Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2026:20332-1: chromium security update
OPENSUSE-SU-2026:20332-1, released August 31, 2026, fixes 28 CVEs in chromium (version 145.0.7632.159-bp160.1.1). One of them is being exploited (CVE-2026-2441); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
28
3 rated Critical
Exploited
1
CVE-2026-2441
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.5446
99th percentile
Priority of the 28 CVEs
Patch now 1
Urgent 3
High 17
Routine 7
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 145.0.7632.159-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-2441 | Chromium: CVE-2026-2441 Use after free in CSS | 8.8 | 0.5446 | KEVExploited |
| Urgent | CVE-2026-3545 | Chromium: CVE-2026-3545 Insufficient data validation in Navigation | 9.6 | 0.0041 | None reported |
| Urgent | CVE-2026-3062 | Chromium: CVE-2026-3062 Out of bounds read and write in Tint | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-3061 | Chromium: CVE-2026-3061 Out of bounds read in Media | 9.1 | 0.0034 | None reported |
| High | CVE-2026-2315 | Google Chrome: Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker… | 8.8 | 0.0909 | None reported |
| High | CVE-2026-2314 | Chromium: CVE-2026-2314 Heap buffer overflow in Codecs | 8.8 | 0.0462 | None reported |
| High | CVE-2026-2313 | Chromium: CVE-2026-2313 Use after free in CSS | 8.8 | 0.0451 | None reported |
| High | CVE-2026-3538 | Chromium: CVE-2026-3538 Integer overflow in Skia | 9.6 | 0.0078 | None reported |
| High | CVE-2026-3536 | Chromium: CVE-2026-3536 Integer overflow in ANGLE | 9.6 | 0.0070 | None reported |
| High | CVE-2026-2649 | Chromium: CVE-2026-2649 Integer overflow in V8 | 8.8 | 0.0062 | None reported |
| High | CVE-2026-2650 | Chromium: CVE-2026-2650 Heap buffer overflow in Media | 8.8 | 0.0051 | None reported |
| High | CVE-2026-2648 | Chromium: CVE-2026-2648 Heap buffer overflow in PDFium | 8.8 | 0.0046 | None reported |
| High | CVE-2026-3542 | Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly | 8.8 | 0.0040 | None reported |
| High | CVE-2026-3537 | Chromium: CVE-2026-3537 Object lifecycle issue in PowerVR | 8.8 | 0.0038 | None reported |
| High | CVE-2026-3544 | Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs | 8.8 | 0.0035 | None reported |
| High | CVE-2026-3540 | Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio | 8.8 | 0.0034 | None reported |
| High | CVE-2026-3543 | Chromium: CVE-2026-3543 Inappropriate implementation in V8 | 8.8 | 0.0033 | None reported |
| High | CVE-2026-3541 | Chromium: CVE-2026-3541 Inappropriate implementation in CSS | 8.8 | 0.0029 | None reported |
| High | CVE-2026-2321 | Google Chrome: Use after free | 8.8 | 0.0029 | None reported |
| High | CVE-2026-2319 | Chromium: CVE-2026-2319 Race in DevTools | 7.5 | 0.0022 | None reported |
| High | CVE-2026-3539 | Chromium: CVE-2026-3539 Object lifecycle issue in DevTools | 8.8 | n/a | None reported |
| Routine | CVE-2026-2316 | Chromium: CVE-2026-2316 Insufficient policy enforcement in Frames | 6.5 | 0.0027 | None reported |
| Routine | CVE-2026-2318 | CVE-2026-2318 | 6.5 | 0.0027 | None reported |
| Routine | CVE-2026-2320 | Chromium: CVE-2026-2320 Inappropriate implementation in File input | 6.5 | 0.0025 | None reported |
| Routine | CVE-2026-2322 | Chromium: CVE-2026-2322 Heap buffer overflow in Codecs | 5.4 | 0.0025 | None reported |
Showing 1 to 25 of 28
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.