# OPENSUSE-SU-2026:22202-1: chromium security update

OPENSUSE-SU-2026:22202-1, released November 7, 2026, fixes 52 CVEs in chromium (version 156.0.8078.73-bp160.1.1). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-22202-1
- Platform: Linux
- Released: Nov 7, 2026
- Priority: Urgent (Closes CVE-2026-118306, rated Critical)
- CVEs: 52, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:22202-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium](https://patchblox.com/security/data/product/linux/chromium.md) | opensuse-leap 16.0 | 156.0.8078.73-bp160.1.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-118306](https://patchblox.com/security/data/cve/CVE-2026-118306.md) | Urgent | Chromium: CVE-2026-118306 Memory corruption in FileSystem | 9.6 | 0.0037 |  |
| [CVE-2026-118348](https://patchblox.com/security/data/cve/CVE-2026-118348.md) | Urgent | Chromium: CVE-2026-118348 Improper input validation in Skia | 9.6 | 0.0034 |  |
| [CVE-2026-118331](https://patchblox.com/security/data/cve/CVE-2026-118331.md) | Urgent | Chromium: CVE-2026-118331 Improper input validation in FileAPI | 8.8 | 0.0034 |  |
| [CVE-2026-118344](https://patchblox.com/security/data/cve/CVE-2026-118344.md) | Urgent | Chromium: CVE-2026-118344 Use after free in Layout | 8.8 | 0.0034 |  |
| [CVE-2026-118305](https://patchblox.com/security/data/cve/CVE-2026-118305.md) | High | Chromium: CVE-2026-118305 Memory corruption in Turbolev | 9.6 | 0.0040 |  |
| [CVE-2026-118358](https://patchblox.com/security/data/cve/CVE-2026-118358.md) | High | Chromium: CVE-2026-118358 Memory corruption in WebAudio | 8.8 | 0.0036 |  |
| [CVE-2026-118321](https://patchblox.com/security/data/cve/CVE-2026-118321.md) | High | Chromium CVE-2026-118321: Use after free | 9.6 | 0.0035 |  |
| [CVE-2026-118329](https://patchblox.com/security/data/cve/CVE-2026-118329.md) | High | Chromium: CVE-2026-118329 Improper input validation in ANGLE | 8.8 | 0.0035 |  |
| [CVE-2026-118330](https://patchblox.com/security/data/cve/CVE-2026-118330.md) | High | Chromium: CVE-2026-118330 Use after free in Browser | 8.8 | 0.0033 |  |
| [CVE-2026-118307](https://patchblox.com/security/data/cve/CVE-2026-118307.md) | High | Chromium: CVE-2026-118307 Use after free in Paint | 8.8 | 0.0033 |  |
| [CVE-2026-118317](https://patchblox.com/security/data/cve/CVE-2026-118317.md) | High | Chromium: CVE-2026-118317 Memory corruption in HTML | 8.8 | 0.0032 |  |
| [CVE-2026-118339](https://patchblox.com/security/data/cve/CVE-2026-118339.md) | High | Chromium: CVE-2026-118339 Use after free in Animation | 8.8 | 0.0032 |  |
| [CVE-2026-118308](https://patchblox.com/security/data/cve/CVE-2026-118308.md) | High | Chromium: CVE-2026-118308 Use after free in SVG | 9.6 | 0.0031 |  |
| [CVE-2026-118310](https://patchblox.com/security/data/cve/CVE-2026-118310.md) | High | Chromium: CVE-2026-118310 Improper input validation in Views | 9.6 | 0.0031 |  |
| [CVE-2026-118316](https://patchblox.com/security/data/cve/CVE-2026-118316.md) | High | Chromium: CVE-2026-118316 Improper input validation in V8 | 9.6 | 0.0030 |  |
| [CVE-2026-118332](https://patchblox.com/security/data/cve/CVE-2026-118332.md) | High | Chromium: CVE-2026-118332 Improper input validation in Compositing | 9.6 | 0.0030 |  |
| [CVE-2026-118342](https://patchblox.com/security/data/cve/CVE-2026-118342.md) | High | Chromium: CVE-2026-118342 Out of bounds write in Editing | 9.6 | 0.0030 |  |
| [CVE-2026-118355](https://patchblox.com/security/data/cve/CVE-2026-118355.md) | High | Chromium: CVE-2026-118355 Improper input validation in Command | 9.6 | 0.0030 |  |
| [CVE-2026-118315](https://patchblox.com/security/data/cve/CVE-2026-118315.md) | High | Chromium: CVE-2026-118315 Improper input validation in SVG | 8.8 | 0.0029 |  |
| [CVE-2026-118350](https://patchblox.com/security/data/cve/CVE-2026-118350.md) | High | Chromium: CVE-2026-118350 Use after free in Turbolev | 8.8 | 0.0029 |  |
| [CVE-2026-118357](https://patchblox.com/security/data/cve/CVE-2026-118357.md) | High | Chromium: CVE-2026-118357 Use after free in FileSystem | 8.8 | 0.0028 |  |
| [CVE-2026-118359](https://patchblox.com/security/data/cve/CVE-2026-118359.md) | High | Chromium: CVE-2026-118359 Memory corruption in V8 | 8.8 | 0.0028 |  |
| [CVE-2026-118304](https://patchblox.com/security/data/cve/CVE-2026-118304.md) | High | Chromium: CVE-2026-118304 Improper input validation in SVG | 8.8 | 0.0028 |  |
| [CVE-2026-118311](https://patchblox.com/security/data/cve/CVE-2026-118311.md) | High | Chromium: CVE-2026-118311 Memory corruption in Media | 8.8 | 0.0028 |  |
| [CVE-2026-118313](https://patchblox.com/security/data/cve/CVE-2026-118313.md) | High | Chromium: CVE-2026-118313 Use after free in Video | 8.8 | 0.0028 |  |
| [CVE-2026-118345](https://patchblox.com/security/data/cve/CVE-2026-118345.md) | High | Chromium: CVE-2026-118345 Use after free in PDFium | 8.8 | 0.0027 |  |
| [CVE-2026-118340](https://patchblox.com/security/data/cve/CVE-2026-118340.md) | High | Chromium: CVE-2026-118340 Memory corruption in Skia | 9.6 | 0.0027 |  |
| [CVE-2026-118328](https://patchblox.com/security/data/cve/CVE-2026-118328.md) | High | Chromium: CVE-2026-118328 Improper input validation in WebRTC | 8.8 | 0.0027 |  |
| [CVE-2026-118351](https://patchblox.com/security/data/cve/CVE-2026-118351.md) | High | Chromium: CVE-2026-118351 Memory corruption in Skia | 9.6 | 0.0026 |  |
| [CVE-2026-118334](https://patchblox.com/security/data/cve/CVE-2026-118334.md) | High | Chromium: CVE-2026-118334 Use after free in ImageCapture | 8.8 | 0.0026 |  |
| [CVE-2026-118341](https://patchblox.com/security/data/cve/CVE-2026-118341.md) | High | Chromium: CVE-2026-118341 Use after free in Modularization | 8.8 | 0.0026 |  |
| [CVE-2026-118343](https://patchblox.com/security/data/cve/CVE-2026-118343.md) | High | Chromium: CVE-2026-118343 Improper input validation in ReadingList | 8.8 | 0.0026 |  |
| [CVE-2026-118347](https://patchblox.com/security/data/cve/CVE-2026-118347.md) | High | Chromium: CVE-2026-118347 Use after free in FileSystem | 8.8 | 0.0026 |  |
| [CVE-2026-118349](https://patchblox.com/security/data/cve/CVE-2026-118349.md) | High | Chromium: CVE-2026-118349 Memory corruption in Payments | 8.8 | 0.0026 |  |
| [CVE-2026-118352](https://patchblox.com/security/data/cve/CVE-2026-118352.md) | High | Chromium: CVE-2026-118352 Memory corruption in Cache | 8.8 | 0.0026 |  |
| [CVE-2026-118356](https://patchblox.com/security/data/cve/CVE-2026-118356.md) | High | Chromium: CVE-2026-118356 Use after free in WTF | 8.8 | 0.0026 |  |
| [CVE-2026-118320](https://patchblox.com/security/data/cve/CVE-2026-118320.md) | High | Chromium: CVE-2026-118320 Memory corruption in V8 | 8.8 | 0.0025 |  |
| [CVE-2026-118336](https://patchblox.com/security/data/cve/CVE-2026-118336.md) | High | Chromium: CVE-2026-118336 Improper input validation in Headless | 8.8 | 0.0025 |  |
| [CVE-2026-118309](https://patchblox.com/security/data/cve/CVE-2026-118309.md) | High | Chromium CVE-2026-118309: Incorrect reference resolution | 9.6 | 0.0025 |  |
| [CVE-2026-118333](https://patchblox.com/security/data/cve/CVE-2026-118333.md) | High | Chromium: CVE-2026-118333 Missing authorization in Video | 9.3 | 0.0025 |  |
| [CVE-2026-118335](https://patchblox.com/security/data/cve/CVE-2026-118335.md) | High | Chromium: CVE-2026-118335 Improper input validation in Metrics | 8.8 | 0.0024 |  |
| [CVE-2026-118354](https://patchblox.com/security/data/cve/CVE-2026-118354.md) | High | Chromium: CVE-2026-118354 Improper input validation in Skia | 9.6 | 0.0024 |  |
| [CVE-2026-118312](https://patchblox.com/security/data/cve/CVE-2026-118312.md) | High | Chromium: CVE-2026-118312 Memory corruption in Paint | 9.6 | 0.0023 |  |
| [CVE-2026-118337](https://patchblox.com/security/data/cve/CVE-2026-118337.md) | High | Chromium: CVE-2026-118337 Improper access control in Forms | 9.3 | 0.0023 |  |
| [CVE-2026-118322](https://patchblox.com/security/data/cve/CVE-2026-118322.md) | High | Chromium: CVE-2026-118322 Memory corruption in ANGLE | 8.8 | 0.0022 |  |
| [CVE-2026-118327](https://patchblox.com/security/data/cve/CVE-2026-118327.md) | High | Chromium: CVE-2026-118327 Memory corruption in Media | 8.8 | 0.0022 |  |
| [CVE-2026-118338](https://patchblox.com/security/data/cve/CVE-2026-118338.md) | High | Chromium: CVE-2026-118338 Use after free in Animation | 8.8 | 0.0022 |  |
| [CVE-2026-118346](https://patchblox.com/security/data/cve/CVE-2026-118346.md) | High | Chromium: CVE-2026-118346 Use after free in Compositing | 8.8 | 0.0022 |  |
| [CVE-2026-118353](https://patchblox.com/security/data/cve/CVE-2026-118353.md) | High | Chromium: CVE-2026-118353 Use after free in Paint | 8.8 | 0.0021 |  |
| [CVE-2026-118319](https://patchblox.com/security/data/cve/CVE-2026-118319.md) | High | Chromium: CVE-2026-118319 Memory corruption in Skia | 9.6 | 0.0021 |  |
| [CVE-2026-118314](https://patchblox.com/security/data/cve/CVE-2026-118314.md) | High | Chromium CVE-2026-118314: Incorrect reference resolution | 8.8 | 0.0017 |  |
| [CVE-2026-118318](https://patchblox.com/security/data/cve/CVE-2026-118318.md) | Routine | Chromium: CVE-2026-118318 Improper access control in V8 | 4.3 | 0.0028 |  |

---

Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
