Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2025:20076-1: chromium security update
OPENSUSE-SU-2025:20076-1, released August 31, 2026, fixes 28 CVEs in chromium (version 142.0.7444.162-bp160.1.1). One of them is being exploited (CVE-2025-13223); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
28
None rated Critical
Exploited
1
CVE-2025-13223
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0808
94th percentile
Priority of the 28 CVEs
Patch now 1
Urgent 0
High 12
Routine 15
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 142.0.7444.162-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2025-13223 | Chromium: CVE-2025-13223 Type Confusion in V8 | 8.8 | 0.0490 | KEVExploited |
| High | CVE-2025-12428 | Chromium: CVE-2025-12428 Type Confusion in V8 | 8.8 | 0.0808 | None reported |
| High | CVE-2025-54874 | libopenjpip-viewer: OpenJPEG is an open-source JPEG 2000 codec | 9.8 | 0.0066 | None reported |
| High | CVE-2025-13224 | Chromium: CVE-2025-13224 Type Confusion in V8 | 8.8 | 0.0048 | None reported |
| High | CVE-2025-12430 | Chromium: CVE-2025-12430 Object lifecycle issue in Media | 7.5 | 0.0038 | None reported |
| High | CVE-2025-12429 | Chromium: CVE-2025-12429 Inappropriate implementation in V8 | 8.8 | 0.0037 | None reported |
| High | CVE-2025-12725 | Chromium: CVE-2025-12725 Out of bounds write in WebGPU | 8.8 | 0.0027 | None reported |
| High | CVE-2025-12727 | Chromium: CVE-2025-12727 Inappropriate implementation in V8 | 8.8 | 0.0027 | None reported |
| High | CVE-2025-12438 | Chromium: CVE-2025-12438 Use after free in Ozone | 8.8 | 0.0026 | None reported |
| High | CVE-2025-13042 | Chromium: CVE-2025-13042 Inappropriate implementation in V8 | 8.8 | 0.0026 | None reported |
| High | CVE-2025-12432 | Chromium: CVE-2025-12432 Race in V8 | 8.8 | 0.0025 | None reported |
| High | CVE-2025-12437 | Chromium: CVE-2025-12437 Use after free in PageInfo | 7.5 | 0.0024 | None reported |
| High | CVE-2025-12726 | Chromium: CVE-2025-12726 Inappropriate implementation in Views. | 7.5 | 0.0024 | None reported |
| Routine | CVE-2025-12433 | Chromium: CVE-2025-12433 Inappropriate implementation in V8 | 4.3 | 0.0030 | None reported |
| Routine | CVE-2025-12435 | Chromium: CVE-2025-12435 Incorrect security UI in Omnibox | 5.4 | 0.0026 | None reported |
| Routine | CVE-2025-12443 | Chromium: CVE-2025-12433 Inappropriate implementation in V8 | 4.3 | 0.0023 | None reported |
| Routine | CVE-2025-12431 | Chromium: CVE-2025-12431 Inappropriate implementation in Extensions | 6.5 | 0.0023 | None reported |
| Routine | CVE-2025-12440 | Chromium: CVE-2025-12440 Inappropriate implementation in Autofill | 5.3 | 0.0021 | None reported |
| Routine | CVE-2025-12728 | Chromium: CVE-2025-12728 Inappropriate implementation in Omnibox | 4.2 | 0.0021 | None reported |
| Routine | CVE-2025-12441 | Chromium: CVE-2025-12441 Out of bounds read in V8 | 4.3 | 0.0021 | None reported |
| Routine | CVE-2025-12434 | Chromium: CVE-2025-12434 Race in Storage | 4.2 | 0.0019 | None reported |
| Routine | CVE-2025-12729 | Chromium: CVE-2025-12729 Inappropriate implementation in Omnibox | 4.2 | 0.0019 | None reported |
| Routine | CVE-2025-12444 | Chromium: CVE-2025-12444 Incorrect security UI in Fullscreen UI | 4.2 | 0.0019 | None reported |
| Routine | CVE-2025-12447 | Chromium: CVE-2025-12447 Incorrect security UI in Omnibox | 4.2 | 0.0019 | None reported |
| Routine | CVE-2025-12436 | Chromium: CVE-2025-12436 Policy bypass in Extensions | 5.9 | 0.0018 | None reported |
Showing 1 to 25 of 28
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.