Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 147.0.7727.137 (boo#1263158) * CVE-2026-7363: Use after free in Canvas * CVE-2026-7361: Use after free in iOS * CVE-2026-7344: Use after free in Accessibility * CVE-2026-7343: Use after free in Views * CVE-2026-7333: Use after free in GPU * CVE-2026-7360: Insufficient validation of untrusted input in Compositing * CVE-2026-7359: Use after free in ANGLE * CVE-2026-7358: Use after free in Animation * CVE-2026-7334: Use after free in Views * CVE-2026-7357: Use after free in GPU * CVE-2026-7356: Use after free in Navigation * CVE-2026-7354: Out of bounds read and write in Angle * CVE-2026-7353: Heap buffer overflow in Skia * CVE-2026-7352: Use after free in Media * CVE-2026-7351: Race in MHTML * CVE-2026-7350: Use after free in WebMIDI * CVE-2026-7349: Use after free in Cast * CVE-2026-7348: Use after free in Codecs * CVE-2026-7335: Use after free in media * CVE-2026-7336: Use after free in WebRTC * CVE-2026-7337: Type Confusion in V8 * CVE-2026-7347: Use after free in Chromoting * CVE-2026-7346: Inappropriate implementation in Tint * CVE-2026-7345: Insufficient validation of untrusted input in Feedback * CVE-2026-7338: Use after free in Cast * CVE-2026-7342: Use after free in WebView * CVE-2026-7341: Use after free in WebRTC * CVE-2026-7339: Heap buffer overflow in WebRTC * CVE-2026-7340: Integer overflow in ANGLE * CVE-2026-7355: Use after free in Media - Chromium 147.0.7727.116 (boo#1262586) - Chromium 147.0.7727.101 (boo#1262174) * CVE-2026-6296: Heap buffer overflow in ANGLE * CVE-2026-6297: Use after free in Proxy * CVE-2026-6298: Heap buffer overflow in Skia * CVE-2026-6299: Use after free in Prerender * CVE-2026-6358: Use after free in XR * CVE-2026-6359: Use after free in Video * CVE-2026-6300: Use after free in CSS * CVE-2026-6301: Type Confusion in Turbofan * CVE-2026-6302: Use after free in Video * CVE-2026-6303: Use after free in Codecs * CVE-2026-6304: Use after free in Graphite * CVE-2026-6305: Heap buffer overflow in PDFium * CVE-2026-6306: Heap buffer overflow in PDFium * CVE-2026-6307: Type Confusion in Turbofan * CVE-2026-6308: Out of bounds read in Media * CVE-2026-6309: Use after free in Viz * CVE-2026-6360: Use after free in FileSystem * CVE-2026-6310: Use after free in Dawn * CVE-2026-6311: Uninitialized Use in Accessibility * CVE-2026-6312: Insufficient policy enforcement in Passwords * CVE-2026-6313: Insufficient policy enforcement in CORS * CVE-2026-6314: Out of bounds write in GPU * CVE-2026-6315: Use after free in Permissions * CVE-2026-6316: Use after free in Forms * CVE-2026-6361: Heap buffer overflow in PDFium * CVE-2026-6362: Use after free in Codecs * CVE-2026-6317: Use after free in Cast * CVE-2026-6363: Type Confusion in V8 * CVE-2026-6318: Use after free in Codecs * CVE-2026-6319: Use after free in Payments * CVE-2026-6364: Out of bounds read in Skia - Chromium 147.0.7727.55 (boo#1261758): * CVE-2026-5858: Heap buffer overflow in WebML * CVE-2026-5859: Integer overflow in WebML * CVE-2026-5860: Use after free in WebRTC * CVE-2026-5861: Use after free in V8 * CVE-2026-5862: Inappropriate implementation in V8 * CVE-2026-5863: Inappropriate implementation in V8 * CVE-2026-5864: Heap buffer overflow in WebAudio * CVE-2026-5865: Type Confusion in V8 * CVE-2026-5866: Use after free in Media * CVE-2026-5867: Heap buffer overflow in WebML * CVE-2026-5868: Heap buffer overflow in ANGLE * CVE-2026-5869: Heap buffer overflow in WebML * CVE-2026-5870: Integer overflow in Skia * CVE-2026-5871: Type Confusion in V8 * CVE-2026-5872: Use after free in Blink * CVE-2026-5873: Out of bounds read and write in V8 * CVE-2026-5874: Use after free in PrivateAI * CVE-2026-5875: Policy bypass in Blink * CVE-2026-5876: Side-channel information leakage in Navigation * CVE-2026-5877: Use after free in Navigation * CVE-2026-5878: Incorrect security UI in Blink * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE * CVE-2026-5880: Incorrect security UI in browser UI * CVE-2026-5881: Policy bypass in LocalNetworkAccess * CVE-2026-5882: Incorrect security UI in Fullscreen * CVE-2026-5883: Use after free in Media * CVE-2026-5884: Insufficient validation of untrusted input in Media * CVE-2026-5885: Insufficient validation of untrusted input in WebML * CVE-2026-5886: Out of bounds read in WebAudio * CVE-2026-5887: Insufficient validation of untrusted input in Downloads * CVE-2026-5888: Uninitialized Use in WebCodecs * CVE-2026-5889: Cryptographic Flaw in PDFium * CVE-2026-5890: Race in WebCodecs * CVE-2026-5891: Insufficient policy enforcement in browser UI * CVE-2026-5892: Insufficient policy enforcement in PWAs * CVE-2026-5893: Race in V8 * CVE-2026-5894: Inappropriate implementation in PDF * CVE-2026-5895: Inc
Security update for chromium
Description
This update for chromium fixes the following issues: Changes in chromium: - Chromium 147.0.7727.137 (boo#1263158) * CVE-2026-7363: Use after free in Canvas * CVE-2026-7361: Use after free in iOS * CVE-2026-7344: Use after free in Accessibility * CVE-2026-7343: Use after free in Views * CVE-2026-7333: Use after free in GPU * CVE-2026-7360: Insufficient validation of untrusted input in Compositing * CVE-2026-7359: Use after free in ANGLE * CVE-2026-7358: Use after free in Animation * CVE-2026-7334: Use after free in Views * CVE-2026-7357: Use after free in GPU * CVE-2026-7356: Use after free in Navigation * CVE-2026-7354: Out of bounds read and write in Angle * CVE-2026-7353: Heap buffer overflow in Skia * CVE-2026-7352: Use after free in Media * CVE-2026-7351: Race in MHTML * CVE-2026-7350: Use after free in WebMIDI * CVE-2026-7349: Use after free in Cast * CVE-2026-7348: Use after free in Codecs * CVE-2026-7335: Use after free in media * CVE-2026-7336: Use after free in WebRTC * CVE-2026-7337: Type Confusion in V8 * CVE-2026-7347: Use after free in Chromoting * CVE-2026-7346: Inappropriate implementation in Tint * CVE-2026-7345: Insufficient validation of untrusted input in Feedback * CVE-2026-7338: Use after free in Cast * CVE-2026-7342: Use after free in WebView * CVE-2026-7341: Use after free in WebRTC * CVE-2026-7339: Heap buffer overflow in WebRTC * CVE-2026-7340: Integer overflow in ANGLE * CVE-2026-7355: Use after free in Media - Chromium 147.0.7727.116 (boo#1262586) - Chromium 147.0.7727.101 (boo#1262174) * CVE-2026-6296: Heap buffer overflow in ANGLE * CVE-2026-6297: Use after free in Proxy * CVE-2026-6298: Heap buffer overflow in Skia * CVE-2026-6299: Use after free in Prerender * CVE-2026-6358: Use after free in XR * CVE-2026-6359: Use after free in Video * CVE-2026-6300: Use after free in CSS * CVE-2026-6301: Type Confusion in Turbofan * CVE-2026-6302: Use after free in Video * CVE-2026-6303: Use after free in Codecs * CVE-2026-6304: Use after free in Graphite * CVE-2026-6305: Heap buffer overflow in PDFium * CVE-2026-6306: Heap buffer overflow in PDFium * CVE-2026-6307: Type Confusion in Turbofan * CVE-2026-6308: Out of bounds read in Media * CVE-2026-6309: Use after free in Viz * CVE-2026-6360: Use after free in FileSystem * CVE-2026-6310: Use after free in Dawn * CVE-2026-6311: Uninitialized Use in Accessibility * CVE-2026-6312: Insufficient policy enforcement in Passwords * CVE-2026-6313: Insufficient policy enforcement in CORS * CVE-2026-6314: Out of bounds write in GPU * CVE-2026-6315: Use after free in Permissions * CVE-2026-6316: Use after free in Forms * CVE-2026-6361: Heap buffer overflow in PDFium * CVE-2026-6362: Use after free in Codecs * CVE-2026-6317: Use after free in Cast * CVE-2026-6363: Type Confusion in V8 * CVE-2026-6318: Use after free in Codecs * CVE-2026-6319: Use after free in Payments * CVE-2026-6364: Out of bounds read in Skia - Chromium 147.0.7727.55 (boo#1261758): * CVE-2026-5858: Heap buffer overflow in WebML * CVE-2026-5859: Integer overflow in WebML * CVE-2026-5860: Use after free in WebRTC * CVE-2026-5861: Use after free in V8 * CVE-2026-5862: Inappropriate implementation in V8 * CVE-2026-5863: Inappropriate implementation in V8 * CVE-2026-5864: Heap buffer overflow in WebAudio * CVE-2026-5865: Type Confusion in V8 * CVE-2026-5866: Use after free in Media * CVE-2026-5867: Heap buffer overflow in WebML * CVE-2026-5868: Heap buffer overflow in ANGLE * CVE-2026-5869: Heap buffer overflow in WebML * CVE-2026-5870: Integer overflow in Skia * CVE-2026-5871: Type Confusion in V8 * CVE-2026-5872: Use after free in Blink * CVE-2026-5873: Out of bounds read and write in V8 * CVE-2026-5874: Use after free in PrivateAI * CVE-2026-5875: Policy bypass in Blink * CVE-2026-5876: Side-channel information leakage in Navigation * CVE-2026-5877: Use after free in Navigation * CVE-2026-5878: Incorrect security UI in Blink * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE * CVE-2026-5880: Incorrect security UI in browser UI * CVE-2026-5881: Policy bypass in LocalNetworkAccess * CVE-2026-5882: Incorrect security UI in Fullscreen * CVE-2026-5883: Use after free in Media * CVE-2026-5884: Insufficient validation of untrusted input in Media * CVE-2026-5885: Insufficient validation of untrusted input in WebML * CVE-2026-5886: Out of bounds read in WebAudio * CVE-2026-5887: Insufficient validation of untrusted input in Downloads * CVE-2026-5888: Uninitialized Use in WebCodecs * CVE-2026-5889: Cryptographic Flaw in PDFium * CVE-2026-5890: Race in WebCodecs * CVE-2026-5891: Insufficient policy enforcement in browser UI * CVE-2026-5892: Insufficient policy enforcement in PWAs * CVE-2026-5893: Race in V8 * CVE-2026-5894: Inappropriate implementation in PDF * CVE-2026-5895: Inc
Affected software
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:20660-1
- Cve Count
- 124
- Additional Cves
- ["CVE-2026-5859","CVE-2026-5860","CVE-2026-5861","CVE-2026-5862","CVE-2026-5863","CVE-2026-5864","CVE-2026-5865","CVE-2026-5866","CVE-2026-5867","CVE-2026-5868","CVE-2026-5869","CVE-2026-5870","CVE-2026-5871","CVE-2026-5872","CVE-2026-5873","CVE-2026-5874","CVE-2026-5875","CVE-2026-5876","CVE-2026-5877","CVE-2026-5878","CVE-2026-5879","CVE-2026-5880","CVE-2026-5881","CVE-2026-5882","CVE-2026-5883","CVE-2026-5884","CVE-2026-5885","CVE-2026-5886","CVE-2026-5887","CVE-2026-5888","CVE-2026-5889","CVE-2026-5890","CVE-2026-5891","CVE-2026-5892","CVE-2026-5893","CVE-2026-5894","CVE-2026-5895","CVE-2026-5896","CVE-2026-5897","CVE-2026-5898","CVE-2026-5899","CVE-2026-5900","CVE-2026-5901","CVE-2026-5902","CVE-2026-5903","CVE-2026-5904","CVE-2026-5905","CVE-2026-5906","CVE-2026-5907","CVE-2026-5908","CVE-2026-5909","CVE-2026-5910","CVE-2026-5911","CVE-2026-5912","CVE-2026-5913","CVE-2026-5914","CVE-2026-5915","CVE-2026-5918","CVE-2026-5919","CVE-2026-6296","CVE-2026-6297","CVE-2026-6298","CVE-2026-6299","CVE-2026-6300","CVE-2026-6301","CVE-2026-6302","CVE-2026-6303","CVE-2026-6304","CVE-2026-6305","CVE-2026-6306","CVE-2026-6307","CVE-2026-6308","CVE-2026-6309","CVE-2026-6310","CVE-2026-6311","CVE-2026-6312","CVE-2026-6313","CVE-2026-6314","CVE-2026-6315","CVE-2026-6316","CVE-2026-6317","CVE-2026-6318","CVE-2026-6319","CVE-2026-6358","CVE-2026-6359","CVE-2026-6360","CVE-2026-6361","CVE-2026-6362","CVE-2026-6363","CVE-2026-6364","CVE-2026-6919","CVE-2026-6920","CVE-2026-6921","CVE-2026-7333","CVE-2026-7334","CVE-2026-7335","CVE-2026-7336","CVE-2026-7337","CVE-2026-7338","CVE-2026-7339","CVE-2026-7340","CVE-2026-7341","CVE-2026-7342","CVE-2026-7343","CVE-2026-7344","CVE-2026-7345","CVE-2026-7346","CVE-2026-7347","CVE-2026-7348","CVE-2026-7349","CVE-2026-7350","CVE-2026-7351","CVE-2026-7352","CVE-2026-7353","CVE-2026-7354","CVE-2026-7355","CVE-2026-7356","CVE-2026-7357","CVE-2026-7358","CVE-2026-7359","CVE-2026-7360","CVE-2026-7361","CVE-2026-7363"]
- State
- PUBLISHED
Threat ID: 6aab498855bf5e2cf5990f00
Added to database: 09/17/2026, 01:59:36 UTC
Last updated: 09/17/2026, 02:02:25 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.