{"id":"openSUSE-SU-2026:21913-1","summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 153.0.8010.47 (boo#1280687):\n  * CVE-2026-91726: Out of bounds read in WebGL\n  * CVE-2026-91721: Use after free in Internals\n  * CVE-2026-91749: Use after free in Workers\n  * CVE-2026-91724: Use after free in Input\n  * CVE-2026-91728: Integer overflow in V8\n  * CVE-2026-91734: Incorrect authorization in Core\n  * CVE-2026-91727: Incorrect reference resolution in Extensions\n  * CVE-2026-91743: Race condition in Core\n  * CVE-2026-91744: Race condition in PlatformIntegration\n  * CVE-2026-91712: Race condition in Extensions\n  * CVE-2026-91748: Race condition in Extensions\n  * CVE-2026-91720: Uninitialized resource in ANGLE\n  * CVE-2026-91731: Type confusion in Compositing\n  * CVE-2026-91747: Use after free in Skia\n  * CVE-2026-91733: Improper state validation in Skia\n  * CVE-2026-91741: Type confusion in CacheStorage\n  * CVE-2026-91709: Type confusion in ServiceWorker\n  * CVE-2026-91717: Missing authorization in Android\n  * CVE-2026-91735: Incorrect authorization in WebUI\n  * CVE-2026-91708: Race condition in Network\n  * CVE-2026-91736: Use after free in DOM\n  * CVE-2026-91740: Uninitialized resource in Skia\n  * CVE-2026-91710: Use after free in WebAppInstalls\n  * CVE-2026-91718: Use after free in Core\n  * CVE-2026-91716: Use after free in Auth\n  * CVE-2026-91746: Integer overflow in Compositing\n  * CVE-2026-91729: Use after free in DigitalCredentials\n  * CVE-2026-91737: Use after free in PDF\n  * CVE-2026-91711: Out of bounds write in ServiceWorker\n  * CVE-2026-91715: Type confusion in ServiceWorker\n  * CVE-2026-91745: Use after free in V8\n  * CVE-2026-91723: Race condition in WebAppInstalls\n  * CVE-2026-91732: Missing authorization in AppManifest\n  * CVE-2026-91742: Confused deputy in PriceTracking\n  * CVE-2026-91714: Observable discrepancy in Fonts\n  * CVE-2026-91725: Observable discrepancy in CSS\n  * CVE-2026-91739: Missing authorization in Transactions Platform\n  * CVE-2026-91713: Missing authorization in Browser\n  * CVE-2026-91738: Improper input validation in ANGLE\n  * CVE-2026-91730: Incomplete cleanup in GetUserMedia\n  * CVE-2026-91722: Use after free in Input\n  * CVE-2026-91719: Code injection in XML\n","modified":"2026-09-25T18:23:13.329355584Z","published":"2026-09-18T03:24:06Z","related":["CVE-2026-91708","CVE-2026-91709","CVE-2026-91710","CVE-2026-91711","CVE-2026-91712","CVE-2026-91713","CVE-2026-91714","CVE-2026-91715","CVE-2026-91716","CVE-2026-91717","CVE-2026-91718","CVE-2026-91719","CVE-2026-91720","CVE-2026-91721","CVE-2026-91722","CVE-2026-91723","CVE-2026-91724","CVE-2026-91725","CVE-2026-91726","CVE-2026-91727","CVE-2026-91728","CVE-2026-91729","CVE-2026-91730","CVE-2026-91731","CVE-2026-91732","CVE-2026-91733","CVE-2026-91734","CVE-2026-91735","CVE-2026-91736","CVE-2026-91737","CVE-2026-91738","CVE-2026-91739","CVE-2026-91740","CVE-2026-91741","CVE-2026-91742","CVE-2026-91743","CVE-2026-91744","CVE-2026-91745","CVE-2026-91746","CVE-2026-91747","CVE-2026-91748","CVE-2026-91749"],"upstream":["CVE-2026-91708","CVE-2026-91709","CVE-2026-91710","CVE-2026-91711","CVE-2026-91712","CVE-2026-91713","CVE-2026-91714","CVE-2026-91715","CVE-2026-91716","CVE-2026-91717","CVE-2026-91718","CVE-2026-91719","CVE-2026-91720","CVE-2026-91721","CVE-2026-91722","CVE-2026-91723","CVE-2026-91724","CVE-2026-91725","CVE-2026-91726","CVE-2026-91727","CVE-2026-91728","CVE-2026-91729","CVE-2026-91730","CVE-2026-91731","CVE-2026-91732","CVE-2026-91733","CVE-2026-91734","CVE-2026-91735","CVE-2026-91736","CVE-2026-91737","CVE-2026-91738","CVE-2026-91739","CVE-2026-91740","CVE-2026-91741","CVE-2026-91742","CVE-2026-91743","CVE-2026-91744","CVE-2026-91745","CVE-2026-91746","CVE-2026-91747","CVE-2026-91748","CVE-2026-91749"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280687"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91708"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91709"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91710"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91711"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91712"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91713"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91714"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91715"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91716"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91717"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91718"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91719"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91720"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91721"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91722"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91723"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91724"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91725"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91726"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91727"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91728"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91729"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91730"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91731"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91732"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91733"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91734"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91735"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91736"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91737"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91738"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91739"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91740"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91741"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91742"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91743"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91744"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91745"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91746"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91747"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91748"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-91749"}],"affected":[{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.47-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"153.0.8010.47-bp160.1.1","chromium":"153.0.8010.47-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21913-1.json"}}],"schema_version":"1.9.0"}