# OPENSUSE-SU-2026:20460-1: chromium security update OPENSUSE-SU-2026:20460-1, released August 31, 2026, fixes 86 CVEs in chromium (version 146.0.7680.177-bp160.1.1). 3 of them are being exploited (CVE-2026-5281); 3 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-20460-1 - Platform: Linux - Released: Aug 31, 2026 - Priority: Patch now (Closes CVE-2026-5281, exploited (CISA KEV)) - CVEs: 86, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:20460-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium](https://patchblox.com/security/data/product/linux/chromium.md) | opensuse-leap 16.0 | 146.0.7680.177-bp160.1.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-5281](https://patchblox.com/security/data/cve/CVE-2026-5281.md) | Patch now | Chromium: CVE-2026-5281 Use after free in Dawn | 8.8 | 0.1374 | CISA KEV | | [CVE-2026-3910](https://patchblox.com/security/data/cve/CVE-2026-3910.md) | Patch now | Chromium: CVE-2026-3910 Inappropriate implementation in V8 | 8.8 | 0.0268 | CISA KEV | | [CVE-2026-3909](https://patchblox.com/security/data/cve/CVE-2026-3909.md) | Patch now | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | CISA KEV | | [CVE-2026-3916](https://patchblox.com/security/data/cve/CVE-2026-3916.md) | Urgent | Chromium: CVE-2026-3916 Out of bounds read in Web Speech | 9.6 | 0.0040 | | | [CVE-2026-5289](https://patchblox.com/security/data/cve/CVE-2026-5289.md) | Urgent | Chromium: CVE-2026-5289 Use after free in Navigation | 9.6 | 0.0035 | | | [CVE-2026-5288](https://patchblox.com/security/data/cve/CVE-2026-5288.md) | Urgent | Google Chrome: Use after free | 9.6 | 0.0032 | | | [CVE-2026-5290](https://patchblox.com/security/data/cve/CVE-2026-5290.md) | Urgent | Chromium: CVE-2026-5290 Use after free in Compositing | 9.6 | 0.0032 | | | [CVE-2026-5272](https://patchblox.com/security/data/cve/CVE-2026-5272.md) | High | Chromium: CVE-2026-5272 Heap buffer overflow in GPU | 8.8 | 0.0056 | | | [CVE-2026-4673](https://patchblox.com/security/data/cve/CVE-2026-4673.md) | High | Chromium: CVE-2026-4673 Heap buffer overflow in WebAudio | 8.8 | 0.0051 | | | [CVE-2026-5287](https://patchblox.com/security/data/cve/CVE-2026-5287.md) | High | Chromium: CVE-2026-5287 Use after free in PDF | 8.8 | 0.0051 | | | [CVE-2026-4674](https://patchblox.com/security/data/cve/CVE-2026-4674.md) | High | Chromium: CVE-2026-4674 Out of bounds read in CSS | 8.8 | 0.0046 | | | [CVE-2026-3913](https://patchblox.com/security/data/cve/CVE-2026-3913.md) | High | Chromium: CVE-2026-3913 Heap buffer overflow in WebML | 8.8 | 0.0046 | | | [CVE-2026-4677](https://patchblox.com/security/data/cve/CVE-2026-4677.md) | High | Chromium: CVE-2026-4677 Out of bounds read in WebAudio | 8.8 | 0.0046 | | | [CVE-2026-5275](https://patchblox.com/security/data/cve/CVE-2026-5275.md) | High | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-3915](https://patchblox.com/security/data/cve/CVE-2026-3915.md) | High | Chromium: CVE-2026-3915 Heap buffer overflow in WebML | 8.8 | 0.0044 | | | [CVE-2026-5279](https://patchblox.com/security/data/cve/CVE-2026-5279.md) | High | Chromium: CVE-2026-5279 Object corruption in V8 | 8.8 | 0.0044 | | | [CVE-2026-4443](https://patchblox.com/security/data/cve/CVE-2026-4443.md) | High | Chromium: CVE-2026-4443 Heap buffer overflow in WebAudio | 8.8 | 0.0043 | | | [CVE-2026-5274](https://patchblox.com/security/data/cve/CVE-2026-5274.md) | High | Chromium: CVE-2026-5274 Integer overflow in Codecs | 8.8 | 0.0043 | | | [CVE-2026-4680](https://patchblox.com/security/data/cve/CVE-2026-4680.md) | High | Chromium: CVE-2026-4680 Use after free in FedCM | 8.8 | 0.0043 | | | [CVE-2026-5278](https://patchblox.com/security/data/cve/CVE-2026-5278.md) | High | Google Chrome: Use after free | 8.8 | 0.0041 | | | [CVE-2026-4678](https://patchblox.com/security/data/cve/CVE-2026-4678.md) | High | Chromium: CVE-2026-4678 Use after free in WebGPU | 8.8 | 0.0040 | | | [CVE-2026-3914](https://patchblox.com/security/data/cve/CVE-2026-3914.md) | High | Chromium: CVE-2026-3914 Integer overflow in WebML | 8.8 | 0.0040 | | | [CVE-2026-3917](https://patchblox.com/security/data/cve/CVE-2026-3917.md) | High | Chromium: CVE-2026-3917 Use after free in Agents | 8.8 | 0.0040 | | | [CVE-2026-5285](https://patchblox.com/security/data/cve/CVE-2026-5285.md) | High | Chromium: CVE-2026-5285 Use after free in WebGL | 8.8 | 0.0040 | | | [CVE-2026-4675](https://patchblox.com/security/data/cve/CVE-2026-4675.md) | High | Chromium: CVE-2026-4675 Heap buffer overflow in WebGL | 8.8 | 0.0039 | | | [CVE-2026-5280](https://patchblox.com/security/data/cve/CVE-2026-5280.md) | High | Chromium: CVE-2026-5280 Use after free in WebCodecs | 8.8 | 0.0039 | | | [CVE-2026-5286](https://patchblox.com/security/data/cve/CVE-2026-5286.md) | High | Chromium: CVE-2026-5286 Use after free in Dawn | 8.8 | 0.0039 | | | [CVE-2026-3918](https://patchblox.com/security/data/cve/CVE-2026-3918.md) | High | Chromium: CVE-2026-3918 Use after free in WebMCP | 8.8 | 0.0038 | | | [CVE-2026-4447](https://patchblox.com/security/data/cve/CVE-2026-4447.md) | High | Chromium: CVE-2026-4447 Inappropriate implementation in V8 | 8.8 | 0.0037 | | | [CVE-2026-4457](https://patchblox.com/security/data/cve/CVE-2026-4457.md) | High | Chromium: CVE-2026-4457 Type Confusion in V8 | 8.8 | 0.0037 | | | [CVE-2026-4676](https://patchblox.com/security/data/cve/CVE-2026-4676.md) | High | Chromium: CVE-2026-4676 Use after free in Dawn | 8.8 | 0.0037 | | | [CVE-2026-3921](https://patchblox.com/security/data/cve/CVE-2026-3921.md) | High | Chromium: CVE-2026-3921 Use after free in TextEncoding | 8.8 | 0.0036 | | | [CVE-2026-4439](https://patchblox.com/security/data/cve/CVE-2026-4439.md) | High | Google Chrome: Out-of-bounds Read | 8.8 | 0.0035 | | | [CVE-2026-5284](https://patchblox.com/security/data/cve/CVE-2026-5284.md) | High | Chromium: CVE-2026-5284 Use after free in Dawn | 7.5 | 0.0035 | | | [CVE-2026-4679](https://patchblox.com/security/data/cve/CVE-2026-4679.md) | High | Chromium: CVE-2026-4679 Integer overflow in Fonts | 8.8 | 0.0035 | | | [CVE-2026-3920](https://patchblox.com/security/data/cve/CVE-2026-3920.md) | High | Chromium: CVE-2026-3920 Out of bounds memory access in WebML | 8.8 | 0.0034 | | | [CVE-2026-4440](https://patchblox.com/security/data/cve/CVE-2026-4440.md) | High | Chromium: CVE-2026-4440 Out of bounds read and write in WebGL | 8.8 | 0.0034 | | | [CVE-2026-5277](https://patchblox.com/security/data/cve/CVE-2026-5277.md) | High | Chromium: CVE-2026-5277 Integer overflow in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-4461](https://patchblox.com/security/data/cve/CVE-2026-4461.md) | High | Chromium: CVE-2026-4461 Inappropriate implementation in V8 | 8.8 | 0.0033 | | | [CVE-2026-4441](https://patchblox.com/security/data/cve/CVE-2026-4441.md) | High | Chromium: CVE-2026-4441 Use after free in Base | 8.8 | 0.0033 | | | [CVE-2026-5292](https://patchblox.com/security/data/cve/CVE-2026-5292.md) | High | Chromium: CVE-2026-5292 Out of bounds read in WebCodecs | 8.8 | 0.0032 | | | [CVE-2026-3931](https://patchblox.com/security/data/cve/CVE-2026-3931.md) | High | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 | | | [CVE-2026-3922](https://patchblox.com/security/data/cve/CVE-2026-3922.md) | High | Chromium: CVE-2026-3922 Use after free in MediaStream | 8.8 | 0.0031 | | | [CVE-2026-3923](https://patchblox.com/security/data/cve/CVE-2026-3923.md) | High | Chromium: CVE-2026-3923 Use after free in WebMIDI | 8.8 | 0.0031 | | | [CVE-2026-3936](https://patchblox.com/security/data/cve/CVE-2026-3936.md) | High | Chromium: CVE-2026-3936 Use after free in WebView | 8.8 | 0.0031 | | | [CVE-2026-4463](https://patchblox.com/security/data/cve/CVE-2026-4463.md) | High | Chromium: CVE-2026-4463 Heap buffer overflow in WebRTC | 8.8 | 0.0031 | | | [CVE-2026-3924](https://patchblox.com/security/data/cve/CVE-2026-3924.md) | High | Chromium: CVE-2026-3924 Use after free in WindowDialog | 7.5 | 0.0031 | | | [CVE-2026-3919](https://patchblox.com/security/data/cve/CVE-2026-3919.md) | High | Chromium: CVE-2026-3919 Use after free in Extensions | 8.8 | 0.0030 | | | [CVE-2026-4444](https://patchblox.com/security/data/cve/CVE-2026-4444.md) | High | Chromium: CVE-2026-4444 Stack buffer overflow in WebRTC | 8.8 | 0.0030 | | | [CVE-2026-4448](https://patchblox.com/security/data/cve/CVE-2026-4448.md) | High | Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-4446](https://patchblox.com/security/data/cve/CVE-2026-4446.md) | High | Chromium: CVE-2026-4446 Use after free in WebRTC | 8.8 | 0.0029 | | | [CVE-2026-4450](https://patchblox.com/security/data/cve/CVE-2026-4450.md) | High | Chromium: CVE-2026-4450 Out of bounds write in V8 | 8.8 | 0.0029 | | | [CVE-2026-4459](https://patchblox.com/security/data/cve/CVE-2026-4459.md) | High | Chromium: CVE-2026-4459 Out of bounds read and write in WebAudio | 8.8 | 0.0029 | | | [CVE-2026-4442](https://patchblox.com/security/data/cve/CVE-2026-4442.md) | High | Chromium: CVE-2026-4442 Heap buffer overflow in CSS | 8.8 | 0.0028 | | | [CVE-2026-4460](https://patchblox.com/security/data/cve/CVE-2026-4460.md) | High | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 | | | [CVE-2026-4464](https://patchblox.com/security/data/cve/CVE-2026-4464.md) | High | Chromium: CVE-2026-4464 Integer overflow in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-5283](https://patchblox.com/security/data/cve/CVE-2026-5283.md) | High | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-4452](https://patchblox.com/security/data/cve/CVE-2026-4452.md) | High | Chromium: CVE-2026-4452 Integer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-4445](https://patchblox.com/security/data/cve/CVE-2026-4445.md) | High | Chromium: CVE-2026-4445 Use after free in WebRTC | 8.8 | 0.0026 | | | [CVE-2026-4449](https://patchblox.com/security/data/cve/CVE-2026-4449.md) | High | Chromium: CVE-2026-4449 Use after free in Blink | 8.8 | 0.0026 | | | [CVE-2026-4451](https://patchblox.com/security/data/cve/CVE-2026-4451.md) | High | Chromium: CVE-2026-4451 Insufficient validation of untrusted input in Navigation | 8.8 | 0.0026 | | | [CVE-2026-4454](https://patchblox.com/security/data/cve/CVE-2026-4454.md) | High | Chromium: CVE-2026-4454 Use after free in Network | 8.8 | 0.0026 | | | [CVE-2026-4456](https://patchblox.com/security/data/cve/CVE-2026-4456.md) | High | Chromium: CVE-2026-4456 Use after free in Digital Credentials API | 8.8 | 0.0026 | | | [CVE-2026-4462](https://patchblox.com/security/data/cve/CVE-2026-4462.md) | High | Chromium: CVE-2026-4462 Out of bounds read in Blink | 8.8 | 0.0026 | | | [CVE-2026-3926](https://patchblox.com/security/data/cve/CVE-2026-3926.md) | High | Chromium: CVE-2026-3926 Out of bounds read in V8 | 8.8 | 0.0026 | | | [CVE-2026-4455](https://patchblox.com/security/data/cve/CVE-2026-4455.md) | High | Chromium: CVE-2026-4455 Heap buffer overflow in PDFium | 8.8 | 0.0026 | | | [CVE-2026-5282](https://patchblox.com/security/data/cve/CVE-2026-5282.md) | High | Google Chrome: Out of bounds read | 8.1 | 0.0025 | | | [CVE-2026-3932](https://patchblox.com/security/data/cve/CVE-2026-3932.md) | High | Chromium: CVE-2026-3932 Insufficient policy enforcement in PDF | 7.5 | 0.0021 | | | [CVE-2026-4458](https://patchblox.com/security/data/cve/CVE-2026-4458.md) | High | Chromium: CVE-2026-4458 Use after free in Extensions | 8.8 | 0.0020 | | | [CVE-2026-5273](https://patchblox.com/security/data/cve/CVE-2026-5273.md) | Routine | Chromium: CVE-2026-5273 Use after free in CSS | 6.3 | 0.0036 | | | [CVE-2026-5276](https://patchblox.com/security/data/cve/CVE-2026-5276.md) | Routine | Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB | 6.5 | 0.0025 | | | [CVE-2026-5291](https://patchblox.com/security/data/cve/CVE-2026-5291.md) | Routine | Chromium: CVE-2026-5291 Inappropriate implementation in WebGL | 6.5 | 0.0025 | | | [CVE-2026-3937](https://patchblox.com/security/data/cve/CVE-2026-3937.md) | Routine | Chromium: CVE-2026-3937 Incorrect security UI in Downloads | 6.5 | 0.0021 | | | [CVE-2026-3934](https://patchblox.com/security/data/cve/CVE-2026-3934.md) | Routine | Chromium: CVE-2026-3934 Insufficient policy enforcement in ChromeDriver | 6.5 | 0.0021 | | | [CVE-2026-3927](https://patchblox.com/security/data/cve/CVE-2026-3927.md) | Routine | Chromium: CVE-2026-3927 Incorrect security UI in PictureInPicture | 4.3 | 0.0020 | | | [CVE-2026-3942](https://patchblox.com/security/data/cve/CVE-2026-3942.md) | Routine | Chromium: CVE-2026-3942 Incorrect security UI in PictureInPicture | 4.3 | 0.0020 | | | [CVE-2026-3938](https://patchblox.com/security/data/cve/CVE-2026-3938.md) | Routine | Chromium: CVE-2026-3938 Insufficient policy enforcement in Clipboard | 4.3 | 0.0020 | | | [CVE-2026-3941](https://patchblox.com/security/data/cve/CVE-2026-3941.md) | Routine | Chromium: CVE-2026-3941 Insufficient policy enforcement in DevTools | 4.3 | 0.0019 | | | [CVE-2026-3929](https://patchblox.com/security/data/cve/CVE-2026-3929.md) | Routine | Chromium: CVE-2026-3929 Side-channel information leakage in ResourceTiming | 3.1 | 0.0019 | | | [CVE-2026-3935](https://patchblox.com/security/data/cve/CVE-2026-3935.md) | Routine | Chromium: CVE-2026-3935 Incorrect security UI in WebAppInstalls | 6.5 | 0.0019 | | | [CVE-2026-3930](https://patchblox.com/security/data/cve/CVE-2026-3930.md) | Routine | Chromium: CVE-2026-3930 Unsafe navigation in Navigation | 5.3 | 0.0018 | | | [CVE-2026-3940](https://patchblox.com/security/data/cve/CVE-2026-3940.md) | Routine | Chromium: CVE-2026-3940 Insufficient policy enforcement in DevTools | 5.3 | 0.0018 | | | [CVE-2026-4453](https://patchblox.com/security/data/cve/CVE-2026-4453.md) | Routine | Chromium: CVE-2026-4453 Integer overflow in Dawn | 4.3 | 0.0018 | | | [CVE-2026-3925](https://patchblox.com/security/data/cve/CVE-2026-3925.md) | Routine | Chromium: CVE-2026-3925 Incorrect security UI in LookalikeChecks | 4.3 | 0.0017 | | | [CVE-2026-3939](https://patchblox.com/security/data/cve/CVE-2026-3939.md) | Routine | Chromium: CVE-2026-3939 Use after free in WebView | 5.3 | 0.0017 | | | [CVE-2026-3928](https://patchblox.com/security/data/cve/CVE-2026-3928.md) | Routine | Chromium: CVE-2026-3928 Insufficient policy enforcement in Extensions | 4.3 | 0.0014 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.