Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2026:21135-1: chromium security update
OPENSUSE-SU-2026:21135-1, released August 31, 2026, fixes 564 CVEs in chromium (version 149.0.7827.155-bp160.1.1). One of them is being exploited (CVE-2026-11645); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
564
57 rated Critical
Exploited
1
CVE-2026-11645
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0586
93rd percentile
Priority of the 564 CVEs
Patch now 1
Urgent 57
High 296
Routine 210
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 149.0.7827.155-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-11645 | Chromium: CVE-2026-11645 Out of bounds memory access in V8 | 8.8 | 0.0244 | KEVExploited |
| Urgent | CVE-2026-10886 | Chromium: CVE-2026-10886 Use after free in FileSystem | 9.6 | 0.0586 | None reported |
| Urgent | CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | None reported |
| Urgent | CVE-2026-10974 | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11065 | Chromium: CVE-2026-11065 Use after free in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11088 | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11651 | Chromium: CVE-2026-11651 Use after free in Network | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10892 | Chromium: CVE-2026-10892 Out of bounds write in GPU | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10931 | Chromium: CVE-2026-10931 Use after free in FileSystem | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10972 | Chromium: CVE-2026-10972 Use after free in Ozone | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10983 | Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-11009 | Chromium: CVE-2026-11009 Use after free in USB | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-11021 | Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPU | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10971 | Chromium: CVE-2026-10971 Insufficient validation of untrusted input in Printing | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10990 | Chromium: CVE-2026-10990 Use after free in Glic | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11002 | Chromium: CVE-2026-11002 Use after free in Autofill | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11043 | Chromium: CVE-2026-11043 Out of bounds write in ANGLE | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11047 | Chromium: CVE-2026-11047 Insufficient validation of untrusted input in Base | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-10966 | Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11113 | Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-11037 | Chromium: CVE-2026-11037 Out of bounds write in Codecs | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-11095 | Chromium: CVE-2026-11095 Insufficient validation of untrusted input in Codecs | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-11061 | Chromium: CVE-2026-11061 Out of bounds read in ANGLE | 9.6 | 0.0027 | None reported |
| Urgent | CVE-2026-11066 | Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | None reported |
| Urgent | CVE-2026-11120 | Chromium: CVE-2026-11120 Insufficient validation of untrusted input in Enterprise Reporting | 9.6 | 0.0027 | None reported |
Showing 1 to 25 of 564
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.