OPENSUSE-SU-2026:20660-1
Vulnerability from csaf_opensuse - Published: 2026-08-31 08:40 - Updated: 2026-09-17 17:31Summary
Security update for chromium
Severity
Critical
Notes
Title of the patch: Security update for chromium
Description of the patch: This update for chromium fixes the following issues:
Changes in chromium:
- Chromium 147.0.7727.137 (boo#1263158)
* CVE-2026-7363: Use after free in Canvas
* CVE-2026-7361: Use after free in iOS
* CVE-2026-7344: Use after free in Accessibility
* CVE-2026-7343: Use after free in Views
* CVE-2026-7333: Use after free in GPU
* CVE-2026-7360: Insufficient validation of untrusted input in Compositing
* CVE-2026-7359: Use after free in ANGLE
* CVE-2026-7358: Use after free in Animation
* CVE-2026-7334: Use after free in Views
* CVE-2026-7357: Use after free in GPU
* CVE-2026-7356: Use after free in Navigation
* CVE-2026-7354: Out of bounds read and write in Angle
* CVE-2026-7353: Heap buffer overflow in Skia
* CVE-2026-7352: Use after free in Media
* CVE-2026-7351: Race in MHTML
* CVE-2026-7350: Use after free in WebMIDI
* CVE-2026-7349: Use after free in Cast
* CVE-2026-7348: Use after free in Codecs
* CVE-2026-7335: Use after free in media
* CVE-2026-7336: Use after free in WebRTC
* CVE-2026-7337: Type Confusion in V8
* CVE-2026-7347: Use after free in Chromoting
* CVE-2026-7346: Inappropriate implementation in Tint
* CVE-2026-7345: Insufficient validation of untrusted input in Feedback
* CVE-2026-7338: Use after free in Cast
* CVE-2026-7342: Use after free in WebView
* CVE-2026-7341: Use after free in WebRTC
* CVE-2026-7339: Heap buffer overflow in WebRTC
* CVE-2026-7340: Integer overflow in ANGLE
* CVE-2026-7355: Use after free in Media
- Chromium 147.0.7727.116 (boo#1262586)
- Chromium 147.0.7727.101 (boo#1262174)
* CVE-2026-6296: Heap buffer overflow in ANGLE
* CVE-2026-6297: Use after free in Proxy
* CVE-2026-6298: Heap buffer overflow in Skia
* CVE-2026-6299: Use after free in Prerender
* CVE-2026-6358: Use after free in XR
* CVE-2026-6359: Use after free in Video
* CVE-2026-6300: Use after free in CSS
* CVE-2026-6301: Type Confusion in Turbofan
* CVE-2026-6302: Use after free in Video
* CVE-2026-6303: Use after free in Codecs
* CVE-2026-6304: Use after free in Graphite
* CVE-2026-6305: Heap buffer overflow in PDFium
* CVE-2026-6306: Heap buffer overflow in PDFium
* CVE-2026-6307: Type Confusion in Turbofan
* CVE-2026-6308: Out of bounds read in Media
* CVE-2026-6309: Use after free in Viz
* CVE-2026-6360: Use after free in FileSystem
* CVE-2026-6310: Use after free in Dawn
* CVE-2026-6311: Uninitialized Use in Accessibility
* CVE-2026-6312: Insufficient policy enforcement in Passwords
* CVE-2026-6313: Insufficient policy enforcement in CORS
* CVE-2026-6314: Out of bounds write in GPU
* CVE-2026-6315: Use after free in Permissions
* CVE-2026-6316: Use after free in Forms
* CVE-2026-6361: Heap buffer overflow in PDFium
* CVE-2026-6362: Use after free in Codecs
* CVE-2026-6317: Use after free in Cast
* CVE-2026-6363: Type Confusion in V8
* CVE-2026-6318: Use after free in Codecs
* CVE-2026-6319: Use after free in Payments
* CVE-2026-6364: Out of bounds read in Skia
- Chromium 147.0.7727.55 (boo#1261758):
* CVE-2026-5858: Heap buffer overflow in WebML
* CVE-2026-5859: Integer overflow in WebML
* CVE-2026-5860: Use after free in WebRTC
* CVE-2026-5861: Use after free in V8
* CVE-2026-5862: Inappropriate implementation in V8
* CVE-2026-5863: Inappropriate implementation in V8
* CVE-2026-5864: Heap buffer overflow in WebAudio
* CVE-2026-5865: Type Confusion in V8
* CVE-2026-5866: Use after free in Media
* CVE-2026-5867: Heap buffer overflow in WebML
* CVE-2026-5868: Heap buffer overflow in ANGLE
* CVE-2026-5869: Heap buffer overflow in WebML
* CVE-2026-5870: Integer overflow in Skia
* CVE-2026-5871: Type Confusion in V8
* CVE-2026-5872: Use after free in Blink
* CVE-2026-5873: Out of bounds read and write in V8
* CVE-2026-5874: Use after free in PrivateAI
* CVE-2026-5875: Policy bypass in Blink
* CVE-2026-5876: Side-channel information leakage in Navigation
* CVE-2026-5877: Use after free in Navigation
* CVE-2026-5878: Incorrect security UI in Blink
* CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
* CVE-2026-5880: Incorrect security UI in browser UI
* CVE-2026-5881: Policy bypass in LocalNetworkAccess
* CVE-2026-5882: Incorrect security UI in Fullscreen
* CVE-2026-5883: Use after free in Media
* CVE-2026-5884: Insufficient validation of untrusted input in Media
* CVE-2026-5885: Insufficient validation of untrusted input in WebML
* CVE-2026-5886: Out of bounds read in WebAudio
* CVE-2026-5887: Insufficient validation of untrusted input in Downloads
* CVE-2026-5888: Uninitialized Use in WebCodecs
* CVE-2026-5889: Cryptographic Flaw in PDFium
* CVE-2026-5890: Race in WebCodecs
* CVE-2026-5891: Insufficient policy enforcement in browser UI
* CVE-2026-5892: Insufficient policy enforcement in PWAs
* CVE-2026-5893: Race in V8
* CVE-2026-5894: Inappropriate implementation in PDF
* CVE-2026-5895: Incorrect security UI in Omnibox
* CVE-2026-5896: Policy bypass in Audio
* CVE-2026-5897: Incorrect security UI in Downloads
* CVE-2026-5898: Incorrect security UI in Omnibox
* CVE-2026-5899: Incorrect security UI in History Navigation
* CVE-2026-5900: Policy bypass in Downloads
* CVE-2026-5901: Policy bypass in DevTools
* CVE-2026-5902: Race in Media
* CVE-2026-5903: Policy bypass in IFrameSandbox
* CVE-2026-5904: Use after free in V8
* CVE-2026-5905: Incorrect security UI in Permissions
* CVE-2026-5906: Incorrect security UI in Omnibox
* CVE-2026-5907: Insufficient data validation in Media
* CVE-2026-5908: Integer overflow in Media
* CVE-2026-5909: Integer overflow in Media
* CVE-2026-5910: Integer overflow in Media
* CVE-2026-5911: Policy bypass in ServiceWorkers
* CVE-2026-5912: Integer overflow in WebRTC
* CVE-2026-5913: Out of bounds read in Blink
* CVE-2026-5914: Type Confusion in CSS
* CVE-2026-5915: Insufficient validation of untrusted input in WebML
* CVE-2026-5918: Inappropriate implementation in Navigation
* CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
* enforce a number of new Local Area Network (LAN) restrictions
* New Web Printing API
* vertical tabs support (trial)
- new in 147 (for developers):
* Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
* CSS contrast-color() helps meet accessibility requirements
* The CSS border-shape property lets you create non-rectangular borders
* CVE-2025-4096: Heap buffer overflow in HTML
* CVE-2025-4050: Out of bounds memory access in DevTools
* CVE-2025-4051: Insufficient data validation in DevTools
* CVE-2025-4052: Inappropriate implementation in DevTools
* CVE-2024-7000: Use after free in CSS
* CVE-2024-3834: Use after free in Downloads
* CVE-2020-6465: Use after free in reader mode
* CVE-2020-6466: Use after free in media
* CVE-2020-6467: Use after free in WebRTC
* CVE-2020-6468: Type Confusion in V8
* CVE-2020-6469: Insufficient policy enforcement in developer tools
* CVE-2020-6470: Insufficient validation of untrusted input in clipboard
* CVE-2020-6471: Insufficient policy enforcement in developer tools
* CVE-2020-6472: Insufficient policy enforcement in developer tools
* CVE-2020-6473: Insufficient policy enforcement in Blink
* CVE-2020-6474: Use after free in Blink
* CVE-2020-6475: Incorrect security UI in full screen
* CVE-2020-6476: Insufficient policy enforcement in tab strip
* CVE-2020-6477: Inappropriate implementation in installer
* CVE-2020-6478: Inappropriate implementation in full screen
* CVE-2020-6479: Inappropriate implementation in sharing
* CVE-2020-6480: Insufficient policy enforcement in enterprise
* CVE-2020-6481: Insufficient policy enforcement in URL formatting
* CVE-2020-6482: Insufficient policy enforcement in developer tools
* CVE-2020-6483: Insufficient policy enforcement in payments
* CVE-2020-6484: Insufficient data validation in ChromeDriver
* CVE-2020-6485: Insufficient data validation in media router
* CVE-2020-6486: Insufficient policy enforcement in navigations
* CVE-2020-6487: Insufficient policy enforcement in downloads
* CVE-2020-6488: Insufficient policy enforcement in downloads
* CVE-2020-6489: Inappropriate implementation in developer tools
* CVE-2020-6490: Insufficient data validation in loader
* CVE-2020-6491: Incorrect security UI in site information
* CVE-2019-5754: Inappropriate implementation in QUIC Networking
* CVE-2019-5782: Inappropriate implementation in V8
* CVE-2019-5755: Inappropriate implementation in V8
* CVE-2019-5756: Use after free in PDFium
* CVE-2019-5757: Type Confusion in SVG
* CVE-2019-5758: Use after free in Blink
* CVE-2019-5759: Use after free in HTML select elements
* CVE-2019-5760: Use after free in WebRTC
* CVE-2019-5761: Use after free in SwiftShader
* CVE-2019-5762: Use after free in PDFium
* CVE-2019-5763: Insufficient validation of untrusted input in V8
* CVE-2019-5764: Use after free in WebRTC
* CVE-2019-5765: Insufficient policy enforcement in the browser
* CVE-2019-5766: Insufficient policy enforcement in Canvas
* CVE-2019-5767: Incorrect security UI in WebAPKs
* CVE-2019-5768: Insufficient policy enforcement in DevTools
* CVE-2019-5769: Insufficient validation of untrusted input in Blink
* CVE-2019-5770: Heap buffer overflow in WebGL
* CVE-2019-5771: Heap buffer overflow in SwiftShader
* CVE-2019-5772: Use after free in PDFium
* CVE-2019-5773: Insufficient data validation in IndexedDB
* CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing
* CVE-2019-5775: Insufficient policy enforcement in Omnibox
* CVE-2019-5776: Insufficient policy enforcement in Omnibox
* CVE-2019-5777: Insufficient policy enforcement in Omnibox
* CVE-2019-5778: Insufficient policy enforcement in Extensions
* CVE-2019-5779: Insufficient policy enforcement in ServiceWorker
* CVE-2019-5780: Insufficient policy enforcement
* CVE-2019-5781: Insufficient policy enforcement in Omnibox
* High CVE-2018-6031: Use after free in PDFium
* High CVE-2018-6032: Same origin bypass in Shared Worker
* High CVE-2018-6033: Race when opening downloaded files
* Medium CVE-2018-6034: Integer overflow in Blink
* Medium CVE-2018-6035: Insufficient isolation of devtools from extensions
* Medium CVE-2018-6036: Integer underflow in WebAssembly
* Medium CVE-2018-6037: Insufficient user gesture requirements in autofill
* Medium CVE-2018-6038: Heap buffer overflow in WebGL
* Medium CVE-2018-6039: XSS in DevTools
* Medium CVE-2018-6040: Content security policy bypass
* Medium CVE-2018-6041: URL spoof in Navigation
* Medium CVE-2018-6042: URL spoof in OmniBox
* Medium CVE-2018-6043: Insufficient escaping with external URL handlers
* Medium CVE-2018-6045: Insufficient isolation of devtools from extensions
* Medium CVE-2018-6046: Insufficient isolation of devtools from extensions
* Medium CVE-2018-6047: Cross origin URL leak in WebGL
* Low CVE-2018-6048: Referrer policy bypass in Blink
* Low CVE-2017-15420: URL spoofing in Omnibox
* Low CVE-2018-6049: UI spoof in Permissions
* Low CVE-2018-6050: URL spoof in OmniBox
* Low CVE-2018-6051: Referrer leak in XSS Auditor
* Low CVE-2018-6052: Incomplete no-referrer policy implementation
* Low CVE-2018-6053: Leak of page thumbnails in New Tab Page
* Low CVE-2018-6054: Use after free in WebUI
* CVE-2017-5070: Type confusion in V8
* CVE-2017-5071: Out of bounds read in V8
* CVE-2017-5072: Address spoofing in Omnibox
* CVE-2017-5073: Use after free in print preview
* CVE-2017-5074: Use after free in Apps Bluetooth
* CVE-2017-5075: Information leak in CSP reporting
* CVE-2017-5086: Address spoofing in Omnibox
* CVE-2017-5076: Address spoofing in Omnibox
* CVE-2017-5077: Heap buffer overflow in Skia
* CVE-2017-5078: Possible command injection in mailto handling
* CVE-2017-5079: UI spoofing in Blink
* CVE-2017-5080: Use after free in credit card autofill
* CVE-2017-5081: Extension verification bypass
* CVE-2017-5082: Insufficient hardening in credit card editor
* CVE-2017-5083: UI spoofing in Blink
* CVE-2017-5085: Inappropriate javascript execution on WebUI pages
- CVE-2016-1663: Use-after-free in Blink's V8 bindings
* CVE-2013-6643: Unprompted sync with an attacker's
* Use Google's online spellchecker to identify misspelled words
Patchnames: openSUSE-Leap-16.0-packagehub-226
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-5858
Threats
Impact
critical
References
378 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 147.0.7727.137 (boo#1263158)\n * CVE-2026-7363: Use after free in Canvas\n * CVE-2026-7361: Use after free in iOS\n * CVE-2026-7344: Use after free in Accessibility\n * CVE-2026-7343: Use after free in Views\n * CVE-2026-7333: Use after free in GPU\n * CVE-2026-7360: Insufficient validation of untrusted input in Compositing\n * CVE-2026-7359: Use after free in ANGLE\n * CVE-2026-7358: Use after free in Animation\n * CVE-2026-7334: Use after free in Views\n * CVE-2026-7357: Use after free in GPU\n * CVE-2026-7356: Use after free in Navigation\n * CVE-2026-7354: Out of bounds read and write in Angle\n * CVE-2026-7353: Heap buffer overflow in Skia\n * CVE-2026-7352: Use after free in Media\n * CVE-2026-7351: Race in MHTML\n * CVE-2026-7350: Use after free in WebMIDI\n * CVE-2026-7349: Use after free in Cast\n * CVE-2026-7348: Use after free in Codecs\n * CVE-2026-7335: Use after free in media\n * CVE-2026-7336: Use after free in WebRTC\n * CVE-2026-7337: Type Confusion in V8\n * CVE-2026-7347: Use after free in Chromoting\n * CVE-2026-7346: Inappropriate implementation in Tint\n * CVE-2026-7345: Insufficient validation of untrusted input in Feedback\n * CVE-2026-7338: Use after free in Cast\n * CVE-2026-7342: Use after free in WebView\n * CVE-2026-7341: Use after free in WebRTC\n * CVE-2026-7339: Heap buffer overflow in WebRTC\n * CVE-2026-7340: Integer overflow in ANGLE\n * CVE-2026-7355: Use after free in Media\n\n- Chromium 147.0.7727.116 (boo#1262586)\n\n- Chromium 147.0.7727.101 (boo#1262174)\n * CVE-2026-6296: Heap buffer overflow in ANGLE\n * CVE-2026-6297: Use after free in Proxy\n * CVE-2026-6298: Heap buffer overflow in Skia\n * CVE-2026-6299: Use after free in Prerender\n * CVE-2026-6358: Use after free in XR\n * CVE-2026-6359: Use after free in Video\n * CVE-2026-6300: Use after free in CSS\n * CVE-2026-6301: Type Confusion in Turbofan\n * CVE-2026-6302: Use after free in Video\n * CVE-2026-6303: Use after free in Codecs\n * CVE-2026-6304: Use after free in Graphite\n * CVE-2026-6305: Heap buffer overflow in PDFium\n * CVE-2026-6306: Heap buffer overflow in PDFium\n * CVE-2026-6307: Type Confusion in Turbofan\n * CVE-2026-6308: Out of bounds read in Media\n * CVE-2026-6309: Use after free in Viz\n * CVE-2026-6360: Use after free in FileSystem\n * CVE-2026-6310: Use after free in Dawn\n * CVE-2026-6311: Uninitialized Use in Accessibility\n * CVE-2026-6312: Insufficient policy enforcement in Passwords\n * CVE-2026-6313: Insufficient policy enforcement in CORS\n * CVE-2026-6314: Out of bounds write in GPU\n * CVE-2026-6315: Use after free in Permissions\n * CVE-2026-6316: Use after free in Forms\n * CVE-2026-6361: Heap buffer overflow in PDFium\n * CVE-2026-6362: Use after free in Codecs\n * CVE-2026-6317: Use after free in Cast\n * CVE-2026-6363: Type Confusion in V8\n * CVE-2026-6318: Use after free in Codecs\n * CVE-2026-6319: Use after free in Payments\n * CVE-2026-6364: Out of bounds read in Skia\n\n- Chromium 147.0.7727.55 (boo#1261758):\n\n * CVE-2026-5858: Heap buffer overflow in WebML\n * CVE-2026-5859: Integer overflow in WebML\n * CVE-2026-5860: Use after free in WebRTC\n * CVE-2026-5861: Use after free in V8\n * CVE-2026-5862: Inappropriate implementation in V8\n * CVE-2026-5863: Inappropriate implementation in V8\n * CVE-2026-5864: Heap buffer overflow in WebAudio\n * CVE-2026-5865: Type Confusion in V8\n * CVE-2026-5866: Use after free in Media\n * CVE-2026-5867: Heap buffer overflow in WebML\n * CVE-2026-5868: Heap buffer overflow in ANGLE\n * CVE-2026-5869: Heap buffer overflow in WebML\n * CVE-2026-5870: Integer overflow in Skia\n * CVE-2026-5871: Type Confusion in V8\n * CVE-2026-5872: Use after free in Blink\n * CVE-2026-5873: Out of bounds read and write in V8\n * CVE-2026-5874: Use after free in PrivateAI\n * CVE-2026-5875: Policy bypass in Blink\n * CVE-2026-5876: Side-channel information leakage in Navigation\n * CVE-2026-5877: Use after free in Navigation\n * CVE-2026-5878: Incorrect security UI in Blink\n * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE\n * CVE-2026-5880: Incorrect security UI in browser UI\n * CVE-2026-5881: Policy bypass in LocalNetworkAccess\n * CVE-2026-5882: Incorrect security UI in Fullscreen\n * CVE-2026-5883: Use after free in Media\n * CVE-2026-5884: Insufficient validation of untrusted input in Media\n * CVE-2026-5885: Insufficient validation of untrusted input in WebML\n * CVE-2026-5886: Out of bounds read in WebAudio\n * CVE-2026-5887: Insufficient validation of untrusted input in Downloads\n * CVE-2026-5888: Uninitialized Use in WebCodecs\n * CVE-2026-5889: Cryptographic Flaw in PDFium\n * CVE-2026-5890: Race in WebCodecs\n * CVE-2026-5891: Insufficient policy enforcement in browser UI\n * CVE-2026-5892: Insufficient policy enforcement in PWAs\n * CVE-2026-5893: Race in V8\n * CVE-2026-5894: Inappropriate implementation in PDF\n * CVE-2026-5895: Incorrect security UI in Omnibox\n * CVE-2026-5896: Policy bypass in Audio\n * CVE-2026-5897: Incorrect security UI in Downloads\n * CVE-2026-5898: Incorrect security UI in Omnibox\n * CVE-2026-5899: Incorrect security UI in History Navigation\n * CVE-2026-5900: Policy bypass in Downloads\n * CVE-2026-5901: Policy bypass in DevTools\n * CVE-2026-5902: Race in Media\n * CVE-2026-5903: Policy bypass in IFrameSandbox\n * CVE-2026-5904: Use after free in V8\n * CVE-2026-5905: Incorrect security UI in Permissions\n * CVE-2026-5906: Incorrect security UI in Omnibox\n * CVE-2026-5907: Insufficient data validation in Media\n * CVE-2026-5908: Integer overflow in Media\n * CVE-2026-5909: Integer overflow in Media\n * CVE-2026-5910: Integer overflow in Media\n * CVE-2026-5911: Policy bypass in ServiceWorkers\n * CVE-2026-5912: Integer overflow in WebRTC\n * CVE-2026-5913: Out of bounds read in Blink\n * CVE-2026-5914: Type Confusion in CSS\n * CVE-2026-5915: Insufficient validation of untrusted input in WebML\n * CVE-2026-5918: Inappropriate implementation in Navigation\n * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets\n * enforce a number of new Local Area Network (LAN) restrictions\n * New Web Printing API\n * vertical tabs support (trial)\n\n- new in 147 (for developers):\n\n * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.\n * CSS contrast-color() helps meet accessibility requirements\n * The CSS border-shape property lets you create non-rectangular borders\n\n * CVE-2025-4096: Heap buffer overflow in HTML\n * CVE-2025-4050: Out of bounds memory access in DevTools\n * CVE-2025-4051: Insufficient data validation in DevTools\n * CVE-2025-4052: Inappropriate implementation in DevTools\n * CVE-2024-7000: Use after free in CSS\n * CVE-2024-3834: Use after free in Downloads\n * CVE-2020-6465: Use after free in reader mode\n * CVE-2020-6466: Use after free in media\n * CVE-2020-6467: Use after free in WebRTC\n * CVE-2020-6468: Type Confusion in V8\n * CVE-2020-6469: Insufficient policy enforcement in developer tools\n * CVE-2020-6470: Insufficient validation of untrusted input in clipboard\n * CVE-2020-6471: Insufficient policy enforcement in developer tools\n * CVE-2020-6472: Insufficient policy enforcement in developer tools\n * CVE-2020-6473: Insufficient policy enforcement in Blink\n * CVE-2020-6474: Use after free in Blink\n * CVE-2020-6475: Incorrect security UI in full screen\n * CVE-2020-6476: Insufficient policy enforcement in tab strip\n * CVE-2020-6477: Inappropriate implementation in installer\n * CVE-2020-6478: Inappropriate implementation in full screen\n * CVE-2020-6479: Inappropriate implementation in sharing\n * CVE-2020-6480: Insufficient policy enforcement in enterprise\n * CVE-2020-6481: Insufficient policy enforcement in URL formatting\n * CVE-2020-6482: Insufficient policy enforcement in developer tools\n * CVE-2020-6483: Insufficient policy enforcement in payments\n * CVE-2020-6484: Insufficient data validation in ChromeDriver\n * CVE-2020-6485: Insufficient data validation in media router\n * CVE-2020-6486: Insufficient policy enforcement in navigations\n * CVE-2020-6487: Insufficient policy enforcement in downloads\n * CVE-2020-6488: Insufficient policy enforcement in downloads\n * CVE-2020-6489: Inappropriate implementation in developer tools\n * CVE-2020-6490: Insufficient data validation in loader\n * CVE-2020-6491: Incorrect security UI in site information\n * CVE-2019-5754: Inappropriate implementation in QUIC Networking\n * CVE-2019-5782: Inappropriate implementation in V8\n * CVE-2019-5755: Inappropriate implementation in V8\n * CVE-2019-5756: Use after free in PDFium\n * CVE-2019-5757: Type Confusion in SVG\n * CVE-2019-5758: Use after free in Blink\n * CVE-2019-5759: Use after free in HTML select elements\n * CVE-2019-5760: Use after free in WebRTC\n * CVE-2019-5761: Use after free in SwiftShader\n * CVE-2019-5762: Use after free in PDFium\n * CVE-2019-5763: Insufficient validation of untrusted input in V8\n * CVE-2019-5764: Use after free in WebRTC\n * CVE-2019-5765: Insufficient policy enforcement in the browser\n * CVE-2019-5766: Insufficient policy enforcement in Canvas\n * CVE-2019-5767: Incorrect security UI in WebAPKs\n * CVE-2019-5768: Insufficient policy enforcement in DevTools\n * CVE-2019-5769: Insufficient validation of untrusted input in Blink\n * CVE-2019-5770: Heap buffer overflow in WebGL\n * CVE-2019-5771: Heap buffer overflow in SwiftShader\n * CVE-2019-5772: Use after free in PDFium\n * CVE-2019-5773: Insufficient data validation in IndexedDB\n * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing\n * CVE-2019-5775: Insufficient policy enforcement in Omnibox\n * CVE-2019-5776: Insufficient policy enforcement in Omnibox\n * CVE-2019-5777: Insufficient policy enforcement in Omnibox\n * CVE-2019-5778: Insufficient policy enforcement in Extensions\n * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker\n * CVE-2019-5780: Insufficient policy enforcement\n * CVE-2019-5781: Insufficient policy enforcement in Omnibox\n * High CVE-2018-6031: Use after free in PDFium\n * High CVE-2018-6032: Same origin bypass in Shared Worker\n * High CVE-2018-6033: Race when opening downloaded files\n * Medium CVE-2018-6034: Integer overflow in Blink\n * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions\n * Medium CVE-2018-6036: Integer underflow in WebAssembly\n * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill\n * Medium CVE-2018-6038: Heap buffer overflow in WebGL\n * Medium CVE-2018-6039: XSS in DevTools\n * Medium CVE-2018-6040: Content security policy bypass\n * Medium CVE-2018-6041: URL spoof in Navigation\n * Medium CVE-2018-6042: URL spoof in OmniBox\n * Medium CVE-2018-6043: Insufficient escaping with external URL handlers\n * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions\n * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions\n * Medium CVE-2018-6047: Cross origin URL leak in WebGL\n * Low CVE-2018-6048: Referrer policy bypass in Blink\n * Low CVE-2017-15420: URL spoofing in Omnibox\n * Low CVE-2018-6049: UI spoof in Permissions\n * Low CVE-2018-6050: URL spoof in OmniBox\n * Low CVE-2018-6051: Referrer leak in XSS Auditor\n * Low CVE-2018-6052: Incomplete no-referrer policy implementation\n * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page\n * Low CVE-2018-6054: Use after free in WebUI\n * CVE-2017-5070: Type confusion in V8\n * CVE-2017-5071: Out of bounds read in V8\n * CVE-2017-5072: Address spoofing in Omnibox\n * CVE-2017-5073: Use after free in print preview\n * CVE-2017-5074: Use after free in Apps Bluetooth\n * CVE-2017-5075: Information leak in CSP reporting\n * CVE-2017-5086: Address spoofing in Omnibox\n * CVE-2017-5076: Address spoofing in Omnibox\n * CVE-2017-5077: Heap buffer overflow in Skia\n * CVE-2017-5078: Possible command injection in mailto handling\n * CVE-2017-5079: UI spoofing in Blink\n * CVE-2017-5080: Use after free in credit card autofill\n * CVE-2017-5081: Extension verification bypass\n * CVE-2017-5082: Insufficient hardening in credit card editor\n * CVE-2017-5083: UI spoofing in Blink\n * CVE-2017-5085: Inappropriate javascript execution on WebUI pages\n - CVE-2016-1663: Use-after-free in Blink\u0027s V8 bindings\n * CVE-2013-6643: Unprompted sync with an attacker\u0027s\n * Use Google\u0027s online spellchecker to identify misspelled words\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-packagehub-226",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20660-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1261758",
"url": "https://bugzilla.suse.com/1261758"
},
{
"category": "self",
"summary": "SUSE Bug 1262174",
"url": "https://bugzilla.suse.com/1262174"
},
{
"category": "self",
"summary": "SUSE Bug 1262586",
"url": "https://bugzilla.suse.com/1262586"
},
{
"category": "self",
"summary": "SUSE Bug 1263158",
"url": "https://bugzilla.suse.com/1263158"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5858 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5859 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5860 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5861 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5862 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5863 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5864 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5865 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5865/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5866 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5866/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5867 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5867/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5868 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5869 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5870 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5871 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5872 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5872/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5873 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5874 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5875 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5876 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5877 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5878 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5879 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5880 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5881 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5882 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5883 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5884 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5885 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5886 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5887 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5888 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5889 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5890 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5891 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5891/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5892 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5893 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5894 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5895 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5895/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5896 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5897 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5898 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5898/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5899 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5900 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5901 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5902 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5903 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5904 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5905 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5906 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5907 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5908 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5909 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5909/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5910 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5911 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5912 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5913 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5915 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5918 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5918/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5919 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6296 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6297 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6298 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6299 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6301 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6301/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6302 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6303 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6304 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6305 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6306 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6307 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6309 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6310 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6311 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6312 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6313 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6314 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6315 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6316 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6316/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6317 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6318 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6318/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6319 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6358 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6358/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6359 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6359/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6360 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6361 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6361/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6362 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6362/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6363 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6363/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6364 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6919 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6920 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6920/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6921 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7333/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7334 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7334/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7335 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7335/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7336 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7337 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7337/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7338 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7339 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7339/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7340 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7341 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7342 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7342/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7343 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7343/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7344 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7344/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7345 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7346 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7346/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7347 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7348 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7349 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7350 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7351 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7351/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7352 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7353 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7354 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7354/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7355 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7355/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7356 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7357 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7358 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7358/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7359 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7359/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7360 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7361 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7361/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7363 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7363/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2026-09-17T17:31:35Z",
"generator": {
"date": "2026-08-31T08:40:11Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:20660-1",
"initial_release_date": "2026-08-31T08:40:11Z",
"revision_history": [
{
"date": "2026-08-31T08:40:11Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:34:16Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:37:02Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:31:35Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"product": {
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"product_id": "chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@147.0.7727.137-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"product": {
"name": "chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"product_id": "chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:147.0.7727.137:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@147.0.7727.137-bp160.1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"product": {
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"product_id": "chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@147.0.7727.137-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"product": {
"name": "chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"product_id": "chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:147.0.7727.137:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@147.0.7727.137-bp160.1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"product": {
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"product_id": "chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@147.0.7727.137-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-0:147.0.7727.137-bp160.1.1.x86_64",
"product": {
"name": "chromium-0:147.0.7727.137-bp160.1.1.x86_64",
"product_id": "chromium-0:147.0.7727.137-bp160.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:147.0.7727.137:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@147.0.7727.137-bp160.1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64"
},
"product_reference": "chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le"
},
"product_reference": "chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:147.0.7727.137-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64"
},
"product_reference": "chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:147.0.7727.137-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64"
},
"product_reference": "chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:147.0.7727.137-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le"
},
"product_reference": "chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:147.0.7727.137-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
},
"product_reference": "chromium-0:147.0.7727.137-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-5858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5858"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5858",
"url": "https://www.suse.com/security/cve/CVE-2026-5858"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5858",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5858"
},
{
"cve": "CVE-2026-5859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5859"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5859",
"url": "https://www.suse.com/security/cve/CVE-2026-5859"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5859",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5859"
},
{
"cve": "CVE-2026-5860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5860",
"url": "https://www.suse.com/security/cve/CVE-2026-5860"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5860",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5860"
},
{
"cve": "CVE-2026-5861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5861"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5861",
"url": "https://www.suse.com/security/cve/CVE-2026-5861"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5861",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5861"
},
{
"cve": "CVE-2026-5862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5862"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5862",
"url": "https://www.suse.com/security/cve/CVE-2026-5862"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5862",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5862"
},
{
"cve": "CVE-2026-5863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5863"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5863",
"url": "https://www.suse.com/security/cve/CVE-2026-5863"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5863",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5863"
},
{
"cve": "CVE-2026-5864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5864"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5864",
"url": "https://www.suse.com/security/cve/CVE-2026-5864"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5864",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5864"
},
{
"cve": "CVE-2026-5865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5865"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5865",
"url": "https://www.suse.com/security/cve/CVE-2026-5865"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5865",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5865"
},
{
"cve": "CVE-2026-5866",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5866"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5866",
"url": "https://www.suse.com/security/cve/CVE-2026-5866"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5866",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5866"
},
{
"cve": "CVE-2026-5867",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5867"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5867",
"url": "https://www.suse.com/security/cve/CVE-2026-5867"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5867",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5867"
},
{
"cve": "CVE-2026-5868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5868"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5868",
"url": "https://www.suse.com/security/cve/CVE-2026-5868"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5868",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5868"
},
{
"cve": "CVE-2026-5869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5869"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5869",
"url": "https://www.suse.com/security/cve/CVE-2026-5869"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5869",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5869"
},
{
"cve": "CVE-2026-5870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5870"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5870",
"url": "https://www.suse.com/security/cve/CVE-2026-5870"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5870",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5870"
},
{
"cve": "CVE-2026-5871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5871"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5871",
"url": "https://www.suse.com/security/cve/CVE-2026-5871"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5871",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5871"
},
{
"cve": "CVE-2026-5872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5872"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5872",
"url": "https://www.suse.com/security/cve/CVE-2026-5872"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5872",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5872"
},
{
"cve": "CVE-2026-5873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5873"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5873",
"url": "https://www.suse.com/security/cve/CVE-2026-5873"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5873",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5873"
},
{
"cve": "CVE-2026-5874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5874"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5874",
"url": "https://www.suse.com/security/cve/CVE-2026-5874"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5874",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5874"
},
{
"cve": "CVE-2026-5875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5875"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5875",
"url": "https://www.suse.com/security/cve/CVE-2026-5875"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5875",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5875"
},
{
"cve": "CVE-2026-5876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5876"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5876",
"url": "https://www.suse.com/security/cve/CVE-2026-5876"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5876",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5876"
},
{
"cve": "CVE-2026-5877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5877"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5877",
"url": "https://www.suse.com/security/cve/CVE-2026-5877"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5877",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5877"
},
{
"cve": "CVE-2026-5878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5878"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5878",
"url": "https://www.suse.com/security/cve/CVE-2026-5878"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5878",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5878"
},
{
"cve": "CVE-2026-5879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5879"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5879",
"url": "https://www.suse.com/security/cve/CVE-2026-5879"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5879",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5879"
},
{
"cve": "CVE-2026-5880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5880"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5880",
"url": "https://www.suse.com/security/cve/CVE-2026-5880"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5880",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5880"
},
{
"cve": "CVE-2026-5881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5881"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5881",
"url": "https://www.suse.com/security/cve/CVE-2026-5881"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5881",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5881"
},
{
"cve": "CVE-2026-5882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5882"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5882",
"url": "https://www.suse.com/security/cve/CVE-2026-5882"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5882",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5882"
},
{
"cve": "CVE-2026-5883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5883"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5883",
"url": "https://www.suse.com/security/cve/CVE-2026-5883"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5883",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5883"
},
{
"cve": "CVE-2026-5884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5884"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5884",
"url": "https://www.suse.com/security/cve/CVE-2026-5884"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5884",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5884"
},
{
"cve": "CVE-2026-5885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5885"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5885",
"url": "https://www.suse.com/security/cve/CVE-2026-5885"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5885",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5885"
},
{
"cve": "CVE-2026-5886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5886"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5886",
"url": "https://www.suse.com/security/cve/CVE-2026-5886"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5886",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5886"
},
{
"cve": "CVE-2026-5887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5887"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5887",
"url": "https://www.suse.com/security/cve/CVE-2026-5887"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5887",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5887"
},
{
"cve": "CVE-2026-5888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5888"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5888",
"url": "https://www.suse.com/security/cve/CVE-2026-5888"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5888",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5888"
},
{
"cve": "CVE-2026-5889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5889"
}
],
"notes": [
{
"category": "general",
"text": "Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5889",
"url": "https://www.suse.com/security/cve/CVE-2026-5889"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5889",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5889"
},
{
"cve": "CVE-2026-5890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5890"
}
],
"notes": [
{
"category": "general",
"text": "Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5890",
"url": "https://www.suse.com/security/cve/CVE-2026-5890"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5890",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5890"
},
{
"cve": "CVE-2026-5891",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5891"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5891",
"url": "https://www.suse.com/security/cve/CVE-2026-5891"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5891",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5891"
},
{
"cve": "CVE-2026-5892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5892"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5892",
"url": "https://www.suse.com/security/cve/CVE-2026-5892"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5892",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5892"
},
{
"cve": "CVE-2026-5893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5893"
}
],
"notes": [
{
"category": "general",
"text": "Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5893",
"url": "https://www.suse.com/security/cve/CVE-2026-5893"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5893",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5893"
},
{
"cve": "CVE-2026-5894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5894"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5894",
"url": "https://www.suse.com/security/cve/CVE-2026-5894"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5894",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5894"
},
{
"cve": "CVE-2026-5895",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5895"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5895",
"url": "https://www.suse.com/security/cve/CVE-2026-5895"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5895",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5895"
},
{
"cve": "CVE-2026-5896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5896"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass sandbox download restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5896",
"url": "https://www.suse.com/security/cve/CVE-2026-5896"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5896",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5896"
},
{
"cve": "CVE-2026-5897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5897"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5897",
"url": "https://www.suse.com/security/cve/CVE-2026-5897"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5897",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5897"
},
{
"cve": "CVE-2026-5898",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5898"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5898",
"url": "https://www.suse.com/security/cve/CVE-2026-5898"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5898",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5898"
},
{
"cve": "CVE-2026-5899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5899"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5899",
"url": "https://www.suse.com/security/cve/CVE-2026-5899"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5899",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5899"
},
{
"cve": "CVE-2026-5900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5900"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-download protections via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5900",
"url": "https://www.suse.com/security/cve/CVE-2026-5900"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5900",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5900"
},
{
"cve": "CVE-2026-5901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5901"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise host restrictions for cookie modification via a crafted Chrome Extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5901",
"url": "https://www.suse.com/security/cve/CVE-2026-5901"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5901",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5901"
},
{
"cve": "CVE-2026-5902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5902"
}
],
"notes": [
{
"category": "general",
"text": "Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5902",
"url": "https://www.suse.com/security/cve/CVE-2026-5902"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5902",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5902"
},
{
"cve": "CVE-2026-5903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5903"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5903",
"url": "https://www.suse.com/security/cve/CVE-2026-5903"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5903",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5903"
},
{
"cve": "CVE-2026-5904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5904"
}
],
"notes": [
{
"category": "general",
"text": "Determined a bug and not a vulnerability",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5904",
"url": "https://www.suse.com/security/cve/CVE-2026-5904"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5904",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5904"
},
{
"cve": "CVE-2026-5905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5905"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5905",
"url": "https://www.suse.com/security/cve/CVE-2026-5905"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5905",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5905"
},
{
"cve": "CVE-2026-5906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5906"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5906",
"url": "https://www.suse.com/security/cve/CVE-2026-5906"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5906",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5906"
},
{
"cve": "CVE-2026-5907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5907"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5907",
"url": "https://www.suse.com/security/cve/CVE-2026-5907"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5907",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5907"
},
{
"cve": "CVE-2026-5908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5908"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5908",
"url": "https://www.suse.com/security/cve/CVE-2026-5908"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5908",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5908"
},
{
"cve": "CVE-2026-5909",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5909"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5909",
"url": "https://www.suse.com/security/cve/CVE-2026-5909"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5909",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5909"
},
{
"cve": "CVE-2026-5910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5910"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5910",
"url": "https://www.suse.com/security/cve/CVE-2026-5910"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5910",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5910"
},
{
"cve": "CVE-2026-5911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5911"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5911",
"url": "https://www.suse.com/security/cve/CVE-2026-5911"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5911",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5911"
},
{
"cve": "CVE-2026-5912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5912"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5912",
"url": "https://www.suse.com/security/cve/CVE-2026-5912"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5912",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5912"
},
{
"cve": "CVE-2026-5913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5913"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5913",
"url": "https://www.suse.com/security/cve/CVE-2026-5913"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5913",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5913"
},
{
"cve": "CVE-2026-5914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5914"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5914",
"url": "https://www.suse.com/security/cve/CVE-2026-5914"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5914",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5914"
},
{
"cve": "CVE-2026-5915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5915"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5915",
"url": "https://www.suse.com/security/cve/CVE-2026-5915"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5915",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5915"
},
{
"cve": "CVE-2026-5918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5918"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5918",
"url": "https://www.suse.com/security/cve/CVE-2026-5918"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5918",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5918"
},
{
"cve": "CVE-2026-5919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5919"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5919",
"url": "https://www.suse.com/security/cve/CVE-2026-5919"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5919",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-5919"
},
{
"cve": "CVE-2026-6296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6296"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6296",
"url": "https://www.suse.com/security/cve/CVE-2026-6296"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6296",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6296"
},
{
"cve": "CVE-2026-6297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6297"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6297",
"url": "https://www.suse.com/security/cve/CVE-2026-6297"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6297",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6297"
},
{
"cve": "CVE-2026-6298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6298"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6298",
"url": "https://www.suse.com/security/cve/CVE-2026-6298"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6298",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6298"
},
{
"cve": "CVE-2026-6299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6299"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6299",
"url": "https://www.suse.com/security/cve/CVE-2026-6299"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6299",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6299"
},
{
"cve": "CVE-2026-6300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6300"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6300",
"url": "https://www.suse.com/security/cve/CVE-2026-6300"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6300",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6300"
},
{
"cve": "CVE-2026-6301",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6301"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6301",
"url": "https://www.suse.com/security/cve/CVE-2026-6301"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6301",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6301"
},
{
"cve": "CVE-2026-6302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6302"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6302",
"url": "https://www.suse.com/security/cve/CVE-2026-6302"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6302",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6302"
},
{
"cve": "CVE-2026-6303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6303"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6303",
"url": "https://www.suse.com/security/cve/CVE-2026-6303"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6303",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6303"
},
{
"cve": "CVE-2026-6304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6304"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6304",
"url": "https://www.suse.com/security/cve/CVE-2026-6304"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6304",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6304"
},
{
"cve": "CVE-2026-6305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6305"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6305",
"url": "https://www.suse.com/security/cve/CVE-2026-6305"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6305",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6305"
},
{
"cve": "CVE-2026-6306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6306"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6306",
"url": "https://www.suse.com/security/cve/CVE-2026-6306"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6306",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6306"
},
{
"cve": "CVE-2026-6307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6307"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6307",
"url": "https://www.suse.com/security/cve/CVE-2026-6307"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6307",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6307"
},
{
"cve": "CVE-2026-6308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6308"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6308",
"url": "https://www.suse.com/security/cve/CVE-2026-6308"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6308",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6308"
},
{
"cve": "CVE-2026-6309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6309"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6309",
"url": "https://www.suse.com/security/cve/CVE-2026-6309"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6309",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6309"
},
{
"cve": "CVE-2026-6310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6310"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6310",
"url": "https://www.suse.com/security/cve/CVE-2026-6310"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6310",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6310"
},
{
"cve": "CVE-2026-6311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6311"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6311",
"url": "https://www.suse.com/security/cve/CVE-2026-6311"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6311",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6311"
},
{
"cve": "CVE-2026-6312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6312"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6312",
"url": "https://www.suse.com/security/cve/CVE-2026-6312"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6312",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6312"
},
{
"cve": "CVE-2026-6313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6313"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6313",
"url": "https://www.suse.com/security/cve/CVE-2026-6313"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6313",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6313"
},
{
"cve": "CVE-2026-6314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6314"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6314",
"url": "https://www.suse.com/security/cve/CVE-2026-6314"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6314",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6314"
},
{
"cve": "CVE-2026-6315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6315"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6315",
"url": "https://www.suse.com/security/cve/CVE-2026-6315"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6315",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6315"
},
{
"cve": "CVE-2026-6316",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6316"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6316",
"url": "https://www.suse.com/security/cve/CVE-2026-6316"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6316",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6316"
},
{
"cve": "CVE-2026-6317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6317"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6317",
"url": "https://www.suse.com/security/cve/CVE-2026-6317"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6317",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6317"
},
{
"cve": "CVE-2026-6318",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6318"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6318",
"url": "https://www.suse.com/security/cve/CVE-2026-6318"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6318",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6318"
},
{
"cve": "CVE-2026-6319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6319"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6319",
"url": "https://www.suse.com/security/cve/CVE-2026-6319"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6319",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6319"
},
{
"cve": "CVE-2026-6358",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6358"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6358",
"url": "https://www.suse.com/security/cve/CVE-2026-6358"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6358",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6358"
},
{
"cve": "CVE-2026-6359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6359"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6359",
"url": "https://www.suse.com/security/cve/CVE-2026-6359"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6359",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6359"
},
{
"cve": "CVE-2026-6360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6360"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6360",
"url": "https://www.suse.com/security/cve/CVE-2026-6360"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6360",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6360"
},
{
"cve": "CVE-2026-6361",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6361"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6361",
"url": "https://www.suse.com/security/cve/CVE-2026-6361"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6361",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6361"
},
{
"cve": "CVE-2026-6362",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6362"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6362",
"url": "https://www.suse.com/security/cve/CVE-2026-6362"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6362",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6362"
},
{
"cve": "CVE-2026-6363",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6363"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6363",
"url": "https://www.suse.com/security/cve/CVE-2026-6363"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6363",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6363"
},
{
"cve": "CVE-2026-6364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6364"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6364",
"url": "https://www.suse.com/security/cve/CVE-2026-6364"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6364",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6364"
},
{
"cve": "CVE-2026-6919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6919"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6919",
"url": "https://www.suse.com/security/cve/CVE-2026-6919"
},
{
"category": "external",
"summary": "SUSE Bug 1262586 for CVE-2026-6919",
"url": "https://bugzilla.suse.com/1262586"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6919"
},
{
"cve": "CVE-2026-6920",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6920"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6920",
"url": "https://www.suse.com/security/cve/CVE-2026-6920"
},
{
"category": "external",
"summary": "SUSE Bug 1262586 for CVE-2026-6920",
"url": "https://bugzilla.suse.com/1262586"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6920"
},
{
"cve": "CVE-2026-6921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6921"
}
],
"notes": [
{
"category": "general",
"text": "Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6921",
"url": "https://www.suse.com/security/cve/CVE-2026-6921"
},
{
"category": "external",
"summary": "SUSE Bug 1262586 for CVE-2026-6921",
"url": "https://bugzilla.suse.com/1262586"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-6921"
},
{
"cve": "CVE-2026-7333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7333"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7333",
"url": "https://www.suse.com/security/cve/CVE-2026-7333"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7333",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7333"
},
{
"cve": "CVE-2026-7334",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7334"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7334",
"url": "https://www.suse.com/security/cve/CVE-2026-7334"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7334",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7334"
},
{
"cve": "CVE-2026-7335",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7335"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7335",
"url": "https://www.suse.com/security/cve/CVE-2026-7335"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7335",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7335"
},
{
"cve": "CVE-2026-7336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7336"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7336",
"url": "https://www.suse.com/security/cve/CVE-2026-7336"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7336",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7336"
},
{
"cve": "CVE-2026-7337",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7337"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7337",
"url": "https://www.suse.com/security/cve/CVE-2026-7337"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7337",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7337"
},
{
"cve": "CVE-2026-7338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7338"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7338",
"url": "https://www.suse.com/security/cve/CVE-2026-7338"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7338",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7338"
},
{
"cve": "CVE-2026-7339",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7339"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7339",
"url": "https://www.suse.com/security/cve/CVE-2026-7339"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7339",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7339"
},
{
"cve": "CVE-2026-7340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7340"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7340",
"url": "https://www.suse.com/security/cve/CVE-2026-7340"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7340",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7340"
},
{
"cve": "CVE-2026-7341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7341"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7341",
"url": "https://www.suse.com/security/cve/CVE-2026-7341"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7341",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7341"
},
{
"cve": "CVE-2026-7342",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7342"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7342",
"url": "https://www.suse.com/security/cve/CVE-2026-7342"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7342",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7342"
},
{
"cve": "CVE-2026-7343",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7343"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7343",
"url": "https://www.suse.com/security/cve/CVE-2026-7343"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7343",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7343"
},
{
"cve": "CVE-2026-7344",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7344"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7344",
"url": "https://www.suse.com/security/cve/CVE-2026-7344"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7344",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7344"
},
{
"cve": "CVE-2026-7345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7345"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7345",
"url": "https://www.suse.com/security/cve/CVE-2026-7345"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7345",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7345"
},
{
"cve": "CVE-2026-7346",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7346"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7346",
"url": "https://www.suse.com/security/cve/CVE-2026-7346"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7346",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7346"
},
{
"cve": "CVE-2026-7347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7347"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7347",
"url": "https://www.suse.com/security/cve/CVE-2026-7347"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7347",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7347"
},
{
"cve": "CVE-2026-7348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7348"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7348",
"url": "https://www.suse.com/security/cve/CVE-2026-7348"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7348",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7348"
},
{
"cve": "CVE-2026-7349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7349"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7349",
"url": "https://www.suse.com/security/cve/CVE-2026-7349"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7349",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7349"
},
{
"cve": "CVE-2026-7350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7350"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7350",
"url": "https://www.suse.com/security/cve/CVE-2026-7350"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7350",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7350"
},
{
"cve": "CVE-2026-7351",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7351"
}
],
"notes": [
{
"category": "general",
"text": "Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7351",
"url": "https://www.suse.com/security/cve/CVE-2026-7351"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7351",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7351"
},
{
"cve": "CVE-2026-7352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7352"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7352",
"url": "https://www.suse.com/security/cve/CVE-2026-7352"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7352",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7352"
},
{
"cve": "CVE-2026-7353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7353"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7353",
"url": "https://www.suse.com/security/cve/CVE-2026-7353"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7353",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7353"
},
{
"cve": "CVE-2026-7354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7354"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7354",
"url": "https://www.suse.com/security/cve/CVE-2026-7354"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7354",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7354"
},
{
"cve": "CVE-2026-7355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7355"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7355",
"url": "https://www.suse.com/security/cve/CVE-2026-7355"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7355",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7355"
},
{
"cve": "CVE-2026-7356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7356"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7356",
"url": "https://www.suse.com/security/cve/CVE-2026-7356"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7356",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7356"
},
{
"cve": "CVE-2026-7357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7357"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7357",
"url": "https://www.suse.com/security/cve/CVE-2026-7357"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7357",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7357"
},
{
"cve": "CVE-2026-7358",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7358"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7358",
"url": "https://www.suse.com/security/cve/CVE-2026-7358"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7358",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7358"
},
{
"cve": "CVE-2026-7359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7359"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7359",
"url": "https://www.suse.com/security/cve/CVE-2026-7359"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7359",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7359"
},
{
"cve": "CVE-2026-7360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7360"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7360",
"url": "https://www.suse.com/security/cve/CVE-2026-7360"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7360",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7360"
},
{
"cve": "CVE-2026-7361",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7361"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7361",
"url": "https://www.suse.com/security/cve/CVE-2026-7361"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7361",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7361"
},
{
"cve": "CVE-2026-7363",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7363"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7363",
"url": "https://www.suse.com/security/cve/CVE-2026-7363"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7363",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:147.0.7727.137-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:147.0.7727.137-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T08:40:11Z",
"details": "critical"
}
],
"title": "CVE-2026-7363"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…