chromedriver-150.0.7871.128-1.1 on GA media
Affects SUSE Product Security Team SUSESource GCVE Database
Not known to be exploited · fixed in 150.0.7871.128 : update SUSE Product Security Team SUSE when convenient.
Data as of 10/24/2026, 17:08:24 UTC
No CVSS score from NVD or the CNA
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 26% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 150.0.7871.128
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
GitHub Actionschromium/chromiumpkg:github/chromium/chromiumOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available in the chromedriver-150.0.7871.128-1.1 package on openSUSE Tumbleweed. Users should update to this version or later to remediate the vulnerabilities. No additional mitigation steps are indicated by the vendor advisory.
Description
Multiple security issues affecting chromedriver versions prior to 150.0.7871.128 have been fixed in the chromedriver-150.0.7871.128-1.1 package for openSUSE Tumbleweed. These vulnerabilities include use-after-free (CWE-416) and others, collectively rated with medium severity. The issues are addressed in this updated package, which is available for affected architectures including aarch64 and ppc64le.
Impact
The vulnerabilities could potentially allow an attacker to cause unexpected behavior or crashes due to use-after-free conditions, which may lead to denial of service or other impacts depending on exploitation. However, no active exploitation has been reported. The overall severity is assessed as medium.
Summary
This vulnerability advisory covers several security issues fixed in the chromedriver package version 150.0.7871.128-1.1 for openSUSE Tumbleweed. The affected versions are those prior to 150.0.7871.128. Among the issues is a use-after-free vulnerability (CWE-416). The vendor has released an updated package that resolves these vulnerabilities. There are no known exploits in the wild at this time.
Weaknesses
References
- nvd.nist.gov/vuln/detail/CVE-2026-15899 (opens in a new tab)
- chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_049796704.html (opens in a new tab)
- issues.chromium.org/issues/516987782 (opens in a new tab)
- suse.com/support/security/rating/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11309-1.json (opens in a new tab)
- suse.com/security/cve/CVE-2026-15899/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-15900/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-15901/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-15902/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-15903/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-15904/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-15905/ (opens in a new tab)