Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2026:20460-1: chromium security update
OPENSUSE-SU-2026:20460-1, released August 31, 2026, fixes 86 CVEs in chromium (version 146.0.7680.177-bp160.1.1). 3 of them are being exploited (CVE-2026-5281); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV
CVEs closed
86
13 rated Critical
Exploited
3
CVE-2026-5281
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.1374
96th percentile
Priority of the 86 CVEs
Patch now 3
Urgent 12
High 54
Routine 17
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 146.0.7680.177-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-5281 | Chromium: CVE-2026-5281 Use after free in Dawn | 8.8 | 0.1374 | KEVExploited |
| Patch now | CVE-2026-3910 | Chromium: CVE-2026-3910 Inappropriate implementation in V8 | 8.8 | 0.0268 | KEVExploited |
| Patch now | CVE-2026-3909 | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | KEVExploited |
| Urgent | CVE-2026-5275 | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | None reported |
| Urgent | CVE-2026-3916 | Chromium: CVE-2026-3916 Out of bounds read in Web Speech | 9.6 | 0.0040 | None reported |
| Urgent | CVE-2026-5289 | Chromium: CVE-2026-5289 Use after free in Navigation | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-5277 | Chromium: CVE-2026-5277 Integer overflow in ANGLE | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-5288 | Google Chrome: Use after free | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-5290 | Chromium: CVE-2026-5290 Use after free in Compositing | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-3931 | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-4448 | Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-4460 | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-4464 | Chromium: CVE-2026-4464 Integer overflow in ANGLE | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-5283 | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | None reported |
| Urgent | CVE-2026-4452 | Chromium: CVE-2026-4452 Integer overflow in ANGLE | 9.6 | 0.0026 | None reported |
| High | CVE-2026-5272 | Chromium: CVE-2026-5272 Heap buffer overflow in GPU | 8.8 | 0.0056 | None reported |
| High | CVE-2026-4673 | Chromium: CVE-2026-4673 Heap buffer overflow in WebAudio | 8.8 | 0.0051 | None reported |
| High | CVE-2026-5287 | Chromium: CVE-2026-5287 Use after free in PDF | 8.8 | 0.0051 | None reported |
| High | CVE-2026-4674 | Chromium: CVE-2026-4674 Out of bounds read in CSS | 8.8 | 0.0046 | None reported |
| High | CVE-2026-3913 | Chromium: CVE-2026-3913 Heap buffer overflow in WebML | 8.8 | 0.0046 | None reported |
| High | CVE-2026-4677 | Chromium: CVE-2026-4677 Out of bounds read in WebAudio | 8.8 | 0.0046 | None reported |
| High | CVE-2026-3915 | Chromium: CVE-2026-3915 Heap buffer overflow in WebML | 8.8 | 0.0044 | None reported |
| High | CVE-2026-5279 | Chromium: CVE-2026-5279 Object corruption in V8 | 8.8 | 0.0044 | None reported |
| High | CVE-2026-4443 | Chromium: CVE-2026-4443 Heap buffer overflow in WebAudio | 8.8 | 0.0043 | None reported |
| High | CVE-2026-5274 | Chromium: CVE-2026-5274 Integer overflow in Codecs | 8.8 | 0.0043 | None reported |
Showing 1 to 25 of 86
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.