# OPENSUSE-SU-2024:0204-1: chromium security update

OPENSUSE-SU-2024:0204-1, released July 18, 2024, fixes 26 CVEs in chromium (version 126.0.6478.126-bp156.2.6.1). None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2024-0204-1
- Platform: Linux
- Released: Jul 18, 2024
- Priority: High (Closes CVE-2024-5841, high severity)
- CVEs: 26, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2024:0204-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium](https://patchblox.com/security/data/product/linux/chromium.md) | opensuse-leap 15.6 | 126.0.6478.126-bp156.2.6.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-5841](https://patchblox.com/security/data/cve/CVE-2024-5841.md) | High | Chromium: CVE-2024-5841 Use after free in V8 | 8.8 | 0.0495 |  |
| [CVE-2024-6100](https://patchblox.com/security/data/cve/CVE-2024-6100.md) | High | Chromium: CVE-2024-6100 Type Confusion in V8 | 8.8 | 0.0115 |  |
| [CVE-2024-5830](https://patchblox.com/security/data/cve/CVE-2024-5830.md) | High | Chromium: CVE-2024-5830 Type Confusion in V8 | 8.8 | 0.0094 |  |
| [CVE-2024-6101](https://patchblox.com/security/data/cve/CVE-2024-6101.md) | High | Chromium: CVE-2024-6101: Inappropriate implementation in WebAssembly | 8.8 | 0.0082 |  |
| [CVE-2024-6102](https://patchblox.com/security/data/cve/CVE-2024-6102.md) | High | Chromium: CVE-2024-6102: Out of bounds memory access in Dawn | 8.8 | 0.0069 |  |
| [CVE-2024-6291](https://patchblox.com/security/data/cve/CVE-2024-6291.md) | High | Chromium: CVE-2024-6291 Use after free in Swiftshader | 8.8 | 0.0066 |  |
| [CVE-2024-6103](https://patchblox.com/security/data/cve/CVE-2024-6103.md) | High | Chromium: CVE-2024-6103: Use after free in Dawn | 8.8 | 0.0064 |  |
| [CVE-2024-6290](https://patchblox.com/security/data/cve/CVE-2024-6290.md) | High | Chromium: CVE-2024-6290 Use after free in Dawn | 8.8 | 0.0061 |  |
| [CVE-2024-6292](https://patchblox.com/security/data/cve/CVE-2024-6292.md) | High | Chromium: CVE-2024-6292 Use after free in Dawn | 8.8 | 0.0061 |  |
| [CVE-2024-6293](https://patchblox.com/security/data/cve/CVE-2024-6293.md) | High | Chromium: CVE-2024-6293 Use after free in Dawn | 8.8 | 0.0061 |  |
| [CVE-2024-5834](https://patchblox.com/security/data/cve/CVE-2024-5834.md) | High | Chromium: CVE-2024-5834 Inappropriate implementation in Dawn | 8.8 | 0.0057 |  |
| [CVE-2024-5844](https://patchblox.com/security/data/cve/CVE-2024-5844.md) | High | Chromium: CVE-2024-5844 Heap buffer overflow in Tab Strip | 8.8 | 0.0054 |  |
| [CVE-2024-5837](https://patchblox.com/security/data/cve/CVE-2024-5837.md) | High | Chromium: CVE-2024-5837 Type Confusion in V8 | 8.8 | 0.0053 |  |
| [CVE-2024-5833](https://patchblox.com/security/data/cve/CVE-2024-5833.md) | High | Chromium: CVE-2024-5833 Type Confusion in V8 | 8.8 | 0.0052 |  |
| [CVE-2024-5838](https://patchblox.com/security/data/cve/CVE-2024-5838.md) | High | Chromium: CVE-2024-5838 Type Confusion in V8 | 8.8 | 0.0052 |  |
| [CVE-2024-5835](https://patchblox.com/security/data/cve/CVE-2024-5835.md) | High | Chromium: CVE-2024-5835 Heap buffer overflow in Tab Groups | 8.8 | 0.0052 |  |
| [CVE-2024-5836](https://patchblox.com/security/data/cve/CVE-2024-5836.md) | High | Chromium: CVE-2024-5836 Inappropriate Implementation in DevTools | 8.8 | 0.0050 |  |
| [CVE-2024-5842](https://patchblox.com/security/data/cve/CVE-2024-5842.md) | High | Chromium: CVE-2024-5842 Use after free in Browser UI | 8.8 | 0.0048 |  |
| [CVE-2024-5831](https://patchblox.com/security/data/cve/CVE-2024-5831.md) | High | Chromium: CVE-2024-5831 Use after free in Dawn | 8.8 | 0.0048 |  |
| [CVE-2024-5832](https://patchblox.com/security/data/cve/CVE-2024-5832.md) | High | Chromium: CVE-2024-5832 Use after free in Dawn | 8.8 | 0.0048 |  |
| [CVE-2024-5846](https://patchblox.com/security/data/cve/CVE-2024-5846.md) | High | Chromium: CVE-2024-5846 Use after free in PDFium | 8.8 | 0.0047 |  |
| [CVE-2024-5847](https://patchblox.com/security/data/cve/CVE-2024-5847.md) | High | Chromium: CVE-2024-5847 Use after free in PDFium | 8.8 | 0.0047 |  |
| [CVE-2024-5845](https://patchblox.com/security/data/cve/CVE-2024-5845.md) | High | Chromium: CVE-2024-5845 Use after free in Audio | 8.8 | 0.0046 |  |
| [CVE-2024-5839](https://patchblox.com/security/data/cve/CVE-2024-5839.md) | Routine | Chromium: CVE-2024-5839 Inappropriate Implementation in Memory Allocator | 6.5 | 0.0049 |  |
| [CVE-2024-5843](https://patchblox.com/security/data/cve/CVE-2024-5843.md) | Routine | Chromium: CVE-2024-5843 Inappropriate implementation in Downloads | 6.5 | 0.0047 |  |
| [CVE-2024-5840](https://patchblox.com/security/data/cve/CVE-2024-5840.md) | Routine | Chromium: CVE-2024-5840 Policy Bypass in CORS | 6.5 | 0.0041 |  |

---

Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
