{"id":"openSUSE-SU-2026:20460-1","summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 146.0.7680.177 (boo#1261249)\n  * CVE-2026-5273: Use after free in CSS\n  * CVE-2026-5272: Heap buffer overflow in GPU\n  * CVE-2026-5274: Integer overflow in Codecs\n  * CVE-2026-5275: Heap buffer overflow in ANGLE\n  * CVE-2026-5276: Insufficient policy enforcement in WebUSB\n  * CVE-2026-5277: Integer overflow in ANGLE\n  * CVE-2026-5278: Use after free in Web MIDI\n  * CVE-2026-5279: Object corruption in V8\n  * CVE-2026-5280: Use after free in WebCodecs\n  * CVE-2026-5281: Use after free in Dawn\n  * CVE-2026-5282: Out of bounds read in WebCodecs\n  * CVE-2026-5283: Inappropriate implementation in ANGLE\n  * CVE-2026-5284: Use after free in Dawn\n  * CVE-2026-5285: Use after free in WebGL\n  * CVE-2026-5286: Use after free in Dawn\n  * CVE-2026-5287: Use after free in PDF\n  * CVE-2026-5288: Use after free in WebView\n  * CVE-2026-5289: Use after free in Navigation\n  * CVE-2026-5290: Use after free in Compositing\n  * CVE-2026-5291: Inappropriate implementation in WebGL\n  * CVE-2026-5292: Out of bounds read in WebCodecs\n\n- Chromium 146.0.7680.164 (boo#1260376)\n  * CVE-2026-4673: Heap buffer overflow in WebAudio\n  * CVE-2026-4674: Out of bounds read in CSS\n  * CVE-2026-4675: Heap buffer overflow in WebGL\n  * CVE-2026-4676: Use after free in Dawn\n  * CVE-2026-4677: Out of bounds read in WebAudio\n  * CVE-2026-4678: Use after free in WebGPU\n  * CVE-2026-4679: Integer overflow in Fonts\n  * CVE-2026-4680: Use after free in FedCM\n\n- Chromium 146.0.7680.153 (boo#1259964):\n  * CVE-2026-4439: Out of bounds memory access in WebGL\n  * CVE-2026-4440: Out of bounds read and write in WebGL\n  * CVE-2026-4441: Use after free in Base\n  * CVE-2026-4442: Heap buffer overflow in CSS\n  * CVE-2026-4443: Heap buffer overflow in WebAudio\n  * CVE-2026-4444: Stack buffer overflow in WebRTC\n  * CVE-2026-4445: Use after free in WebRTC\n  * CVE-2026-4446: Use after free in WebRTC\n  * CVE-2026-4447: Inappropriate implementation in V8\n  * CVE-2026-4448: Heap buffer overflow in ANGLE\n  * CVE-2026-4449: Use after free in Blink\n  * CVE-2026-4450: Out of bounds write in V8\n  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation\n  * CVE-2026-4452: Integer overflow in ANGLE\n  * CVE-2026-4453: Integer overflow in Dawn\n  * CVE-2026-4454: Use after free in Network\n  * CVE-2026-4455: Heap buffer overflow in PDFium\n  * CVE-2026-4456: Use after free in Digital Credentials API\n  * CVE-2026-4457: Type Confusion in V8\n  * CVE-2026-4458: Use after free in Extensions\n  * CVE-2026-4459: Out of bounds read and write in WebAudio\n  * CVE-2026-4460: Out of bounds read in Skia\n  * CVE-2026-4461: Inappropriate implementation in V8\n  * CVE-2026-4462: Out of bounds read in Blink\n  * CVE-2026-4463: Heap buffer overflow in WebRTC\n  * CVE-2026-4464: Integer overflow in ANGLE\n\n- Chromium 146.0.7680.80:\n  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)\n\n- Chromium 146.0.7680.75 (released 2026-03-12) (boo#1259648)\n  * CVE-2026-3910: Inappropriate implementation in V8.\n\n- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)\n  * CVE-2026-3913: Heap buffer overflow in WebML\n  * CVE-2026-3914: Integer overflow in WebML\n  * CVE-2026-3915: Heap buffer overflow in WebML\n  * CVE-2026-3916: Out of bounds read in Web Speech\n  * CVE-2026-3917: Use after free in Agents\n  * CVE-2026-3918: Use after free in WebMCP\n  * CVE-2026-3919: Use after free in Extensions\n  * CVE-2026-3920: Out of bounds memory access in WebML\n  * CVE-2026-3921: Use after free in TextEncoding\n  * CVE-2026-3922: Use after free in MediaStream\n  * CVE-2026-3923: Use after free in WebMIDI\n  * CVE-2026-3924: Use after free in WindowDialog\n  * CVE-2026-3925: Incorrect security UI in LookalikeChecks\n  * CVE-2026-3926: Out of bounds read in V8\n  * CVE-2026-3927: Incorrect security UI in PictureInPicture\n  * CVE-2026-3928: Insufficient policy enforcement in Extensions\n  * CVE-2026-3929: Side-channel information leakage in ResourceTiming\n  * CVE-2026-3930: Unsafe navigation in Navigation\n  * CVE-2026-3931: Heap buffer overflow in Skia\n  * CVE-2026-3932: Insufficient policy enforcement in PDF\n  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver\n  * CVE-2026-3935: Incorrect security UI in WebAppInstalls\n  * CVE-2026-3936: Use after free in WebView\n  * CVE-2026-3937: Incorrect security UI in Downloads\n  * CVE-2026-3938: Insufficient policy enforcement in Clipboard\n  * CVE-2026-3939: Insufficient policy enforcement in PDF\n  * CVE-2026-3940: Insufficient policy enforcement in DevTools\n  * CVE-2026-3941: Insufficient policy enforcement in DevTools\n  * CVE-2026-3942: Incorrect security UI in PictureInPicture\n","modified":"2026-09-02T11:26:18.320088167Z","published":"2026-08-31T08:40:11Z","related":["CVE-2026-3909","CVE-2026-3910","CVE-2026-3913","CVE-2026-3914","CVE-2026-3915","CVE-2026-3916","CVE-2026-3917","CVE-2026-3918","CVE-2026-3919","CVE-2026-3920","CVE-2026-3921","CVE-2026-3922","CVE-2026-3923","CVE-2026-3924","CVE-2026-3925","CVE-2026-3926","CVE-2026-3927","CVE-2026-3928","CVE-2026-3929","CVE-2026-3930","CVE-2026-3931","CVE-2026-3932","CVE-2026-3934","CVE-2026-3935","CVE-2026-3936","CVE-2026-3937","CVE-2026-3938","CVE-2026-3939","CVE-2026-3940","CVE-2026-3941","CVE-2026-3942","CVE-2026-4439","CVE-2026-4440","CVE-2026-4441","CVE-2026-4442","CVE-2026-4443","CVE-2026-4444","CVE-2026-4445","CVE-2026-4446","CVE-2026-4447","CVE-2026-4448","CVE-2026-4449","CVE-2026-4450","CVE-2026-4451","CVE-2026-4452","CVE-2026-4453","CVE-2026-4454","CVE-2026-4455","CVE-2026-4456","CVE-2026-4457","CVE-2026-4458","CVE-2026-4459","CVE-2026-4460","CVE-2026-4461","CVE-2026-4462","CVE-2026-4463","CVE-2026-4464","CVE-2026-4673","CVE-2026-4674","CVE-2026-4675","CVE-2026-4676","CVE-2026-4677","CVE-2026-4678","CVE-2026-4679","CVE-2026-4680","CVE-2026-5272","CVE-2026-5273","CVE-2026-5274","CVE-2026-5275","CVE-2026-5276","CVE-2026-5277","CVE-2026-5278","CVE-2026-5279","CVE-2026-5280","CVE-2026-5281","CVE-2026-5282","CVE-2026-5283","CVE-2026-5284","CVE-2026-5285","CVE-2026-5286","CVE-2026-5287","CVE-2026-5288","CVE-2026-5289","CVE-2026-5290","CVE-2026-5291","CVE-2026-5292"],"upstream":["CVE-2026-3909","CVE-2026-3910","CVE-2026-3913","CVE-2026-3914","CVE-2026-3915","CVE-2026-3916","CVE-2026-3917","CVE-2026-3918","CVE-2026-3919","CVE-2026-3920","CVE-2026-3921","CVE-2026-3922","CVE-2026-3923","CVE-2026-3924","CVE-2026-3925","CVE-2026-3926","CVE-2026-3927","CVE-2026-3928","CVE-2026-3929","CVE-2026-3930","CVE-2026-3931","CVE-2026-3932","CVE-2026-3934","CVE-2026-3935","CVE-2026-3936","CVE-2026-3937","CVE-2026-3938","CVE-2026-3939","CVE-2026-3940","CVE-2026-3941","CVE-2026-3942","CVE-2026-4439","CVE-2026-4440","CVE-2026-4441","CVE-2026-4442","CVE-2026-4443","CVE-2026-4444","CVE-2026-4445","CVE-2026-4446","CVE-2026-4447","CVE-2026-4448","CVE-2026-4449","CVE-2026-4450","CVE-2026-4451","CVE-2026-4452","CVE-2026-4453","CVE-2026-4454","CVE-2026-4455","CVE-2026-4456","CVE-2026-4457","CVE-2026-4458","CVE-2026-4459","CVE-2026-4460","CVE-2026-4461","CVE-2026-4462","CVE-2026-4463","CVE-2026-4464","CVE-2026-4673","CVE-2026-4674","CVE-2026-4675","CVE-2026-4676","CVE-2026-4677","CVE-2026-4678","CVE-2026-4679","CVE-2026-4680","CVE-2026-5272","CVE-2026-5273","CVE-2026-5274","CVE-2026-5275","CVE-2026-5276","CVE-2026-5277","CVE-2026-5278","CVE-2026-5279","CVE-2026-5280","CVE-2026-5281","CVE-2026-5282","CVE-2026-5283","CVE-2026-5284","CVE-2026-5285","CVE-2026-5286","CVE-2026-5287","CVE-2026-5288","CVE-2026-5289","CVE-2026-5290","CVE-2026-5291","CVE-2026-5292"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259530"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259648"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259659"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259964"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260376"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261249"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3909"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3910"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3913"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3914"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3915"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3916"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3917"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3918"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3919"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3920"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3921"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3922"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3923"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3924"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3925"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3926"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3927"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3928"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3929"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3930"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3931"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3932"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3934"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3935"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3936"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3937"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3938"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3939"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3940"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3941"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3942"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4439"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4440"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4441"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4442"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4443"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4444"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4445"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4446"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4447"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4448"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4449"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4450"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4451"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4452"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4453"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4454"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4455"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4456"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4457"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4458"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4459"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4460"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4461"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4462"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4463"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4464"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4673"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4674"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4675"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4676"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4677"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4678"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4679"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4680"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5272"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5273"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5274"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5275"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5276"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5277"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5278"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5279"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5280"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5281"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5282"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5283"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5284"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5285"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5286"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5287"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5288"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5289"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5290"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5291"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5292"}],"affected":[{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"146.0.7680.177-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"146.0.7680.177-bp160.1.1","chromium":"146.0.7680.177-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20460-1.json"}}],"schema_version":"1.9.0"}