OPENSUSE-SU-2026:11071-1
Vulnerability from csaf_opensuse - Published: 2026-06-20 00:00 - Updated: 2026-09-17 17:10Summary
chromedriver-149.0.7827.155-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: chromedriver-149.0.7827.155-1.1 on GA media
Description of the patch: These are all security issues fixed in the chromedriver-149.0.7827.155-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11071
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2026-12437
Threats
Impact
critical
References
101 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "chromedriver-149.0.7827.155-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the chromedriver-149.0.7827.155-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11071",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11071-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12437 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12438 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12438/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12439 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12440 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12441 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12442 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12443 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12443/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12444 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12445 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12446 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12448 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12449 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12450 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12450/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12451 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12451/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12452 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12452/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12453 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12454 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12454/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12455 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12456 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12457 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12458 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12458/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12459 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12460 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12461 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12461/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12462 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12463 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12464 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12465 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12466 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12467 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12468 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12469 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12469/"
}
],
"title": "chromedriver-149.0.7827.155-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-17T17:10:29Z",
"generator": {
"date": "2026-06-20T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11071-1",
"initial_release_date": "2026-06-20T00:00:00Z",
"revision_history": [
{
"date": "2026-06-20T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:15:24Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:17:38Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:10:29Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:149.0.7827.155-1.1.aarch64",
"product": {
"name": "chromedriver-0:149.0.7827.155-1.1.aarch64",
"product_id": "chromedriver-0:149.0.7827.155-1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@149.0.7827.155-1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "chromium-0:149.0.7827.155-1.1.aarch64",
"product": {
"name": "chromium-0:149.0.7827.155-1.1.aarch64",
"product_id": "chromium-0:149.0.7827.155-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:149.0.7827.155:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@149.0.7827.155-1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:149.0.7827.155-1.1.ppc64le",
"product": {
"name": "chromedriver-0:149.0.7827.155-1.1.ppc64le",
"product_id": "chromedriver-0:149.0.7827.155-1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@149.0.7827.155-1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "chromium-0:149.0.7827.155-1.1.ppc64le",
"product": {
"name": "chromium-0:149.0.7827.155-1.1.ppc64le",
"product_id": "chromium-0:149.0.7827.155-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:149.0.7827.155:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@149.0.7827.155-1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:149.0.7827.155-1.1.s390x",
"product": {
"name": "chromedriver-0:149.0.7827.155-1.1.s390x",
"product_id": "chromedriver-0:149.0.7827.155-1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@149.0.7827.155-1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "chromium-0:149.0.7827.155-1.1.s390x",
"product": {
"name": "chromium-0:149.0.7827.155-1.1.s390x",
"product_id": "chromium-0:149.0.7827.155-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:149.0.7827.155:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@149.0.7827.155-1.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:149.0.7827.155-1.1.x86_64",
"product": {
"name": "chromedriver-0:149.0.7827.155-1.1.x86_64",
"product_id": "chromedriver-0:149.0.7827.155-1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@149.0.7827.155-1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-0:149.0.7827.155-1.1.x86_64",
"product": {
"name": "chromium-0:149.0.7827.155-1.1.x86_64",
"product_id": "chromium-0:149.0.7827.155-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:149.0.7827.155:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@149.0.7827.155-1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:149.0.7827.155-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64"
},
"product_reference": "chromedriver-0:149.0.7827.155-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:149.0.7827.155-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le"
},
"product_reference": "chromedriver-0:149.0.7827.155-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:149.0.7827.155-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x"
},
"product_reference": "chromedriver-0:149.0.7827.155-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:149.0.7827.155-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64"
},
"product_reference": "chromedriver-0:149.0.7827.155-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:149.0.7827.155-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64"
},
"product_reference": "chromium-0:149.0.7827.155-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:149.0.7827.155-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le"
},
"product_reference": "chromium-0:149.0.7827.155-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:149.0.7827.155-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x"
},
"product_reference": "chromium-0:149.0.7827.155-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:149.0.7827.155-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
},
"product_reference": "chromium-0:149.0.7827.155-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12437"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12437",
"url": "https://www.suse.com/security/cve/CVE-2026-12437"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12437",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12437"
},
{
"cve": "CVE-2026-12438",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12438"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12438",
"url": "https://www.suse.com/security/cve/CVE-2026-12438"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12438",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12438"
},
{
"cve": "CVE-2026-12439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12439"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12439",
"url": "https://www.suse.com/security/cve/CVE-2026-12439"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12439",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12439"
},
{
"cve": "CVE-2026-12440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12440"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12440",
"url": "https://www.suse.com/security/cve/CVE-2026-12440"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12440",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12440"
},
{
"cve": "CVE-2026-12441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12441"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12441",
"url": "https://www.suse.com/security/cve/CVE-2026-12441"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12441",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12441"
},
{
"cve": "CVE-2026-12442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12442"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12442",
"url": "https://www.suse.com/security/cve/CVE-2026-12442"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12442",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12442"
},
{
"cve": "CVE-2026-12443",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12443"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12443",
"url": "https://www.suse.com/security/cve/CVE-2026-12443"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12443",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12443"
},
{
"cve": "CVE-2026-12444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12444"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12444",
"url": "https://www.suse.com/security/cve/CVE-2026-12444"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12444",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12444"
},
{
"cve": "CVE-2026-12445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12445"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12445",
"url": "https://www.suse.com/security/cve/CVE-2026-12445"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12445",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12445"
},
{
"cve": "CVE-2026-12446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12446"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12446",
"url": "https://www.suse.com/security/cve/CVE-2026-12446"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12446",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12446"
},
{
"cve": "CVE-2026-12447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12447"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12447",
"url": "https://www.suse.com/security/cve/CVE-2026-12447"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12447",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12447"
},
{
"cve": "CVE-2026-12448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12448"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12448",
"url": "https://www.suse.com/security/cve/CVE-2026-12448"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12448",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12448"
},
{
"cve": "CVE-2026-12449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12449"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12449",
"url": "https://www.suse.com/security/cve/CVE-2026-12449"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12449",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12449"
},
{
"cve": "CVE-2026-12450",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12450"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12450",
"url": "https://www.suse.com/security/cve/CVE-2026-12450"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12450",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12450"
},
{
"cve": "CVE-2026-12451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12451"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12451",
"url": "https://www.suse.com/security/cve/CVE-2026-12451"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12451",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12451"
},
{
"cve": "CVE-2026-12452",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12452"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12452",
"url": "https://www.suse.com/security/cve/CVE-2026-12452"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12452",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12452"
},
{
"cve": "CVE-2026-12453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12453"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12453",
"url": "https://www.suse.com/security/cve/CVE-2026-12453"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12453",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12453"
},
{
"cve": "CVE-2026-12454",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12454"
}
],
"notes": [
{
"category": "general",
"text": "Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12454",
"url": "https://www.suse.com/security/cve/CVE-2026-12454"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12454",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12454"
},
{
"cve": "CVE-2026-12455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12455"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12455",
"url": "https://www.suse.com/security/cve/CVE-2026-12455"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12455",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12455"
},
{
"cve": "CVE-2026-12456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12456"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12456",
"url": "https://www.suse.com/security/cve/CVE-2026-12456"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12456",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12456"
},
{
"cve": "CVE-2026-12457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12457"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12457",
"url": "https://www.suse.com/security/cve/CVE-2026-12457"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12457",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12457"
},
{
"cve": "CVE-2026-12458",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12458"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12458",
"url": "https://www.suse.com/security/cve/CVE-2026-12458"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12458",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12458"
},
{
"cve": "CVE-2026-12459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12459"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12459",
"url": "https://www.suse.com/security/cve/CVE-2026-12459"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12459",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12459"
},
{
"cve": "CVE-2026-12460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12460"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12460",
"url": "https://www.suse.com/security/cve/CVE-2026-12460"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12460",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12460"
},
{
"cve": "CVE-2026-12461",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12461"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12461",
"url": "https://www.suse.com/security/cve/CVE-2026-12461"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12461",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12461"
},
{
"cve": "CVE-2026-12462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12462"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12462",
"url": "https://www.suse.com/security/cve/CVE-2026-12462"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12462",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12462"
},
{
"cve": "CVE-2026-12463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12463"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12463",
"url": "https://www.suse.com/security/cve/CVE-2026-12463"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12463",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12463"
},
{
"cve": "CVE-2026-12464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12464"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12464",
"url": "https://www.suse.com/security/cve/CVE-2026-12464"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12464",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12464"
},
{
"cve": "CVE-2026-12465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12465"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12465",
"url": "https://www.suse.com/security/cve/CVE-2026-12465"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12465",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12465"
},
{
"cve": "CVE-2026-12466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12466"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12466",
"url": "https://www.suse.com/security/cve/CVE-2026-12466"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12466",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12466"
},
{
"cve": "CVE-2026-12467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12467"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12467",
"url": "https://www.suse.com/security/cve/CVE-2026-12467"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12467",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12467"
},
{
"cve": "CVE-2026-12468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12468"
}
],
"notes": [
{
"category": "general",
"text": "Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12468",
"url": "https://www.suse.com/security/cve/CVE-2026-12468"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12468",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12468"
},
{
"cve": "CVE-2026-12469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12469"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12469",
"url": "https://www.suse.com/security/cve/CVE-2026-12469"
},
{
"category": "external",
"summary": "SUSE Bug 1268373 for CVE-2026-12469",
"url": "https://bugzilla.suse.com/1268373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-0:149.0.7827.155-1.1.x86_64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.aarch64",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.s390x",
"openSUSE Tumbleweed:chromium-0:149.0.7827.155-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-12469"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.