Linux · 
openSUSE Leap · Security advisory · August 31, 2026
openSUSE Leap · Security advisory · August 31, 2026OPENSUSE-SU-2026:20660-1: chromium security update
OPENSUSE-SU-2026:20660-1, released August 31, 2026, fixes 124 CVEs in chromium (version 147.0.7727.137-bp160.1.1). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
124
12 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0062
50th percentile
Priority of the 124 CVEs
Patch now 0
Urgent 12
High 75
Routine 37
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium | opensuse-leap 16.0 | 147.0.7727.137-bp160.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-6296 | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | None reported |
| Urgent | CVE-2026-6298 | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | None reported |
| Urgent | CVE-2026-7333 | Google Chrome: Use after free | 9.6 | 0.0036 | None reported |
| Urgent | CVE-2026-5868 | Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-7359 | Google Chrome: Use after free | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-7353 | Google Chrome: Heap buffer overflow | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-5879 | Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-6919 | Chromium: CVE-2026-6919 Use after free in DevTools | 9.6 | 0.0029 | None reported |
| Urgent | CVE-2026-5874 | Chromium: CVE-2026-5874 Use after free in PrivateAI | 9.6 | 0.0026 | None reported |
| Urgent | CVE-2026-6364 | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 | None reported |
| Urgent | CVE-2026-5902 | Chromium: CVE-2026-5902 Race in Media | 9.8 | 0.0022 | None reported |
| Urgent | CVE-2026-6920 | Chromium: CVE-2026-6920 Out of bounds read in GPU | 9.6 | 0.0021 | None reported |
| High | CVE-2026-5858 | Chromium: CVE-2026-5858 Heap buffer overflow in WebML | 8.8 | 0.0062 | None reported |
| High | CVE-2026-5865 | Chromium: CVE-2026-5865 Type Confusion in V8 | 8.8 | 0.0052 | None reported |
| High | CVE-2026-5860 | Chromium: CVE-2026-5860 Use after free in WebRTC | 8.8 | 0.0050 | None reported |
| High | CVE-2026-7347 | Google Chrome: Use after free | 8.1 | 0.0046 | None reported |
| High | CVE-2026-7337 | Google Chrome: Type Confusion | 8.8 | 0.0042 | None reported |
| High | CVE-2026-7336 | Google Chrome: Use after free | 8.8 | 0.0042 | None reported |
| High | CVE-2026-5873 | Chromium: CVE-2026-5873 Out of bounds read and write in V8 | 8.8 | 0.0039 | None reported |
| High | CVE-2026-7341 | Google Chrome: Use after free | 8.8 | 0.0039 | None reported |
| High | CVE-2026-7342 | Google Chrome: Use after free | 8.8 | 0.0039 | None reported |
| High | CVE-2026-7348 | Google Chrome: Use after free | 8.8 | 0.0039 | None reported |
| High | CVE-2026-7355 | Google Chrome: Use after free | 8.8 | 0.0039 | None reported |
| High | CVE-2026-7358 | Google Chrome: Use after free | 8.8 | 0.0039 | None reported |
| High | CVE-2026-7335 | Google Chrome: Use after free | 8.8 | 0.0038 | None reported |
Showing 1 to 25 of 124
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.