Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2026:20020-1: chromium security update
OPENSUSE-SU-2026:20020-1, released August 31, 2026, fixes 19 CVEs in chromium (version 143.0.7499.192-bp160.1.1). One of them is being exploited (CVE-2025-14174); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
19
None rated Critical
Exploited
1
CVE-2025-14174
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.5533
99th percentile
Priority of the 19 CVEs
Patch now 1
Urgent 0
High 10
Routine 8
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 143.0.7499.192-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2025-14174 | Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE | 8.8 | 0.5533 | KEVExploited |
| High | CVE-2026-0628 | Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tag | 8.8 | 0.2095 | None reported |
| High | CVE-2025-14766 | Chromium: CVE-2025-14766 Use after free in WebGPU | 8.8 | 0.0325 | None reported |
| High | CVE-2025-14765 | Chromium: CVE-2025-14765 Out of bounds read and write in V8 | 8.8 | 0.0300 | None reported |
| High | CVE-2025-13633 | Chromium: CVE-2025-13633 Use after free in Digital Credentials | 8.8 | 0.0050 | None reported |
| High | CVE-2025-13630 | Chromium: CVE-2025-13630 Type Confusion in V8 | 8.8 | 0.0046 | None reported |
| High | CVE-2025-13631 | Chromium: CVE-2025-13631 Inappropriate implementation in Google Updater | 8.8 | 0.0042 | None reported |
| High | CVE-2025-13720 | Chromium: CVE-2025-13720 Bad cast in Loader | 8.8 | 0.0033 | None reported |
| High | CVE-2025-13638 | Chromium: CVE-2025-13638 Use after free in Media Stream | 8.8 | 0.0032 | None reported |
| High | CVE-2025-13639 | Chromium: CVE-2025-13639 Inappropriate implementation in WebRTC | 8.1 | 0.0031 | None reported |
| High | CVE-2025-13721 | Chromium: CVE-2025-13721 Race in v8 | 7.5 | 0.0026 | None reported |
| Routine | CVE-2025-14373 | Chromium: CVE-2025-14373 Inappropriate implementation in Toolbar | 4.3 | 0.0028 | None reported |
| Routine | CVE-2025-13637 | Chromium: CVE-2025-13637 Inappropriate implementation in Downloads | 4.3 | 0.0025 | None reported |
| Routine | CVE-2025-14372 | Chromium: CVE-2025-14372 Use after free in Password Manager | 6.1 | 0.0025 | None reported |
| Routine | CVE-2025-13632 | Chromium: CVE-2025-13632 Inappropriate implementation in DevTools | 5.4 | 0.0024 | None reported |
| Routine | CVE-2025-13636 | Chromium: CVE-2025-13636 Inappropriate implementation in Split View | 4.3 | 0.0024 | None reported |
| Routine | CVE-2025-13635 | Chromium: CVE-2025-13635 Inappropriate implementation in Downloads | 4.4 | 0.0018 | None reported |
| Routine | CVE-2025-13640 | Chromium: CVE-2025-13640 Inappropriate implementation in Passwords | 3.5 | 0.0018 | None reported |
| Routine | CVE-2025-13634 | Chromium: CVE-2025-13634 Inappropriate implementation in Downloads | 4.4 | 0.0017 | None reported |
Showing 1 to 19 of 19
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.