{"schemaVersion":3,"id":"OPENSUSE-SU-2026:20944-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for chromium\n\nThis update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 149.0.7827.102 (boo#1267911):\n  * CVE-2026-11628: Use after free in Ozone\n  * CVE-2026-11629: Use after free in Ozone\n  * CVE-2026-11630: Use after free in File Input\n  * CVE-2026-11631: Use after free in Aura\n  * CVE-2026-11632: Use after free in TabStrip\n  * CVE-2026-11633: Use after free in Bluetooth\n  * CVE-2026-11634: Use after free in Gamepad\n  * CVE-2026-11635: Use after free in Bluetooth\n  * CVE-2026-11636: Use after free in Autofill\n  * CVE-2026-11637: Use after free in Views\n  * CVE-2026-11638: Use after free in Printing\n  * CVE-2026-11639: Use after free in Compositing\n  * CVE-2026-11640: Integer overflow in libyuv\n  * CVE-2026-11641: Use after free in Bluetooth\n  * CVE-2026-11642: Use after free in Web Apps\n  * CVE-2026-11643: Use after free in Proxy\n  * CVE-2026-11644: Use after free in Views\n  * CVE-2026-11645: Out of bounds memory access in V8\n  * CVE-2026-11646: Use after free in ViewTransitions\n  * CVE-2026-11647: Use after free in Printing\n  * CVE-2026-11648: Use after free in FullScreen\n  * CVE-2026-11649: Use after free in V8\n  * CVE-2026-11650: Use after free in V8\n  * CVE-2026-11651: Use after free in Network\n  * CVE-2026-11652: Use after free in Extensions\n  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions\n  * CVE-2026-11654: Use after free in CameraCapture\n  * CVE-2026-11655: Integer overflow in Media\n  * CVE-2026-11656: Use after free in ServiceWorker\n  * CVE-2026-11657: Use after free in Payments\n  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions\n  * CVE-2026-11659: Insufficient validation of untrusted input in UI\n  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page\n  * CVE-2026-11661: Use after free in Views\n  * CVE-2026-11662: Type Confusion in Bindings\n  * CVE-2026-11663: Use after free in Skia\n  * CVE-2026-11664: Use after free in Payments\n  * CVE-2026-11665: Out of bounds read in Dawn\n  * CVE-2026-11666: Insufficient validation of untrusted input in Input\n  * CVE-2026-11667: Out of bounds read in WebRTC\n  * CVE-2026-11668: Uninitialized Use in Codecs\n  * CVE-2026-11669: Integer overflow in Media\n  * CVE-2026-11670: Use after free in PDF\n  * CVE-2026-11671: Use after free in Navigation\n  * CVE-2026-11672: Out of bounds write in GPU\n  * CVE-2026-11673: Use after free in InterestGroups\n  * CVE-2026-11674: Use after free in Guest View\n  * CVE-2026-11675: Insufficient validation of untrusted input in Skia\n  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn\n  * CVE-2026-11677: Race in Network\n  * CVE-2026-11678: Integer overflow in libyuv\n  * CVE-2026-11679: Use after free in Codecs\n  * CVE-2026-11680: Use after free in Media\n  * CVE-2026-11681: Use after free in Ozone\n  * CVE-2026-11682: Insufficient validation of untrusted input in Views\n  * CVE-2026-11683: Use after free in WebCodecs\n  * CVE-2026-11684: Insufficient policy enforcement in Network\n  * CVE-2026-11685: Insufficient data validation in MediaCapture\n  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn\n  * CVE-2026-11687: Use after free in Dawn\n  * CVE-2026-11688: Object lifecycle issue in SVG\n  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords\n  * CVE-2026-11690: Out of bounds read and write in Media\n  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page\n  * CVE-2026-11692: Use after free in Read Anything\n  * CVE-2026-11693: Inappropriate implementation in Plugins\n  * CVE-2026-11694: Use after free in ServiceWorker\n  * CVE-2026-11695: Inappropriate implementation in Passwords\n  * CVE-2026-11696: Uninitialized Use in Video\n  * CVE-2026-11697: Insufficient validation of untrusted input in UI\n  * CVE-2026-11698: Use after free in Bluetooth\n  * CVE-2026-11699: Use after free in Bluetooth\n  * CVE-2026-11700: Use after free in Tracing\n  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View","dates":{"published":"2026-06-12T00:59:39.000Z","modified":"2026-09-02T14:00:12.683Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"chromium&distro=openSUSE Leap 16.0","name":"chromium","label":"chromium&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/chromium&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 149.0.7827.102-bp160.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 149.0.7827.102-bp160.1.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugzilla.suse.com/1267911","label":"bugzilla.suse.com/1267911","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11628","label":"www.suse.com/security/cve/CVE-2026-11628","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11629","label":"www.suse.com/security/cve/CVE-2026-11629","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11630","label":"www.suse.com/security/cve/CVE-2026-11630","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11631","label":"www.suse.com/security/cve/CVE-2026-11631","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11632","label":"www.suse.com/security/cve/CVE-2026-11632","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11633","label":"www.suse.com/security/cve/CVE-2026-11633","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11634","label":"www.suse.com/security/cve/CVE-2026-11634","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11635","label":"www.suse.com/security/cve/CVE-2026-11635","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11636","label":"www.suse.com/security/cve/CVE-2026-11636","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11637","label":"www.suse.com/security/cve/CVE-2026-11637","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11638","label":"www.suse.com/security/cve/CVE-2026-11638","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11639","label":"www.suse.com/security/cve/CVE-2026-11639","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11640","label":"www.suse.com/security/cve/CVE-2026-11640","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11641","label":"www.suse.com/security/cve/CVE-2026-11641","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11642","label":"www.suse.com/security/cve/CVE-2026-11642","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11643","label":"www.suse.com/security/cve/CVE-2026-11643","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11644","label":"www.suse.com/security/cve/CVE-2026-11644","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11645","label":"www.suse.com/security/cve/CVE-2026-11645","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11646","label":"www.suse.com/security/cve/CVE-2026-11646","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11647","label":"www.suse.com/security/cve/CVE-2026-11647","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11648","label":"www.suse.com/security/cve/CVE-2026-11648","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11649","label":"www.suse.com/security/cve/CVE-2026-11649","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11650","label":"www.suse.com/security/cve/CVE-2026-11650","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11651","label":"www.suse.com/security/cve/CVE-2026-11651","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11652","label":"www.suse.com/security/cve/CVE-2026-11652","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11653","label":"www.suse.com/security/cve/CVE-2026-11653","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11654","label":"www.suse.com/security/cve/CVE-2026-11654","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11655","label":"www.suse.com/security/cve/CVE-2026-11655","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11656","label":"www.suse.com/security/cve/CVE-2026-11656","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11657","label":"www.suse.com/security/cve/CVE-2026-11657","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11658","label":"www.suse.com/security/cve/CVE-2026-11658","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11659","label":"www.suse.com/security/cve/CVE-2026-11659","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11660","label":"www.suse.com/security/cve/CVE-2026-11660","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11661","label":"www.suse.com/security/cve/CVE-2026-11661","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11662","label":"www.suse.com/security/cve/CVE-2026-11662","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11663","label":"www.suse.com/security/cve/CVE-2026-11663","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11664","label":"www.suse.com/security/cve/CVE-2026-11664","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11665","label":"www.suse.com/security/cve/CVE-2026-11665","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11666","label":"www.suse.com/security/cve/CVE-2026-11666","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11667","label":"www.suse.com/security/cve/CVE-2026-11667","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11668","label":"www.suse.com/security/cve/CVE-2026-11668","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11669","label":"www.suse.com/security/cve/CVE-2026-11669","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11670","label":"www.suse.com/security/cve/CVE-2026-11670","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11671","label":"www.suse.com/security/cve/CVE-2026-11671","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11672","label":"www.suse.com/security/cve/CVE-2026-11672","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11673","label":"www.suse.com/security/cve/CVE-2026-11673","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11674","label":"www.suse.com/security/cve/CVE-2026-11674","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11675","label":"www.suse.com/security/cve/CVE-2026-11675","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11676","label":"www.suse.com/security/cve/CVE-2026-11676","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11677","label":"www.suse.com/security/cve/CVE-2026-11677","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11678","label":"www.suse.com/security/cve/CVE-2026-11678","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11679","label":"www.suse.com/security/cve/CVE-2026-11679","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11680","label":"www.suse.com/security/cve/CVE-2026-11680","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11681","label":"www.suse.com/security/cve/CVE-2026-11681","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11682","label":"www.suse.com/security/cve/CVE-2026-11682","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11683","label":"www.suse.com/security/cve/CVE-2026-11683","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11684","label":"www.suse.com/security/cve/CVE-2026-11684","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11685","label":"www.suse.com/security/cve/CVE-2026-11685","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11686","label":"www.suse.com/security/cve/CVE-2026-11686","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11687","label":"www.suse.com/security/cve/CVE-2026-11687","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11688","label":"www.suse.com/security/cve/CVE-2026-11688","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11689","label":"www.suse.com/security/cve/CVE-2026-11689","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11690","label":"www.suse.com/security/cve/CVE-2026-11690","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11691","label":"www.suse.com/security/cve/CVE-2026-11691","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11692","label":"www.suse.com/security/cve/CVE-2026-11692","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11693","label":"www.suse.com/security/cve/CVE-2026-11693","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11694","label":"www.suse.com/security/cve/CVE-2026-11694","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11695","label":"www.suse.com/security/cve/CVE-2026-11695","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11696","label":"www.suse.com/security/cve/CVE-2026-11696","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11697","label":"www.suse.com/security/cve/CVE-2026-11697","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11698","label":"www.suse.com/security/cve/CVE-2026-11698","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11699","label":"www.suse.com/security/cve/CVE-2026-11699","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11700","label":"www.suse.com/security/cve/CVE-2026-11700","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11701","label":"www.suse.com/security/cve/CVE-2026-11701","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-11628","CVE-2026-11629","CVE-2026-11630","CVE-2026-11631","CVE-2026-11632","CVE-2026-11633","CVE-2026-11634","CVE-2026-11635","CVE-2026-11636","CVE-2026-11637","CVE-2026-11638","CVE-2026-11639","CVE-2026-11640","CVE-2026-11641","CVE-2026-11642","CVE-2026-11643","CVE-2026-11644","CVE-2026-11645","CVE-2026-11646","CVE-2026-11647","CVE-2026-11648","CVE-2026-11649","CVE-2026-11650","CVE-2026-11651","CVE-2026-11652","CVE-2026-11653","CVE-2026-11654","CVE-2026-11655","CVE-2026-11656","CVE-2026-11657","CVE-2026-11658","CVE-2026-11659","CVE-2026-11660","CVE-2026-11661","CVE-2026-11662","CVE-2026-11663","CVE-2026-11664","CVE-2026-11665","CVE-2026-11666","CVE-2026-11667","CVE-2026-11668","CVE-2026-11669","CVE-2026-11670","CVE-2026-11671","CVE-2026-11672","CVE-2026-11673","CVE-2026-11674","CVE-2026-11675","CVE-2026-11676","CVE-2026-11677","CVE-2026-11678","CVE-2026-11679","CVE-2026-11680","CVE-2026-11681","CVE-2026-11682","CVE-2026-11683","CVE-2026-11684","CVE-2026-11685","CVE-2026-11686","CVE-2026-11687","CVE-2026-11688","CVE-2026-11689","CVE-2026-11690","CVE-2026-11691","CVE-2026-11692","CVE-2026-11693","CVE-2026-11694","CVE-2026-11695","CVE-2026-11696","CVE-2026-11697","CVE-2026-11698","CVE-2026-11699","CVE-2026-11700","CVE-2026-11701"],"downstream":[],"duplicates":[],"related":["CVE-2026-11628","CVE-2026-11629","CVE-2026-11630","CVE-2026-11631","CVE-2026-11632","CVE-2026-11633","CVE-2026-11634","CVE-2026-11635","CVE-2026-11636","CVE-2026-11637","CVE-2026-11638","CVE-2026-11639","CVE-2026-11640","CVE-2026-11641","CVE-2026-11642","CVE-2026-11643","CVE-2026-11644","CVE-2026-11645","CVE-2026-11646","CVE-2026-11647","CVE-2026-11648","CVE-2026-11649","CVE-2026-11650","CVE-2026-11651","CVE-2026-11652","CVE-2026-11653","CVE-2026-11654","CVE-2026-11655","CVE-2026-11656","CVE-2026-11657","CVE-2026-11658","CVE-2026-11659","CVE-2026-11660","CVE-2026-11661","CVE-2026-11662","CVE-2026-11663","CVE-2026-11664","CVE-2026-11665","CVE-2026-11666","CVE-2026-11667","CVE-2026-11668","CVE-2026-11669","CVE-2026-11670","CVE-2026-11671","CVE-2026-11672","CVE-2026-11673","CVE-2026-11674","CVE-2026-11675","CVE-2026-11676","CVE-2026-11677","CVE-2026-11678","CVE-2026-11679","CVE-2026-11680","CVE-2026-11681","CVE-2026-11682","CVE-2026-11683","CVE-2026-11684","CVE-2026-11685","CVE-2026-11686","CVE-2026-11687","CVE-2026-11688","CVE-2026-11689","CVE-2026-11690","CVE-2026-11691","CVE-2026-11692","CVE-2026-11693","CVE-2026-11694","CVE-2026-11695","CVE-2026-11696","CVE-2026-11697","CVE-2026-11698","CVE-2026-11699","CVE-2026-11700","CVE-2026-11701"]},"timeline":[{"kind":"published","date":"2026-06-12T00:59:39.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-02T14:00:12.683Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T08:55:40.616Z","stale":false,"partial":false}}