openSUSE-SU-2026:22202-1

    Dashboard / Vulnerabilities / openSUSE-SU-2026:22202-1

    openSUSE-SU-2026:22202-1

    Published: 29 Oct 2026Last Modified: 31 Oct 2026

    Summary: Security update for chromium

    Details: This update for chromium fixes the following issues: Changes in chromium: - Chromium 156.0.8078.73 (boo#1288218): * CVE-2026-118306: Memory corruption in FileSystem * CVE-2026-118331: Improper input validation in FileAPI * CVE-2026-118348: Improper input validation in Skia * CVE-2026-118344: Use after free in Layout * CVE-2026-118357: Use after free in FileSystem * CVE-2026-118318: Improper access control in V8 * CVE-2026-118350: Use after free in Turbolev * CVE-2026-118339: Use after free in Animation * CVE-2026-118305: Memory corruption in Turbolev * CVE-2026-118317: Memory corruption in HTML * CVE-2026-118320: Memory corruption in V8 * CVE-2026-118322: Memory corruption in ANGLE * CVE-2026-118329: Improper input validation in ANGLE * CVE-2026-118354: Improper input validation in Skia * CVE-2026-118340: Memory corruption in Skia * CVE-2026-118321: Improper input validation in Core * CVE-2026-118337: Improper access control in Forms * CVE-2026-118352: Memory corruption in Cache * CVE-2026-118355: Improper input validation in Command * CVE-2026-118307: Use after free in Paint * CVE-2026-118351: Memory corruption in Skia * CVE-2026-118328: Improper input validation in WebRTC * CVE-2026-118333: Missing authorization in Video * CVE-2026-118336: Improper input validation in Headless * CVE-2026-118358: Memory corruption in WebAudio * CVE-2026-118353: Use after free in Paint * CVE-2026-118349: Memory corruption in Payments * CVE-2026-118327: Memory corruption in Media * CVE-2026-118359: Memory corruption in V8 * CVE-2026-118343: Improper input validation in ReadingList * CVE-2026-118311: Memory corruption in Media * CVE-2026-118334: Use after free in ImageCapture * CVE-2026-118332: Improper input validation in Compositing * CVE-2026-118313: Use after free in Video * CVE-2026-118345: Use after free in PDFium * CVE-2026-118304: Improper input validation in SVG * CVE-2026-118316: Improper input validation in V8 * CVE-2026-118346: Use after free in Compositing * CVE-2026-118342: Out of bounds write in Editing * CVE-2026-118310: Improper input validation in Views * CVE-2026-118335: Improper input validation in Metrics * CVE-2026-118308: Use after free in SVG * CVE-2026-118314: Improper input validation in UI * CVE-2026-118347: Use after free in FileSystem * CVE-2026-118341: Use after free in Modularization * CVE-2026-118330: Use after free in Browser * CVE-2026-118315: Improper input validation in SVG * CVE-2026-118356: Use after free in WTF * CVE-2026-118309: Improper input validation in UI * CVE-2026-118319: Memory corruption in Skia * CVE-2026-118312: Memory corruption in Paint * CVE-2026-118338: Use after free in Animation

    References: , https://bugzilla.suse.com/1288218, https://www.suse.com/security/cve/CVE-2026-118304, https://www.suse.com/security/cve/CVE-2026-118305, https://www.suse.com/security/cve/CVE-2026-118306, https://www.suse.com/security/cve/CVE-2026-118307, https://www.suse.com/security/cve/CVE-2026-118308, https://www.suse.com/security/cve/CVE-2026-118309, https://www.suse.com/security/cve/CVE-2026-118310, https://www.suse.com/security/cve/CVE-2026-118311, https://www.suse.com/security/cve/CVE-2026-118312, https://www.suse.com/security/cve/CVE-2026-118313, https://www.suse.com/security/cve/CVE-2026-118314, https://www.suse.com/security/cve/CVE-2026-118315, https://www.suse.com/security/cve/CVE-2026-118316, https://www.suse.com/security/cve/CVE-2026-118317, https://www.suse.com/security/cve/CVE-2026-118318, https://www.suse.com/security/cve/CVE-2026-118319, https://www.suse.com/security/cve/CVE-2026-118320, https://www.suse.com/security/cve/CVE-2026-118321, https://www.suse.com/security/cve/CVE-2026-118322, https://www.suse.com/security/cve/CVE-2026-118327, https://www.suse.com/security/cve/CVE-2026-118328, https://www.suse.com/security/cve/CVE-2026-118329, https://www.suse.com/security/cve/CVE-2026-118330, https://www.suse.com/security/cve/CVE-2026-118331, https://www.suse.com/security/cve/CVE-2026-118332, https://www.suse.com/security/cve/CVE-2026-118333, https://www.suse.com/security/cve/CVE-2026-118334, https://www.suse.com/security/cve/CVE-2026-118335, https://www.suse.com/security/cve/CVE-2026-118336, https://www.suse.com/security/cve/CVE-2026-118337, https://www.suse.com/security/cve/CVE-2026-118338, https://www.suse.com/security/cve/CVE-2026-118339, https://www.suse.com/security/cve/CVE-2026-118340, https://www.suse.com/security/cve/CVE-2026-118341, https://www.suse.com/security/cve/CVE-2026-118342, https://www.suse.com/security/cve/CVE-2026-118343, https://www.suse.com/security/cve/CVE-2026-118344, https://www.suse.com/security/cve/CVE-2026-118345, https://www.suse.com/security/cve/CVE-2026-118346, https://www.suse.com/security/cve/CVE-2026-118347, https://www.suse.com/security/cve/CVE-2026-118348, https://www.suse.com/security/cve/CVE-2026-118349, https://www.suse.com/security/cve/CVE-2026-118350, https://www.suse.com/security/cve/CVE-2026-118351, https://www.suse.com/security/cve/CVE-2026-118352, https://www.suse.com/security/cve/CVE-2026-118353, https://www.suse.com/security/cve/CVE-2026-118354, https://www.suse.com/security/cve/CVE-2026-118355, https://www.suse.com/security/cve/CVE-2026-118356, https://www.suse.com/security/cve/CVE-2026-118357, https://www.suse.com/security/cve/CVE-2026-118358, https://www.suse.com/security/cve/CVE-2026-118359

    Affected packages

    Package

    Name: chromium

    Purl: pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -156.0.8078.73-bp160.1.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2026:22202-1 | CVE-DB