Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2026:20849-1: chromium security update
OPENSUSE-SU-2026:20849-1, released August 31, 2026, fixes 373 CVEs in chromium (version 148.0.7778.215-bp160.1.1). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
373
13 rated Critical
Exploited
0
None reported
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0995
95th percentile
Priority of the 373 CVEs
Patch now 0
Urgent 13
High 236
Routine 124
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 148.0.7778.215-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-9872 | chromium: Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potential... | 9.6 | 0.0037 | None reported |
| Urgent | CVE-2026-9891 | Chromium: CVE-2026-9891 Use after free in Extensions | 9.0 | 0.0025 | None reported |
| Urgent | CVE-2026-9875 | Chromium: CVE-2026-9875 Out of bounds read in WebGL | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-9876 | Chromium: CVE-2026-9876 Use after free in WebGL | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-9886 | Chromium: CVE-2026-9886 Use after free in Base | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-9918 | Chromium: CVE-2026-9918 Inappropriate implementation in Tint | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-9967 | Chromium: CVE-2026-9967 Out of bounds write in GPU | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-8511 | Chromium: CVE-2026-8511 Use after free in UI | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-9874 | Chromium: CVE-2026-9874 Use after free in Dawn | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-7908 | Chromium: CVE-2026-7908 Use after free in Fullscreen | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-7910 | Chromium: CVE-2026-7910 Use after free in Views | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-8580 | Chromium: CVE-2026-8580 Use after free in Mojo | 9.6 | 0.0021 | None reported |
| Urgent | CVE-2026-9881 | Chromium: CVE-2026-9881 Use after free in Bluetooth | 9.0 | 0.0020 | None reported |
| High | CVE-2026-8510 | Chromium: CVE-2026-8510 Integer overflow in Skia | 9.6 | 0.0995 | None reported |
| High | CVE-2026-9111 | Chromium: CVE-2026-9111 Use after free in WebRTC | 8.8 | 0.0080 | None reported |
| High | CVE-2026-9119 | Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC | 8.8 | 0.0054 | None reported |
| High | CVE-2026-9120 | Chromium: CVE-2026-9120 Use after free in WebRTC | 8.8 | 0.0050 | None reported |
| High | CVE-2026-8517 | Chromium: CVE-2026-8517 Object lifecycle issue in WebShare | 8.8 | 0.0050 | None reported |
| High | CVE-2026-9893 | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 | None reported |
| High | CVE-2026-9939 | Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecs | 8.8 | 0.0041 | None reported |
| High | CVE-2026-8509 | Chromium: CVE-2026-8509 Heap buffer overflow in WebML | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9112 | Chromium: CVE-2026-9112 Use after free in GPU | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9118 | Chromium: CVE-2026-9118 Use after free in XR | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9126 | Chromium: CVE-2026-9124 Insufficient validation of untrusted input in Input | 8.8 | 0.0040 | None reported |
| High | CVE-2026-7951 | Chromium: CVE-2026-7951 Out of bounds write in WebRTC | 8.8 | 0.0038 | None reported |
Showing 1 to 25 of 373
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.