{"id":"openSUSE-SU-2026:22202-1","summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 156.0.8078.73 (boo#1288218):\n  * CVE-2026-118306: Memory corruption in FileSystem\n  * CVE-2026-118331: Improper input validation in FileAPI\n  * CVE-2026-118348: Improper input validation in Skia\n  * CVE-2026-118344: Use after free in Layout\n  * CVE-2026-118357: Use after free in FileSystem\n  * CVE-2026-118318: Improper access control in V8\n  * CVE-2026-118350: Use after free in Turbolev\n  * CVE-2026-118339: Use after free in Animation\n  * CVE-2026-118305: Memory corruption in Turbolev\n  * CVE-2026-118317: Memory corruption in HTML\n  * CVE-2026-118320: Memory corruption in V8\n  * CVE-2026-118322: Memory corruption in ANGLE\n  * CVE-2026-118329: Improper input validation in ANGLE\n  * CVE-2026-118354: Improper input validation in Skia\n  * CVE-2026-118340: Memory corruption in Skia\n  * CVE-2026-118321: Improper input validation in Core\n  * CVE-2026-118337: Improper access control in Forms\n  * CVE-2026-118352: Memory corruption in Cache\n  * CVE-2026-118355: Improper input validation in Command\n  * CVE-2026-118307: Use after free in Paint\n  * CVE-2026-118351: Memory corruption in Skia\n  * CVE-2026-118328: Improper input validation in WebRTC\n  * CVE-2026-118333: Missing authorization in Video\n  * CVE-2026-118336: Improper input validation in Headless\n  * CVE-2026-118358: Memory corruption in WebAudio\n  * CVE-2026-118353: Use after free in Paint\n  * CVE-2026-118349: Memory corruption in Payments\n  * CVE-2026-118327: Memory corruption in Media\n  * CVE-2026-118359: Memory corruption in V8\n  * CVE-2026-118343: Improper input validation in ReadingList\n  * CVE-2026-118311: Memory corruption in Media\n  * CVE-2026-118334: Use after free in ImageCapture\n  * CVE-2026-118332: Improper input validation in Compositing\n  * CVE-2026-118313: Use after free in Video\n  * CVE-2026-118345: Use after free in PDFium\n  * CVE-2026-118304: Improper input validation in SVG\n  * CVE-2026-118316: Improper input validation in V8\n  * CVE-2026-118346: Use after free in Compositing\n  * CVE-2026-118342: Out of bounds write in Editing\n  * CVE-2026-118310: Improper input validation in Views\n  * CVE-2026-118335: Improper input validation in Metrics\n  * CVE-2026-118308: Use after free in SVG\n  * CVE-2026-118314: Improper input validation in UI\n  * CVE-2026-118347: Use after free in FileSystem\n  * CVE-2026-118341: Use after free in Modularization\n  * CVE-2026-118330: Use after free in Browser\n  * CVE-2026-118315: Improper input validation in SVG\n  * CVE-2026-118356: Use after free in WTF\n  * CVE-2026-118309: Improper input validation in UI\n  * CVE-2026-118319: Memory corruption in Skia\n  * CVE-2026-118312: Memory corruption in Paint\n  * CVE-2026-118338: Use after free in Animation\n","modified":"2026-10-31T18:00:08.688531147Z","published":"2026-10-29T05:01:21Z","related":["CVE-2026-118304","CVE-2026-118305","CVE-2026-118306","CVE-2026-118307","CVE-2026-118308","CVE-2026-118309","CVE-2026-118310","CVE-2026-118311","CVE-2026-118312","CVE-2026-118313","CVE-2026-118314","CVE-2026-118315","CVE-2026-118316","CVE-2026-118317","CVE-2026-118318","CVE-2026-118319","CVE-2026-118320","CVE-2026-118321","CVE-2026-118322","CVE-2026-118327","CVE-2026-118328","CVE-2026-118329","CVE-2026-118330","CVE-2026-118331","CVE-2026-118332","CVE-2026-118333","CVE-2026-118334","CVE-2026-118335","CVE-2026-118336","CVE-2026-118337","CVE-2026-118338","CVE-2026-118339","CVE-2026-118340","CVE-2026-118341","CVE-2026-118342","CVE-2026-118343","CVE-2026-118344","CVE-2026-118345","CVE-2026-118346","CVE-2026-118347","CVE-2026-118348","CVE-2026-118349","CVE-2026-118350","CVE-2026-118351","CVE-2026-118352","CVE-2026-118353","CVE-2026-118354","CVE-2026-118355","CVE-2026-118356","CVE-2026-118357","CVE-2026-118358","CVE-2026-118359"],"upstream":["CVE-2026-118304","CVE-2026-118305","CVE-2026-118306","CVE-2026-118307","CVE-2026-118308","CVE-2026-118309","CVE-2026-118310","CVE-2026-118311","CVE-2026-118312","CVE-2026-118313","CVE-2026-118314","CVE-2026-118315","CVE-2026-118316","CVE-2026-118317","CVE-2026-118318","CVE-2026-118319","CVE-2026-118320","CVE-2026-118321","CVE-2026-118322","CVE-2026-118327","CVE-2026-118328","CVE-2026-118329","CVE-2026-118330","CVE-2026-118331","CVE-2026-118332","CVE-2026-118333","CVE-2026-118334","CVE-2026-118335","CVE-2026-118336","CVE-2026-118337","CVE-2026-118338","CVE-2026-118339","CVE-2026-118340","CVE-2026-118341","CVE-2026-118342","CVE-2026-118343","CVE-2026-118344","CVE-2026-118345","CVE-2026-118346","CVE-2026-118347","CVE-2026-118348","CVE-2026-118349","CVE-2026-118350","CVE-2026-118351","CVE-2026-118352","CVE-2026-118353","CVE-2026-118354","CVE-2026-118355","CVE-2026-118356","CVE-2026-118357","CVE-2026-118358","CVE-2026-118359"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1288218"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118304"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118305"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118306"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118307"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118308"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118309"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118310"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118311"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118312"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118313"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118314"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118315"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118316"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118317"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118319"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118320"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118321"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118322"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118327"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118328"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118329"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118330"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118331"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118332"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118333"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118334"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118335"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118336"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118337"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118338"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118339"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118340"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118341"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118342"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118343"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118344"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118345"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118346"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118347"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118348"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118349"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118350"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118351"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118352"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118353"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118354"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118355"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118356"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118357"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118358"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-118359"}],"affected":[{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"156.0.8078.73-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chromium":"156.0.8078.73-bp160.1.1","chromedriver":"156.0.8078.73-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22202-1.json"}}],"schema_version":"1.9.2"}