Linux · 
openSUSE Leap · Security advisory · November 7, 2026
openSUSE Leap · Security advisory · November 7, 2026OPENSUSE-SU-2026:21799-1: chromium security update
OPENSUSE-SU-2026:21799-1, released November 7, 2026, fixes 365 CVEs in chromium (version 152.0.7977.82-bp160.1.1). One of them is being exploited (CVE-2026-85046); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
365
54 rated Critical
Exploited
1
CVE-2026-85046
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0181
78th percentile
Priority of the 365 CVEs
Patch now 1
Urgent 54
High 101
Routine 209
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 152.0.7977.82-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-85046 | Chromium: CVE-2026-85046 Type confusion in V8 | 8.8 | 0.0181 | KEVExploited |
| Urgent | CVE-2026-78904 | Chromium: CVE-2026-78904 Type confusion in ANGLE | 9.6 | 0.0062 | None reported |
| Urgent | CVE-2026-78989 | Chromium: CVE-2026-78989 Out of bounds read in ANGLE | 9.6 | 0.0056 | None reported |
| Urgent | CVE-2026-78948 | Chromium: CVE-2026-78948 Buffer overflow in WebGL | 9.6 | 0.0051 | None reported |
| Urgent | CVE-2026-78935 | chromium: Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker t... | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-78985 | Chromium: CVE-2026-78985 Incorrect reference resolution in FileSystem | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-79282 | chromium: Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute ar... | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-79131 | Chromium: CVE-2026-79131 Out of bounds write in ANGLE | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-79149 | Chromium: CVE-2026-79149 Use after free in ANGLE | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-79188 | Chromium: CVE-2026-79188 Out of bounds write in ANGLE | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-79275 | Chromium: CVE-2026-79275 Use after free in ANGLE | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-79019 | Chromium: CVE-2026-79019 Out of bounds write in ANGLE | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-84324 | Chromium: CVE-2026-84324 Use after free in Proxy | 9.0 | 0.0047 | None reported |
| Urgent | CVE-2026-78900 | Chromium: CVE-2026-78900 Improper input validation in Media | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-78909 | Chromium: CVE-2026-78909 Use after free in Views | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-78937 | chromium: Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging s... | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-78939 | Chromium: CVE-2026-78939 Use after free in Chromecast | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-78945 | Chromium: CVE-2026-78945 Use after free in Views | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-78951 | Chromium: CVE-2026-78951 Use after free in ServiceWorker | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-78964 | Chromium: CVE-2026-78964 Use after free in Sync | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-79012 | Chromium: CVE-2026-79012 Use after free in Safebrowsing | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-79052 | Chromium: CVE-2026-79052 Use after free in Aura | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-79056 | Chromium: CVE-2026-79056 Use after free in ServiceWorker | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-79078 | Chromium: CVE-2026-79078 Use after free in FedCM | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-79091 | Chromium: CVE-2026-79091 Use after free in Bluetooth | 9.6 | 0.0046 | None reported |
Showing 1 to 25 of 365
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.