{"id":"openSUSE-SU-2026:20660-1","summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 147.0.7727.137 (boo#1263158)\n  * CVE-2026-7363: Use after free in Canvas\n  * CVE-2026-7361: Use after free in iOS\n  * CVE-2026-7344: Use after free in Accessibility\n  * CVE-2026-7343: Use after free in Views\n  * CVE-2026-7333: Use after free in GPU\n  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing\n  * CVE-2026-7359: Use after free in ANGLE\n  * CVE-2026-7358: Use after free in Animation\n  * CVE-2026-7334: Use after free in Views\n  * CVE-2026-7357: Use after free in GPU\n  * CVE-2026-7356: Use after free in Navigation\n  * CVE-2026-7354: Out of bounds read and write in Angle\n  * CVE-2026-7353: Heap buffer overflow in Skia\n  * CVE-2026-7352: Use after free in Media\n  * CVE-2026-7351: Race in MHTML\n  * CVE-2026-7350: Use after free in WebMIDI\n  * CVE-2026-7349: Use after free in Cast\n  * CVE-2026-7348: Use after free in Codecs\n  * CVE-2026-7335: Use after free in media\n  * CVE-2026-7336: Use after free in WebRTC\n  * CVE-2026-7337: Type Confusion in V8\n  * CVE-2026-7347: Use after free in Chromoting\n  * CVE-2026-7346: Inappropriate implementation in Tint\n  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback\n  * CVE-2026-7338: Use after free in Cast\n  * CVE-2026-7342: Use after free in WebView\n  * CVE-2026-7341: Use after free in WebRTC\n  * CVE-2026-7339: Heap buffer overflow in WebRTC\n  * CVE-2026-7340: Integer overflow in ANGLE\n  * CVE-2026-7355: Use after free in Media\n\n- Chromium 147.0.7727.116 (boo#1262586)\n\n- Chromium 147.0.7727.101 (boo#1262174)\n  * CVE-2026-6296: Heap buffer overflow in ANGLE\n  * CVE-2026-6297: Use after free in Proxy\n  * CVE-2026-6298: Heap buffer overflow in Skia\n  * CVE-2026-6299: Use after free in Prerender\n  * CVE-2026-6358: Use after free in XR\n  * CVE-2026-6359: Use after free in Video\n  * CVE-2026-6300: Use after free in CSS\n  * CVE-2026-6301: Type Confusion in Turbofan\n  * CVE-2026-6302: Use after free in Video\n  * CVE-2026-6303: Use after free in Codecs\n  * CVE-2026-6304: Use after free in Graphite\n  * CVE-2026-6305: Heap buffer overflow in PDFium\n  * CVE-2026-6306: Heap buffer overflow in PDFium\n  * CVE-2026-6307: Type Confusion in Turbofan\n  * CVE-2026-6308: Out of bounds read in Media\n  * CVE-2026-6309: Use after free in Viz\n  * CVE-2026-6360: Use after free in FileSystem\n  * CVE-2026-6310: Use after free in Dawn\n  * CVE-2026-6311: Uninitialized Use in Accessibility\n  * CVE-2026-6312: Insufficient policy enforcement in Passwords\n  * CVE-2026-6313: Insufficient policy enforcement in CORS\n  * CVE-2026-6314: Out of bounds write in GPU\n  * CVE-2026-6315: Use after free in Permissions\n  * CVE-2026-6316: Use after free in Forms\n  * CVE-2026-6361: Heap buffer overflow in PDFium\n  * CVE-2026-6362: Use after free in Codecs\n  * CVE-2026-6317: Use after free in Cast\n  * CVE-2026-6363: Type Confusion in V8\n  * CVE-2026-6318: Use after free in Codecs\n  * CVE-2026-6319: Use after free in Payments\n  * CVE-2026-6364: Out of bounds read in Skia\n\n- Chromium 147.0.7727.55 (boo#1261758):\n\n  * CVE-2026-5858: Heap buffer overflow in WebML\n  * CVE-2026-5859: Integer overflow in WebML\n  * CVE-2026-5860: Use after free in WebRTC\n  * CVE-2026-5861: Use after free in V8\n  * CVE-2026-5862: Inappropriate implementation in V8\n  * CVE-2026-5863: Inappropriate implementation in V8\n  * CVE-2026-5864: Heap buffer overflow in WebAudio\n  * CVE-2026-5865: Type Confusion in V8\n  * CVE-2026-5866: Use after free in Media\n  * CVE-2026-5867: Heap buffer overflow in WebML\n  * CVE-2026-5868: Heap buffer overflow in ANGLE\n  * CVE-2026-5869: Heap buffer overflow in WebML\n  * CVE-2026-5870: Integer overflow in Skia\n  * CVE-2026-5871: Type Confusion in V8\n  * CVE-2026-5872: Use after free in Blink\n  * CVE-2026-5873: Out of bounds read and write in V8\n  * CVE-2026-5874: Use after free in PrivateAI\n  * CVE-2026-5875: Policy bypass in Blink\n  * CVE-2026-5876: Side-channel information leakage in Navigation\n  * CVE-2026-5877: Use after free in Navigation\n  * CVE-2026-5878: Incorrect security UI in Blink\n  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE\n  * CVE-2026-5880: Incorrect security UI in browser UI\n  * CVE-2026-5881: Policy bypass in LocalNetworkAccess\n  * CVE-2026-5882: Incorrect security UI in Fullscreen\n  * CVE-2026-5883: Use after free in Media\n  * CVE-2026-5884: Insufficient validation of untrusted input in Media\n  * CVE-2026-5885: Insufficient validation of untrusted input in WebML\n  * CVE-2026-5886: Out of bounds read in WebAudio\n  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads\n  * CVE-2026-5888: Uninitialized Use in WebCodecs\n  * CVE-2026-5889: Cryptographic Flaw in PDFium\n  * CVE-2026-5890: Race in WebCodecs\n  * CVE-2026-5891: Insufficient policy enforcement in browser UI\n  * CVE-2026-5892: Insufficient policy enforcement in PWAs\n  * CVE-2026-5893: Race in V8\n  * CVE-2026-5894: Inappropriate implementation in PDF\n  * CVE-2026-5895: Incorrect security UI in Omnibox\n  * CVE-2026-5896: Policy bypass in Audio\n  * CVE-2026-5897: Incorrect security UI in Downloads\n  * CVE-2026-5898: Incorrect security UI in Omnibox\n  * CVE-2026-5899: Incorrect security UI in History Navigation\n  * CVE-2026-5900: Policy bypass in Downloads\n  * CVE-2026-5901: Policy bypass in DevTools\n  * CVE-2026-5902: Race in Media\n  * CVE-2026-5903: Policy bypass in IFrameSandbox\n  * CVE-2026-5904: Use after free in V8\n  * CVE-2026-5905: Incorrect security UI in Permissions\n  * CVE-2026-5906: Incorrect security UI in Omnibox\n  * CVE-2026-5907: Insufficient data validation in Media\n  * CVE-2026-5908: Integer overflow in Media\n  * CVE-2026-5909: Integer overflow in Media\n  * CVE-2026-5910: Integer overflow in Media\n  * CVE-2026-5911: Policy bypass in ServiceWorkers\n  * CVE-2026-5912: Integer overflow in WebRTC\n  * CVE-2026-5913: Out of bounds read in Blink\n  * CVE-2026-5914: Type Confusion in CSS\n  * CVE-2026-5915: Insufficient validation of untrusted input in WebML\n  * CVE-2026-5918: Inappropriate implementation in Navigation\n  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets\n  * enforce a number of new Local Area Network (LAN) restrictions\n  * New Web Printing API\n  * vertical tabs support (trial)\n\n- new in 147 (for developers):\n\n  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.\n  * CSS contrast-color() helps meet accessibility requirements\n  * The CSS border-shape property lets you create non-rectangular borders\n\n  * CVE-2025-4096: Heap buffer overflow in HTML\n  * CVE-2025-4050: Out of bounds memory access in DevTools\n  * CVE-2025-4051: Insufficient data validation in DevTools\n  * CVE-2025-4052: Inappropriate implementation in DevTools\n  * CVE-2024-7000: Use after free in CSS\n  * CVE-2024-3834: Use after free in Downloads\n  * CVE-2020-6465: Use after free in reader mode\n  * CVE-2020-6466: Use after free in media\n  * CVE-2020-6467: Use after free in WebRTC\n  * CVE-2020-6468: Type Confusion in V8\n  * CVE-2020-6469: Insufficient policy enforcement in developer tools\n  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard\n  * CVE-2020-6471: Insufficient policy enforcement in developer tools\n  * CVE-2020-6472: Insufficient policy enforcement in developer tools\n  * CVE-2020-6473: Insufficient policy enforcement in Blink\n  * CVE-2020-6474: Use after free in Blink\n  * CVE-2020-6475: Incorrect security UI in full screen\n  * CVE-2020-6476: Insufficient policy enforcement in tab strip\n  * CVE-2020-6477: Inappropriate implementation in installer\n  * CVE-2020-6478: Inappropriate implementation in full screen\n  * CVE-2020-6479: Inappropriate implementation in sharing\n  * CVE-2020-6480: Insufficient policy enforcement in enterprise\n  * CVE-2020-6481: Insufficient policy enforcement in URL formatting\n  * CVE-2020-6482: Insufficient policy enforcement in developer tools\n  * CVE-2020-6483: Insufficient policy enforcement in payments\n  * CVE-2020-6484: Insufficient data validation in ChromeDriver\n  * CVE-2020-6485: Insufficient data validation in media router\n  * CVE-2020-6486: Insufficient policy enforcement in navigations\n  * CVE-2020-6487: Insufficient policy enforcement in downloads\n  * CVE-2020-6488: Insufficient policy enforcement in downloads\n  * CVE-2020-6489: Inappropriate implementation in developer tools\n  * CVE-2020-6490: Insufficient data validation in loader\n  * CVE-2020-6491: Incorrect security UI in site information\n  * CVE-2019-5754: Inappropriate implementation in QUIC Networking\n  * CVE-2019-5782:  Inappropriate implementation in V8\n  * CVE-2019-5755: Inappropriate implementation in V8\n  * CVE-2019-5756: Use after free in PDFium\n  * CVE-2019-5757: Type Confusion in SVG\n  * CVE-2019-5758: Use after free in Blink\n  * CVE-2019-5759: Use after free in HTML select elements\n  * CVE-2019-5760: Use after free in WebRTC\n  * CVE-2019-5761: Use after free in SwiftShader\n  * CVE-2019-5762: Use after free in PDFium\n  * CVE-2019-5763: Insufficient validation of untrusted input in V8\n  * CVE-2019-5764: Use after free in WebRTC\n  * CVE-2019-5765: Insufficient policy enforcement in the browser\n  * CVE-2019-5766: Insufficient policy enforcement in Canvas\n  * CVE-2019-5767: Incorrect security UI in WebAPKs\n  * CVE-2019-5768: Insufficient policy enforcement in DevTools\n  * CVE-2019-5769: Insufficient validation of untrusted input in Blink\n  * CVE-2019-5770: Heap buffer overflow in WebGL\n  * CVE-2019-5771: Heap buffer overflow in SwiftShader\n  * CVE-2019-5772: Use after free in PDFium\n  * CVE-2019-5773: Insufficient data validation in IndexedDB\n  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing\n  * CVE-2019-5775: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5776: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5777: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5778: Insufficient policy enforcement in Extensions\n  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker\n  * CVE-2019-5780: Insufficient policy enforcement\n  * CVE-2019-5781: Insufficient policy enforcement in Omnibox\n  * High CVE-2018-6031: Use after free in PDFium\n  * High CVE-2018-6032: Same origin bypass in Shared Worker\n  * High CVE-2018-6033: Race when opening downloaded files\n  * Medium CVE-2018-6034: Integer overflow in Blink\n  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6036: Integer underflow in WebAssembly\n  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill\n  * Medium CVE-2018-6038: Heap buffer overflow in WebGL\n  * Medium CVE-2018-6039: XSS in DevTools\n  * Medium CVE-2018-6040: Content security policy bypass\n  * Medium CVE-2018-6041: URL spoof in Navigation\n  * Medium CVE-2018-6042: URL spoof in OmniBox\n  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers\n  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6047: Cross origin URL leak in WebGL\n  * Low CVE-2018-6048: Referrer policy bypass in Blink\n  * Low CVE-2017-15420: URL spoofing in Omnibox\n  * Low CVE-2018-6049: UI spoof in Permissions\n  * Low CVE-2018-6050: URL spoof in OmniBox\n  * Low CVE-2018-6051: Referrer leak in XSS Auditor\n  * Low CVE-2018-6052: Incomplete no-referrer policy implementation\n  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page\n  * Low CVE-2018-6054: Use after free in WebUI\n  * CVE-2017-5070: Type confusion in V8\n  * CVE-2017-5071: Out of bounds read in V8\n  * CVE-2017-5072: Address spoofing in Omnibox\n  * CVE-2017-5073: Use after free in print preview\n  * CVE-2017-5074: Use after free in Apps Bluetooth\n  * CVE-2017-5075: Information leak in CSP reporting\n  * CVE-2017-5086: Address spoofing in Omnibox\n  * CVE-2017-5076: Address spoofing in Omnibox\n  * CVE-2017-5077: Heap buffer overflow in Skia\n  * CVE-2017-5078: Possible command injection in mailto handling\n  * CVE-2017-5079: UI spoofing in Blink\n  * CVE-2017-5080: Use after free in credit card autofill\n  * CVE-2017-5081: Extension verification bypass\n  * CVE-2017-5082: Insufficient hardening in credit card editor\n  * CVE-2017-5083: UI spoofing in Blink\n  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages\n    - CVE-2016-1663: Use-after-free in Blink's V8 bindings\n    * CVE-2013-6643: Unprompted sync with an attacker's\n  * Use Google's online spellchecker to identify misspelled words\n","modified":"2026-09-02T11:26:18.794471216Z","published":"2026-08-31T08:40:11Z","related":["CVE-2026-5858","CVE-2026-5859","CVE-2026-5860","CVE-2026-5861","CVE-2026-5862","CVE-2026-5863","CVE-2026-5864","CVE-2026-5865","CVE-2026-5866","CVE-2026-5867","CVE-2026-5868","CVE-2026-5869","CVE-2026-5870","CVE-2026-5871","CVE-2026-5872","CVE-2026-5873","CVE-2026-5874","CVE-2026-5875","CVE-2026-5876","CVE-2026-5877","CVE-2026-5878","CVE-2026-5879","CVE-2026-5880","CVE-2026-5881","CVE-2026-5882","CVE-2026-5883","CVE-2026-5884","CVE-2026-5885","CVE-2026-5886","CVE-2026-5887","CVE-2026-5888","CVE-2026-5889","CVE-2026-5890","CVE-2026-5891","CVE-2026-5892","CVE-2026-5893","CVE-2026-5894","CVE-2026-5895","CVE-2026-5896","CVE-2026-5897","CVE-2026-5898","CVE-2026-5899","CVE-2026-5900","CVE-2026-5901","CVE-2026-5902","CVE-2026-5903","CVE-2026-5904","CVE-2026-5905","CVE-2026-5906","CVE-2026-5907","CVE-2026-5908","CVE-2026-5909","CVE-2026-5910","CVE-2026-5911","CVE-2026-5912","CVE-2026-5913","CVE-2026-5914","CVE-2026-5915","CVE-2026-5918","CVE-2026-5919","CVE-2026-6296","CVE-2026-6297","CVE-2026-6298","CVE-2026-6299","CVE-2026-6300","CVE-2026-6301","CVE-2026-6302","CVE-2026-6303","CVE-2026-6304","CVE-2026-6305","CVE-2026-6306","CVE-2026-6307","CVE-2026-6308","CVE-2026-6309","CVE-2026-6310","CVE-2026-6311","CVE-2026-6312","CVE-2026-6313","CVE-2026-6314","CVE-2026-6315","CVE-2026-6316","CVE-2026-6317","CVE-2026-6318","CVE-2026-6319","CVE-2026-6358","CVE-2026-6359","CVE-2026-6360","CVE-2026-6361","CVE-2026-6362","CVE-2026-6363","CVE-2026-6364","CVE-2026-6919","CVE-2026-6920","CVE-2026-6921","CVE-2026-7333","CVE-2026-7334","CVE-2026-7335","CVE-2026-7336","CVE-2026-7337","CVE-2026-7338","CVE-2026-7339","CVE-2026-7340","CVE-2026-7341","CVE-2026-7342","CVE-2026-7343","CVE-2026-7344","CVE-2026-7345","CVE-2026-7346","CVE-2026-7347","CVE-2026-7348","CVE-2026-7349","CVE-2026-7350","CVE-2026-7351","CVE-2026-7352","CVE-2026-7353","CVE-2026-7354","CVE-2026-7355","CVE-2026-7356","CVE-2026-7357","CVE-2026-7358","CVE-2026-7359","CVE-2026-7360","CVE-2026-7361","CVE-2026-7363"],"upstream":["CVE-2026-5858","CVE-2026-5859","CVE-2026-5860","CVE-2026-5861","CVE-2026-5862","CVE-2026-5863","CVE-2026-5864","CVE-2026-5865","CVE-2026-5866","CVE-2026-5867","CVE-2026-5868","CVE-2026-5869","CVE-2026-5870","CVE-2026-5871","CVE-2026-5872","CVE-2026-5873","CVE-2026-5874","CVE-2026-5875","CVE-2026-5876","CVE-2026-5877","CVE-2026-5878","CVE-2026-5879","CVE-2026-5880","CVE-2026-5881","CVE-2026-5882","CVE-2026-5883","CVE-2026-5884","CVE-2026-5885","CVE-2026-5886","CVE-2026-5887","CVE-2026-5888","CVE-2026-5889","CVE-2026-5890","CVE-2026-5891","CVE-2026-5892","CVE-2026-5893","CVE-2026-5894","CVE-2026-5895","CVE-2026-5896","CVE-2026-5897","CVE-2026-5898","CVE-2026-5899","CVE-2026-5900","CVE-2026-5901","CVE-2026-5902","CVE-2026-5903","CVE-2026-5904","CVE-2026-5905","CVE-2026-5906","CVE-2026-5907","CVE-2026-5908","CVE-2026-5909","CVE-2026-5910","CVE-2026-5911","CVE-2026-5912","CVE-2026-5913","CVE-2026-5914","CVE-2026-5915","CVE-2026-5918","CVE-2026-5919","CVE-2026-6296","CVE-2026-6297","CVE-2026-6298","CVE-2026-6299","CVE-2026-6300","CVE-2026-6301","CVE-2026-6302","CVE-2026-6303","CVE-2026-6304","CVE-2026-6305","CVE-2026-6306","CVE-2026-6307","CVE-2026-6308","CVE-2026-6309","CVE-2026-6310","CVE-2026-6311","CVE-2026-6312","CVE-2026-6313","CVE-2026-6314","CVE-2026-6315","CVE-2026-6316","CVE-2026-6317","CVE-2026-6318","CVE-2026-6319","CVE-2026-6358","CVE-2026-6359","CVE-2026-6360","CVE-2026-6361","CVE-2026-6362","CVE-2026-6363","CVE-2026-6364","CVE-2026-6919","CVE-2026-6920","CVE-2026-6921","CVE-2026-7333","CVE-2026-7334","CVE-2026-7335","CVE-2026-7336","CVE-2026-7337","CVE-2026-7338","CVE-2026-7339","CVE-2026-7340","CVE-2026-7341","CVE-2026-7342","CVE-2026-7343","CVE-2026-7344","CVE-2026-7345","CVE-2026-7346","CVE-2026-7347","CVE-2026-7348","CVE-2026-7349","CVE-2026-7350","CVE-2026-7351","CVE-2026-7352","CVE-2026-7353","CVE-2026-7354","CVE-2026-7355","CVE-2026-7356","CVE-2026-7357","CVE-2026-7358","CVE-2026-7359","CVE-2026-7360","CVE-2026-7361","CVE-2026-7363"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261758"},{"type":"REPORT","url":"https://bugzilla.suse.com/1262174"},{"type":"REPORT","url":"https://bugzilla.suse.com/1262586"},{"type":"REPORT","url":"https://bugzilla.suse.com/1263158"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5858"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5859"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5860"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5861"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5862"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5863"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5864"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5865"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5866"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5867"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5868"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5869"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5870"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5871"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5872"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5873"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5874"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5875"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5876"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5877"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5878"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5879"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5880"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5881"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5882"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5883"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5884"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5885"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5886"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5887"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5888"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5889"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5890"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5891"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5892"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5893"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5894"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5895"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5896"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5897"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5898"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5899"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5900"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5901"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5902"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5903"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5904"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5905"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5906"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5907"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5908"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5909"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5910"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5911"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5912"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5913"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5914"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5915"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5918"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5919"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6296"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6297"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6298"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6299"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6300"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6301"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6302"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6303"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6304"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6305"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6306"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6307"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6308"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6309"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6310"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6311"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6312"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6313"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6314"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6315"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6316"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6317"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6319"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6358"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6359"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6360"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6361"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6362"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6363"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6364"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6919"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6920"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6921"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7333"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7334"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7335"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7336"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7337"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7338"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7339"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7340"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7341"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7342"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7343"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7344"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7345"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7346"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7347"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7348"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7349"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7350"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7351"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7352"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7353"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7354"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7355"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7356"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7357"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7358"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7359"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7360"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7361"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7363"}],"affected":[{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"147.0.7727.137-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chromium":"147.0.7727.137-bp160.1.1","chromedriver":"147.0.7727.137-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20660-1.json"}}],"schema_version":"1.9.0"}