Linux · 
openSUSE Leap · Security advisory · November 7, 2026
openSUSE Leap · Security advisory · November 7, 2026OPENSUSE-SU-2026:21921-1: chromium security update
OPENSUSE-SU-2026:21921-1, released November 7, 2026, fixes 288 CVEs in chromium (version 153.0.8010.52-bp160.1.1). One of them is being exploited (CVE-2026-87491); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
288
40 rated Critical
Exploited
1
CVE-2026-87491
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0351
89th percentile
Priority of the 288 CVEs
Patch now 1
Urgent 40
High 89
Routine 158
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 153.0.8010.52-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-87491 | Chromium CVE-2026-87491: Out of bounds write in V8 | 8.8 | 0.0351 | KEVExploited |
| Urgent | CVE-2026-87464 | Chromium CVE-2026-87464: Use after free in WebGL | 9.6 | 0.0058 | None reported |
| Urgent | CVE-2026-87512 | Chromium CVE-2026-87512: Use after free in ANGLE | 9.6 | 0.0055 | None reported |
| Urgent | CVE-2026-87646 | Chromium CVE-2026-87646: Use after free in Web Authentication | 9.6 | 0.0053 | None reported |
| Urgent | CVE-2026-87527 | Chromium CVE-2026-87527: Buffer overflow in WebGL | 9.6 | 0.0051 | None reported |
| Urgent | CVE-2026-87529 | Chromium CVE-2026-87529: Numeric truncation error in Media | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-87547 | Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-87528 | Chromium CVE-2026-87528: Type confusion in Rust | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-87613 | Chromium CVE-2026-87613: Incorrect reference resolution in Extensions | 9.0 | 0.0047 | None reported |
| Urgent | CVE-2026-87438 | Chromium CVE-2026-87438: Out of bounds write in WebGL | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87448 | Chromium CVE-2026-87448: Use after free in DevTools | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87455 | Chromium CVE-2026-87455: Use after free in Aura | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87470 | Chromium CVE-2026-87470: Improper quantity validation in Tint | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87474 | Chromium CVE-2026-87474: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87488 | Chromium CVE-2026-87488: Use after free in WebGL | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87494 | Chromium CVE-2026-87494: Use after free in Browser | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87520 | Chromium CVE-2026-87520: Use after free in Dawn | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87558 | Chromium CVE-2026-87558: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87581 | Chromium CVE-2026-87581: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87607 | Google Chrome: Use after free | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87634 | Chromium CVE-2026-87634: Use after free in WebPackaging | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87637 | Chromium CVE-2026-87637: Use after free in Extensions | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87638 | Chromium CVE-2026-87638: Out of bounds write in Media | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87643 | Chromium CVE-2026-87643: Integer overflow in GPU | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87650 | Chromium CVE-2026-87650: Out of bounds read in WebGL | 9.6 | 0.0046 | None reported |
Showing 1 to 25 of 288
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.