{"schemaVersion":3,"id":"OPENSUSE-SU-2026:20020-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for chromium\n\nThis update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 143.0.7499.192 (boo#1256067):\n  * CVE-2026-0628: Insufficient policy enforcement in WebView tag\n\n- Chromium 143.0.7499.169 (stable released 2025-12-18)\n  * no cve listed yet\n\nChromium 143.0.7499.146 (boo#1255115):\n\n  * CVE-2025-14765: Use after free in WebGPU\n  * CVE-2025-14766: Out of bounds read and write in V8\n  * CVE-2025-14174: Out of bounds memory access in ANGLE\n\n- Chromium 143.0.7499.109 (boo#1254776):\n  * CVE-2025-14372: Use after free in Password Manager\n  * CVE-2025-14373: Inappropriate implementation in Toolbar\n  * third issue with an exploit is known to exist in the wild\n\nChromium 143.0.7499.40 (boo#1254429):\n\n  * CVE-2025-13630: Type Confusion in V8\n  * CVE-2025-13631: Inappropriate implementation in Google Updater\n  * CVE-2025-13632: Inappropriate implementation in DevTools\n  * CVE-2025-13633: Use after free in Digital Credentials\n  * CVE-2025-13634: Inappropriate implementation in Downloads\n  * CVE-2025-13720: Bad cast in Loader\n  * CVE-2025-13721: Race in v8\n  * CVE-2025-13635: Inappropriate implementation in Downloads\n  * CVE-2025-13636: Inappropriate implementation in Split View\n  * CVE-2025-13637: Inappropriate implementation in Downloads\n  * CVE-2025-13638: Use after free in Media Stream\n  * CVE-2025-13639: Inappropriate implementation in WebRTC\n  * CVE-2025-13640: Inappropriate implementation in Passwords","dates":{"published":"2026-08-31T08:39:47.000Z","modified":"2026-09-02T11:26:18.293Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"chromium&distro=openSUSE Leap 16.0","name":"chromium","label":"chromium&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/chromium&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 143.0.7499.192-bp160.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 143.0.7499.192-bp160.1.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugzilla.suse.com/1254429","label":"bugzilla.suse.com/1254429","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1254776","label":"bugzilla.suse.com/1254776","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1255115","label":"bugzilla.suse.com/1255115","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1256067","label":"bugzilla.suse.com/1256067","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13630","label":"www.suse.com/security/cve/CVE-2025-13630","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13631","label":"www.suse.com/security/cve/CVE-2025-13631","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13632","label":"www.suse.com/security/cve/CVE-2025-13632","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13633","label":"www.suse.com/security/cve/CVE-2025-13633","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13634","label":"www.suse.com/security/cve/CVE-2025-13634","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13635","label":"www.suse.com/security/cve/CVE-2025-13635","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13636","label":"www.suse.com/security/cve/CVE-2025-13636","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13637","label":"www.suse.com/security/cve/CVE-2025-13637","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13638","label":"www.suse.com/security/cve/CVE-2025-13638","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13639","label":"www.suse.com/security/cve/CVE-2025-13639","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13640","label":"www.suse.com/security/cve/CVE-2025-13640","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13720","label":"www.suse.com/security/cve/CVE-2025-13720","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13721","label":"www.suse.com/security/cve/CVE-2025-13721","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14174","label":"www.suse.com/security/cve/CVE-2025-14174","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14372","label":"www.suse.com/security/cve/CVE-2025-14372","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14373","label":"www.suse.com/security/cve/CVE-2025-14373","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14765","label":"www.suse.com/security/cve/CVE-2025-14765","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14766","label":"www.suse.com/security/cve/CVE-2025-14766","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0628","label":"www.suse.com/security/cve/CVE-2026-0628","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2025-13630","CVE-2025-13631","CVE-2025-13632","CVE-2025-13633","CVE-2025-13634","CVE-2025-13635","CVE-2025-13636","CVE-2025-13637","CVE-2025-13638","CVE-2025-13639","CVE-2025-13640","CVE-2025-13720","CVE-2025-13721","CVE-2025-14174","CVE-2025-14372","CVE-2025-14373","CVE-2025-14765","CVE-2025-14766","CVE-2026-0628"],"downstream":[],"duplicates":[],"related":["CVE-2025-13630","CVE-2025-13631","CVE-2025-13632","CVE-2025-13633","CVE-2025-13634","CVE-2025-13635","CVE-2025-13636","CVE-2025-13637","CVE-2025-13638","CVE-2025-13639","CVE-2025-13640","CVE-2025-13720","CVE-2025-13721","CVE-2025-14174","CVE-2025-14372","CVE-2025-14373","CVE-2025-14765","CVE-2025-14766","CVE-2026-0628"]},"timeline":[{"kind":"published","date":"2026-08-31T08:39:47.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-02T11:26:18.293Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T08:05:04.576Z","stale":false,"partial":false}}