025-13042 URL
- https://www.suse.com/security/cve/CVE-2025-13223 URL
- https://www.suse.com/security/cve/CVE-2025-13224 URL
- https://www.suse.com/security/cve/CVE-2025-54874 URL
Timeline
Published31 Aug 2026
Updated6 Sep 2026
First seen6 Sep 2026
Sources
openSUSE-SU-2025:20076-1 · OSV
Track software like this
Free during beta