Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2026:20460-1: chromium security update
OPENSUSE-SU-2026:20460-1, released August 31, 2026, fixes 86 CVEs in chromium (version 146.0.7680.177-bp160.1.1). 3 of them are being exploited (CVE-2026-5281); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV
CVEs closed
86
4 rated Critical
Exploited
3
CVE-2026-5281
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.1374
96th percentile
Priority of the 86 CVEs
Patch now 3
Urgent 4
High 62
Routine 17
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 146.0.7680.177-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-5281 | Chromium: CVE-2026-5281 Use after free in Dawn | 8.8 | 0.1374 | KEVExploited |
| Patch now | CVE-2026-3910 | Chromium: CVE-2026-3910 Inappropriate implementation in V8 | 8.8 | 0.0268 | KEVExploited |
| Patch now | CVE-2026-3909 | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | KEVExploited |
| Urgent | CVE-2026-3916 | Chromium: CVE-2026-3916 Out of bounds read in Web Speech | 9.6 | 0.0040 | None reported |
| Urgent | CVE-2026-5289 | Chromium: CVE-2026-5289 Use after free in Navigation | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-5288 | Google Chrome: Use after free | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-5290 | Chromium: CVE-2026-5290 Use after free in Compositing | 9.6 | 0.0032 | None reported |
| High | CVE-2026-5272 | Chromium: CVE-2026-5272 Heap buffer overflow in GPU | 8.8 | 0.0056 | None reported |
| High | CVE-2026-4673 | Chromium: CVE-2026-4673 Heap buffer overflow in WebAudio | 8.8 | 0.0051 | None reported |
| High | CVE-2026-5287 | Chromium: CVE-2026-5287 Use after free in PDF | 8.8 | 0.0051 | None reported |
| High | CVE-2026-4674 | Chromium: CVE-2026-4674 Out of bounds read in CSS | 8.8 | 0.0046 | None reported |
| High | CVE-2026-3913 | Chromium: CVE-2026-3913 Heap buffer overflow in WebML | 8.8 | 0.0046 | None reported |
| High | CVE-2026-4677 | Chromium: CVE-2026-4677 Out of bounds read in WebAudio | 8.8 | 0.0046 | None reported |
| High | CVE-2026-5275 | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | None reported |
| High | CVE-2026-3915 | Chromium: CVE-2026-3915 Heap buffer overflow in WebML | 8.8 | 0.0044 | None reported |
| High | CVE-2026-5279 | Chromium: CVE-2026-5279 Object corruption in V8 | 8.8 | 0.0044 | None reported |
| High | CVE-2026-4443 | Chromium: CVE-2026-4443 Heap buffer overflow in WebAudio | 8.8 | 0.0043 | None reported |
| High | CVE-2026-5274 | Chromium: CVE-2026-5274 Integer overflow in Codecs | 8.8 | 0.0043 | None reported |
| High | CVE-2026-4680 | Chromium: CVE-2026-4680 Use after free in FedCM | 8.8 | 0.0043 | None reported |
| High | CVE-2026-5278 | Google Chrome: Use after free | 8.8 | 0.0041 | None reported |
| High | CVE-2026-4678 | Chromium: CVE-2026-4678 Use after free in WebGPU | 8.8 | 0.0040 | None reported |
| High | CVE-2026-3914 | Chromium: CVE-2026-3914 Integer overflow in WebML | 8.8 | 0.0040 | None reported |
| High | CVE-2026-3917 | Chromium: CVE-2026-3917 Use after free in Agents | 8.8 | 0.0040 | None reported |
| High | CVE-2026-5285 | Chromium: CVE-2026-5285 Use after free in WebGL | 8.8 | 0.0040 | None reported |
| High | CVE-2026-4675 | Chromium: CVE-2026-4675 Heap buffer overflow in WebGL | 8.8 | 0.0039 | None reported |
Showing 1 to 25 of 86
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.