{"id":"openSUSE-SU-2026:20588-1","summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 147.0.7727.101 (boo#1262174)\n  * CVE-2026-6296: Heap buffer overflow in ANGLE\n  * CVE-2026-6297: Use after free in Proxy\n  * CVE-2026-6298: Heap buffer overflow in Skia\n  * CVE-2026-6299: Use after free in Prerender\n  * CVE-2026-6358: Use after free in XR\n  * CVE-2026-6359: Use after free in Video\n  * CVE-2026-6300: Use after free in CSS\n  * CVE-2026-6301: Type Confusion in Turbofan\n  * CVE-2026-6302: Use after free in Video\n  * CVE-2026-6303: Use after free in Codecs\n  * CVE-2026-6304: Use after free in Graphite\n  * CVE-2026-6305: Heap buffer overflow in PDFium\n  * CVE-2026-6306: Heap buffer overflow in PDFium\n  * CVE-2026-6307: Type Confusion in Turbofan\n  * CVE-2026-6308: Out of bounds read in Media\n  * CVE-2026-6309: Use after free in Viz\n  * CVE-2026-6360: Use after free in FileSystem\n  * CVE-2026-6310: Use after free in Dawn\n  * CVE-2026-6311: Uninitialized Use in Accessibility\n  * CVE-2026-6312: Insufficient policy enforcement in Passwords\n  * CVE-2026-6313: Insufficient policy enforcement in CORS\n  * CVE-2026-6314: Out of bounds write in GPU\n  * CVE-2026-6315: Use after free in Permissions\n  * CVE-2026-6316: Use after free in Forms\n  * CVE-2026-6361: Heap buffer overflow in PDFium\n  * CVE-2026-6362: Use after free in Codecs\n  * CVE-2026-6317: Use after free in Cast\n  * CVE-2026-6363: Type Confusion in V8\n  * CVE-2026-6318: Use after free in Codecs\n  * CVE-2026-6319: Use after free in Payments\n  * CVE-2026-6364: Out of bounds read in Skia\n","modified":"2026-09-02T14:00:15.843963090Z","published":"2026-04-18T08:01:34Z","withdrawn":"2026-09-02T14:00:15.843962860Z","related":["CVE-2026-6296","CVE-2026-6297","CVE-2026-6298","CVE-2026-6299","CVE-2026-6300","CVE-2026-6301","CVE-2026-6302","CVE-2026-6303","CVE-2026-6304","CVE-2026-6305","CVE-2026-6306","CVE-2026-6307","CVE-2026-6308","CVE-2026-6309","CVE-2026-6310","CVE-2026-6311","CVE-2026-6312","CVE-2026-6313","CVE-2026-6314","CVE-2026-6315","CVE-2026-6316","CVE-2026-6317","CVE-2026-6318","CVE-2026-6319","CVE-2026-6358","CVE-2026-6359","CVE-2026-6360","CVE-2026-6361","CVE-2026-6362","CVE-2026-6363","CVE-2026-6364"],"upstream":["CVE-2026-6296","CVE-2026-6297","CVE-2026-6298","CVE-2026-6299","CVE-2026-6300","CVE-2026-6301","CVE-2026-6302","CVE-2026-6303","CVE-2026-6304","CVE-2026-6305","CVE-2026-6306","CVE-2026-6307","CVE-2026-6308","CVE-2026-6309","CVE-2026-6310","CVE-2026-6311","CVE-2026-6312","CVE-2026-6313","CVE-2026-6314","CVE-2026-6315","CVE-2026-6316","CVE-2026-6317","CVE-2026-6318","CVE-2026-6319","CVE-2026-6358","CVE-2026-6359","CVE-2026-6360","CVE-2026-6361","CVE-2026-6362","CVE-2026-6363","CVE-2026-6364"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1262174"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6296"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6297"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6298"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6299"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6300"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6301"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6302"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6303"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6304"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6305"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6306"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6307"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6308"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6309"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6310"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6311"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6312"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6313"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6314"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6315"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6316"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6317"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6319"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6358"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6359"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6360"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6361"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6362"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6363"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6364"}],"affected":[{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"147.0.7727.101-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"147.0.7727.101-bp160.1.1","chromium":"147.0.7727.101-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20588-1.json"}}],"schema_version":"1.7.5"}