OPENSUSE-SU-2026:21858-1
Vulnerability from csaf_opensuse - Published: 2026-09-16 08:15 - Updated: 2026-09-17 17:44Summary
Security update for chromium
Severity
Critical
Notes
Title of the patch: Security update for chromium
Description of the patch: This update for chromium fixes the following issues:
Changes in chromium:
Chromium 153.0.8010.36 (boo#1279840):
* CVE-2026-87464: Use after free in WebGL
* CVE-2026-87488: Use after free in WebGL
* CVE-2026-87438: Out of bounds write in WebGL
* CVE-2026-87527: Buffer overflow in WebGL
* CVE-2026-87628: Use after free in Cast
* CVE-2026-87512: Use after free in ANGLE
* CVE-2026-87585: Double free in PDFium
* CVE-2026-87444: Memory corruption in Codecs
* CVE-2026-87447: Incorrect authorization in Network
* CVE-2026-87440: Out of bounds read in Media
* CVE-2026-87633: Use after free in Views
* CVE-2026-87525: Out of bounds read in Chromoting
* CVE-2026-87578: Use after free in Receiver
* CVE-2026-87517: Race condition in Mobile
* CVE-2026-87524: Use after free in Core
* CVE-2026-87569: Missing authorization in Views
* CVE-2026-87554: Race condition in Chromoting
* CVE-2026-87467: Race condition in Updater
* CVE-2026-87492: Incorrect authorization in DevTools
* CVE-2026-87520: Use after free in Dawn
* CVE-2026-87514: Use after free in Views
* CVE-2026-87650: Out of bounds read in WebGL
* CVE-2026-87596: Out of bounds read in ANGLE
* CVE-2026-87654: Buffer overflow in ANGLE
* CVE-2026-87604: Out of bounds read in ANGLE
* CVE-2026-87621: Out of bounds write in ANGLE
* CVE-2026-87647: Uninitialized resource in GPU
* CVE-2026-87646: Use after free in Web Authentication
* CVE-2026-87500: Improper validation of array index in ANGLE
* CVE-2026-87572: Injection in DevTools
* CVE-2026-87460: Use after free in Platform
* CVE-2026-87542: Use after free in Input
* CVE-2026-87639: Use after free in WebPackaging
* CVE-2026-87552: Missing authorization in TrustedWebActivities
* CVE-2026-87651: Incorrect authorization in Paint
* CVE-2026-87587: Use after free in V8
* CVE-2026-87564: Type confusion in V8
* CVE-2026-87498: Missing authorization in WebUI
* CVE-2026-87499: Incorrect authorization in Network
* CVE-2026-87607: Use after free in Device
* CVE-2026-87558: Use after free in Payments
* CVE-2026-87581: Use after free in Payments
* CVE-2026-87480: Use after free in Printing
* CVE-2026-87612: Type confusion in V8
* CVE-2026-87536: Use after free in V8
* CVE-2026-87474: Use after free in Payments
* CVE-2026-87504: Use after free in Core
* CVE-2026-87640: Out of bounds read in WebView
* CVE-2026-87491: Out of bounds write in V8
* CVE-2026-87478: Observable discrepancy in Autofill
* CVE-2026-87446: Incomplete cleanup in Extensions
* CVE-2026-87657: Use after free in V8
* CVE-2026-87434: Missing authorization in CORS
* CVE-2026-87487: Missing authorization in FileSystem
* CVE-2026-87453: Confused deputy in BackgroundFetch
* CVE-2026-87588: Use after free in Chromecast
* CVE-2026-87636: Type confusion in XML
* CVE-2026-87611: Missing authorization in FileSystem
* CVE-2026-87606: Missing authorization in SiteIsolation
* CVE-2026-87456: Uninitialized resource in Media
* CVE-2026-87553: Improper input validation in SiteIsolation
* CVE-2026-87658: Information leak in Extensions
* CVE-2026-87465: Incorrect authorization in Downloads
* CVE-2026-87515: Incorrect authorization in FileAPI
* CVE-2026-87547: Incorrect reference resolution in FileSystem
* CVE-2026-87442: Confused deputy in Prerender
* CVE-2026-87506: Privilege elevation in WebUI
* CVE-2026-87433: Race condition in FileAPI
* CVE-2026-87557: Missing authorization in LocalNetworkAccess
* CVE-2026-87457: Race condition in Updater
* CVE-2026-87503: Inappropriate implementation in Downloads
* CVE-2026-87481: Incorrect authorization in WebView
* CVE-2026-87537: Missing authorization in Extensions
* CVE-2026-87471: Incorrect authorization in ServiceWorker
* CVE-2026-87485: Incorrect authorization in CORS
* CVE-2026-87652: Incorrect authorization in PushAPI
* CVE-2026-87582: Confused deputy in DataTransfer
* CVE-2026-87466: Incorrect authorization in Workers
* CVE-2026-87603: Missing authorization in FileSystem
* CVE-2026-87615: Race condition in Payments
* CVE-2026-87642: Uninitialized resource in WebGL
* CVE-2026-87577: Incorrect authorization in Isolated
* CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials
* CVE-2026-87613: Incorrect reference resolution in Extensions
* CVE-2026-87645: Improper state validation in Safebrowsing
* CVE-2026-87443: Missing authorization in Actor
* CVE-2026-87630: Integer overflow in WebRTC
* CVE-2026-87590: Improper input validation in Passwords
* CVE-2026-87580: Incorrect authorization in WebAppInstalls
* CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades
* CVE-2026-87497: Uninitialized resource in Codecs
* CVE-2026-87579: Buffer overflow in WebRTC
* CVE-2026-87576: Uninitialized resource in GPU
* CVE-2026-87476: Incorrect authorization in Loader
* CVE-2026-87475: Missing authorization in Omnibox
* CVE-2026-87436: Incomplete cleanup in Browser
* CVE-2026-87479: Insufficient policy enforcement in Extensions
* CVE-2026-87513: Missing authorization in ControlledFrame
* CVE-2026-87432: Incorrect authorization in Navigation
* CVE-2026-87560: Missing authorization in Browser
* CVE-2026-87521: Information leak in WebMCP
* CVE-2026-87539: Observable discrepancy in Network
* CVE-2026-87648: Use after free in ANGLE
* CVE-2026-87534: Missing authorization in WebView
* CVE-2026-87562: Incorrect reference resolution in Accessibility
* CVE-2026-87556: Missing authorization in Browser
* CVE-2026-87508: Incorrect authorization in Loader
* CVE-2026-87643: Integer overflow in GPU
* CVE-2026-87573: Improper input validation in Network
* CVE-2026-87548: Improper state validation in Installer
* CVE-2026-87501: UI misrepresentation in Passwords
* CVE-2026-87452: Incorrect authorization in GPU
* CVE-2026-87516: Observable discrepancy in Navigation
* CVE-2026-87599: Improper input validation in Interstitials
* CVE-2026-87507: UI misrepresentation in Downloads
* CVE-2026-87559: UI misrepresentation in UI
* CVE-2026-87472: Improper input validation in FedCM
* CVE-2026-87486: Clickjacking in TrustedWebActivities
* CVE-2026-87655: Clickjacking in Downloads
* CVE-2026-87462: UI misrepresentation in FedCM
* CVE-2026-87649: UI misrepresentation in Downloads
* CVE-2026-87445: UI misrepresentation in Session
* CVE-2026-87567: UI misrepresentation in UrlFormatting
* CVE-2026-87496: UI misrepresentation in Browser
* CVE-2026-87441: Missing authorization in Downloads
* CVE-2026-87549: Incomplete cleanup in Downloads
* CVE-2026-87458: UI misrepresentation in Geometry
* CVE-2026-87574: Information leak in ServiceWorker
* CVE-2026-87495: Information leak in Scroll
* CVE-2026-87541: Information leak in Navigation
* CVE-2026-87451: Information leak in Downloads
* CVE-2026-87570: Incorrect authorization in SiteIsolation
* CVE-2026-87555: Uninitialized resource in GPU
* CVE-2026-87600: Improper input validation in Safebrowsing
* CVE-2026-87532: Improper state validation in Safebrowsing
* CVE-2026-87439: Information leak in ServiceWorker
* CVE-2026-87450: Incorrect authorization in Permissions
* CVE-2026-87505: Incorrect authorization in FileSystem
* CVE-2026-87622: Missing authorization in FedCM
* CVE-2026-87540: Incorrect authorization in Isolated
* CVE-2026-87594: Incorrect authorization in DataTransfer
* CVE-2026-87518: Observable discrepancy in Safebrowsing
* CVE-2026-87589: Incorrect authorization in SiteIsolation
* CVE-2026-87484: UI misrepresentation in Geometry
* CVE-2026-87530: Uncontrolled search path element in CredentialProvider
* CVE-2026-87550: Improper encoding or escaping of output in CSS
* CVE-2026-87494: Use after free in Browser
* CVE-2026-87483: Incorrect authorization in Browser
* CVE-2026-87454: Information leak in Enterprise
* CVE-2026-87616: Improper initialization in Views
* CVE-2026-87535: Information loss or omission in Safebrowsing
* CVE-2026-87644: Incorrect authorization in Views
* CVE-2026-87533: Use after free in DevTools
* CVE-2026-87635: UI misrepresentation in Payments
* CVE-2026-87641: Race condition in Browser
* CVE-2026-87431: Missing authorization in Extensions
* CVE-2026-87493: Missing authorization in FileSystem
* CVE-2026-87625: Use after free in V8
* CVE-2026-87468: Incorrect authorization in Isolated
* CVE-2026-87563: Origin validation error in Paint
* CVE-2026-87510: Improper input validation in FileAPI
* CVE-2026-87435: Information leak in ControlledFrame
* CVE-2026-87531: Information leak in CORS
* CVE-2026-87637: Use after free in Extensions
* CVE-2026-87529: Numeric truncation error in Media
* CVE-2026-87470: Improper quantity validation in Tint
* CVE-2026-87586: Out of bounds read in ANGLE
* CVE-2026-87584: Incorrect authorization in WebUI
* CVE-2026-87632: Cross-site scripting in SanitizerAPI
* CVE-2026-87528: Type confusion in Rust
* CVE-2026-87623: Observable discrepancy in DOM
* CVE-2026-87566: Observable discrepancy in Layout
* CVE-2026-87638: Out of bounds write in Media
* CVE-2026-87455: Use after free in Aura
* CVE-2026-87591: Incorrect authorization in Extensions
* CVE-2026-87526: Use after free in Passwords
* CVE-2026-87609: Use after free in Sharing
* CVE-2026-87610: Incorrect authorization in Omnibox
* CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials
* CVE-2026-87629: Incorrect authorization in Sources
* CVE-2026-87653: UI misrepresentation in FullScreen
* CVE-2026-87634: Use after free in WebPackaging
* CVE-2026-87429: Missing authorization in ServiceWorker
* CVE-2026-87618: Incorrect reference resolution in Storage
* CVE-2026-87614: Incorrect authorization in ServiceWorker
* CVE-2026-87619: Observable discrepancy in Prefetch
* CVE-2026-87561: Incorrect authorization in Web Authentication
* CVE-2026-87598: Incorrect authorization in ServiceWorker
* CVE-2026-87519: Incorrect authorization in Safebrowsing
* CVE-2026-87543: Missing authorization in Core
* CVE-2026-87522: Missing authorization in WebView
* CVE-2026-87568: Improper input validation in Chromium
* CVE-2026-87656: Improper state validation in Safebrowsing
* CVE-2026-87511: Missing authorization in DevTools
* CVE-2026-87627: Interpretation conflict in Safebrowsing
* CVE-2026-87595: Server-side request forgery in Mobile
* CVE-2026-87592: Out of bounds read in Tint
* CVE-2026-87620: Observable discrepancy in SVG
* CVE-2026-87502: Confused deputy in Fullscreen
* CVE-2026-87448: Use after free in DevTools
* CVE-2026-87459: Observable discrepancy in Select
* CVE-2026-87463: Incorrect authorization in Certificate
* CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing
* CVE-2026-87538: Clickjacking in Input
* CVE-2026-87545: Information leak in Mobile
* CVE-2026-87617: Use after free in DevTools
* CVE-2026-87523: Race condition in DataTransfer
* CVE-2026-87565: Information leak in Passwords
* CVE-2026-87597: UI misrepresentation in CustomTabs
* CVE-2026-87624: UI misrepresentation in Passwords
* CVE-2026-87605: Missing authorization in Contacts
* CVE-2026-87490: Information leak in Transactions Platform
* CVE-2026-87583: UI misrepresentation in Passwords
* CVE-2026-87509: Incorrect authorization in Updater
* CVE-2026-87473: Incorrect authorization in FileHandling
* CVE-2026-87461: Information leak in Core
* CVE-2026-87631: Missing authorization in DOM
* CVE-2026-87469: Improper input validation in Extensions
* CVE-2026-87489: Memory corruption in V8
* CVE-2026-87575: Incorrect authorization in Loader
* CVE-2026-87571: Improper certificate validation in Loader
* CVE-2026-87477: Information leak in Core
* CVE-2026-87551: Improper certificate validation in CORS
* CVE-2026-87608: Improper certificate validation in FedCM
* CVE-2026-87437: Information leak in Frames
* CVE-2026-87602: Out of bounds read in ANGLE
* CVE-2026-87601: Race condition in V8
* CVE-2026-87544: Incorrect authorization in Extensions
* CVE-2026-87430: Buffer overflow in WebRTC
* CVE-2026-87593: Information leak in Editing
Patchnames: openSUSE-Leap-16.0-packagehub-590
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.5 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.2 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
6.1 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
4.2 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
Affected products
Recommended
6 products, the same list as for
CVE-2026-87429
Threats
Impact
critical
References
693 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\nChromium 153.0.8010.36 (boo#1279840):\n\n * CVE-2026-87464: Use after free in WebGL\n * CVE-2026-87488: Use after free in WebGL\n * CVE-2026-87438: Out of bounds write in WebGL\n * CVE-2026-87527: Buffer overflow in WebGL\n * CVE-2026-87628: Use after free in Cast\n * CVE-2026-87512: Use after free in ANGLE\n * CVE-2026-87585: Double free in PDFium\n * CVE-2026-87444: Memory corruption in Codecs\n * CVE-2026-87447: Incorrect authorization in Network\n * CVE-2026-87440: Out of bounds read in Media\n * CVE-2026-87633: Use after free in Views\n * CVE-2026-87525: Out of bounds read in Chromoting\n * CVE-2026-87578: Use after free in Receiver\n * CVE-2026-87517: Race condition in Mobile\n * CVE-2026-87524: Use after free in Core\n * CVE-2026-87569: Missing authorization in Views\n * CVE-2026-87554: Race condition in Chromoting\n * CVE-2026-87467: Race condition in Updater\n * CVE-2026-87492: Incorrect authorization in DevTools\n * CVE-2026-87520: Use after free in Dawn\n * CVE-2026-87514: Use after free in Views\n * CVE-2026-87650: Out of bounds read in WebGL\n * CVE-2026-87596: Out of bounds read in ANGLE\n * CVE-2026-87654: Buffer overflow in ANGLE\n * CVE-2026-87604: Out of bounds read in ANGLE\n * CVE-2026-87621: Out of bounds write in ANGLE\n * CVE-2026-87647: Uninitialized resource in GPU\n * CVE-2026-87646: Use after free in Web Authentication\n * CVE-2026-87500: Improper validation of array index in ANGLE\n * CVE-2026-87572: Injection in DevTools\n * CVE-2026-87460: Use after free in Platform\n * CVE-2026-87542: Use after free in Input\n * CVE-2026-87639: Use after free in WebPackaging\n * CVE-2026-87552: Missing authorization in TrustedWebActivities\n * CVE-2026-87651: Incorrect authorization in Paint\n * CVE-2026-87587: Use after free in V8\n * CVE-2026-87564: Type confusion in V8\n * CVE-2026-87498: Missing authorization in WebUI\n * CVE-2026-87499: Incorrect authorization in Network\n * CVE-2026-87607: Use after free in Device\n * CVE-2026-87558: Use after free in Payments\n * CVE-2026-87581: Use after free in Payments\n * CVE-2026-87480: Use after free in Printing\n * CVE-2026-87612: Type confusion in V8\n * CVE-2026-87536: Use after free in V8\n * CVE-2026-87474: Use after free in Payments\n * CVE-2026-87504: Use after free in Core\n * CVE-2026-87640: Out of bounds read in WebView\n * CVE-2026-87491: Out of bounds write in V8\n * CVE-2026-87478: Observable discrepancy in Autofill\n * CVE-2026-87446: Incomplete cleanup in Extensions\n * CVE-2026-87657: Use after free in V8\n * CVE-2026-87434: Missing authorization in CORS\n * CVE-2026-87487: Missing authorization in FileSystem\n * CVE-2026-87453: Confused deputy in BackgroundFetch\n * CVE-2026-87588: Use after free in Chromecast\n * CVE-2026-87636: Type confusion in XML\n * CVE-2026-87611: Missing authorization in FileSystem\n * CVE-2026-87606: Missing authorization in SiteIsolation\n * CVE-2026-87456: Uninitialized resource in Media\n * CVE-2026-87553: Improper input validation in SiteIsolation\n * CVE-2026-87658: Information leak in Extensions\n * CVE-2026-87465: Incorrect authorization in Downloads\n * CVE-2026-87515: Incorrect authorization in FileAPI\n * CVE-2026-87547: Incorrect reference resolution in FileSystem\n * CVE-2026-87442: Confused deputy in Prerender\n * CVE-2026-87506: Privilege elevation in WebUI\n * CVE-2026-87433: Race condition in FileAPI\n * CVE-2026-87557: Missing authorization in LocalNetworkAccess\n * CVE-2026-87457: Race condition in Updater\n * CVE-2026-87503: Inappropriate implementation in Downloads\n * CVE-2026-87481: Incorrect authorization in WebView\n * CVE-2026-87537: Missing authorization in Extensions\n * CVE-2026-87471: Incorrect authorization in ServiceWorker\n * CVE-2026-87485: Incorrect authorization in CORS\n * CVE-2026-87652: Incorrect authorization in PushAPI\n * CVE-2026-87582: Confused deputy in DataTransfer\n * CVE-2026-87466: Incorrect authorization in Workers\n * CVE-2026-87603: Missing authorization in FileSystem\n * CVE-2026-87615: Race condition in Payments\n * CVE-2026-87642: Uninitialized resource in WebGL\n * CVE-2026-87577: Incorrect authorization in Isolated\n * CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials\n * CVE-2026-87613: Incorrect reference resolution in Extensions\n * CVE-2026-87645: Improper state validation in Safebrowsing\n * CVE-2026-87443: Missing authorization in Actor\n * CVE-2026-87630: Integer overflow in WebRTC\n * CVE-2026-87590: Improper input validation in Passwords\n * CVE-2026-87580: Incorrect authorization in WebAppInstalls\n * CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades\n * CVE-2026-87497: Uninitialized resource in Codecs\n * CVE-2026-87579: Buffer overflow in WebRTC\n * CVE-2026-87576: Uninitialized resource in GPU\n * CVE-2026-87476: Incorrect authorization in Loader\n * CVE-2026-87475: Missing authorization in Omnibox\n * CVE-2026-87436: Incomplete cleanup in Browser\n * CVE-2026-87479: Insufficient policy enforcement in Extensions\n * CVE-2026-87513: Missing authorization in ControlledFrame\n * CVE-2026-87432: Incorrect authorization in Navigation\n * CVE-2026-87560: Missing authorization in Browser\n * CVE-2026-87521: Information leak in WebMCP\n * CVE-2026-87539: Observable discrepancy in Network\n * CVE-2026-87648: Use after free in ANGLE\n * CVE-2026-87534: Missing authorization in WebView\n * CVE-2026-87562: Incorrect reference resolution in Accessibility\n * CVE-2026-87556: Missing authorization in Browser\n * CVE-2026-87508: Incorrect authorization in Loader\n * CVE-2026-87643: Integer overflow in GPU\n * CVE-2026-87573: Improper input validation in Network\n * CVE-2026-87548: Improper state validation in Installer\n * CVE-2026-87501: UI misrepresentation in Passwords\n * CVE-2026-87452: Incorrect authorization in GPU\n * CVE-2026-87516: Observable discrepancy in Navigation\n * CVE-2026-87599: Improper input validation in Interstitials\n * CVE-2026-87507: UI misrepresentation in Downloads\n * CVE-2026-87559: UI misrepresentation in UI\n * CVE-2026-87472: Improper input validation in FedCM\n * CVE-2026-87486: Clickjacking in TrustedWebActivities\n * CVE-2026-87655: Clickjacking in Downloads\n * CVE-2026-87462: UI misrepresentation in FedCM\n * CVE-2026-87649: UI misrepresentation in Downloads\n * CVE-2026-87445: UI misrepresentation in Session\n * CVE-2026-87567: UI misrepresentation in UrlFormatting\n * CVE-2026-87496: UI misrepresentation in Browser\n * CVE-2026-87441: Missing authorization in Downloads\n * CVE-2026-87549: Incomplete cleanup in Downloads\n * CVE-2026-87458: UI misrepresentation in Geometry\n * CVE-2026-87574: Information leak in ServiceWorker\n * CVE-2026-87495: Information leak in Scroll\n * CVE-2026-87541: Information leak in Navigation\n * CVE-2026-87451: Information leak in Downloads\n * CVE-2026-87570: Incorrect authorization in SiteIsolation\n * CVE-2026-87555: Uninitialized resource in GPU\n * CVE-2026-87600: Improper input validation in Safebrowsing\n * CVE-2026-87532: Improper state validation in Safebrowsing\n * CVE-2026-87439: Information leak in ServiceWorker\n * CVE-2026-87450: Incorrect authorization in Permissions\n * CVE-2026-87505: Incorrect authorization in FileSystem\n * CVE-2026-87622: Missing authorization in FedCM\n * CVE-2026-87540: Incorrect authorization in Isolated\n * CVE-2026-87594: Incorrect authorization in DataTransfer\n * CVE-2026-87518: Observable discrepancy in Safebrowsing\n * CVE-2026-87589: Incorrect authorization in SiteIsolation\n * CVE-2026-87484: UI misrepresentation in Geometry\n * CVE-2026-87530: Uncontrolled search path element in CredentialProvider\n * CVE-2026-87550: Improper encoding or escaping of output in CSS\n * CVE-2026-87494: Use after free in Browser\n * CVE-2026-87483: Incorrect authorization in Browser\n * CVE-2026-87454: Information leak in Enterprise\n * CVE-2026-87616: Improper initialization in Views\n * CVE-2026-87535: Information loss or omission in Safebrowsing\n * CVE-2026-87644: Incorrect authorization in Views\n * CVE-2026-87533: Use after free in DevTools\n * CVE-2026-87635: UI misrepresentation in Payments\n * CVE-2026-87641: Race condition in Browser\n * CVE-2026-87431: Missing authorization in Extensions\n * CVE-2026-87493: Missing authorization in FileSystem\n * CVE-2026-87625: Use after free in V8\n * CVE-2026-87468: Incorrect authorization in Isolated\n * CVE-2026-87563: Origin validation error in Paint\n * CVE-2026-87510: Improper input validation in FileAPI\n * CVE-2026-87435: Information leak in ControlledFrame\n * CVE-2026-87531: Information leak in CORS\n * CVE-2026-87637: Use after free in Extensions\n * CVE-2026-87529: Numeric truncation error in Media\n * CVE-2026-87470: Improper quantity validation in Tint\n * CVE-2026-87586: Out of bounds read in ANGLE\n * CVE-2026-87584: Incorrect authorization in WebUI\n * CVE-2026-87632: Cross-site scripting in SanitizerAPI\n * CVE-2026-87528: Type confusion in Rust\n * CVE-2026-87623: Observable discrepancy in DOM\n * CVE-2026-87566: Observable discrepancy in Layout\n * CVE-2026-87638: Out of bounds write in Media\n * CVE-2026-87455: Use after free in Aura\n * CVE-2026-87591: Incorrect authorization in Extensions\n * CVE-2026-87526: Use after free in Passwords\n * CVE-2026-87609: Use after free in Sharing\n * CVE-2026-87610: Incorrect authorization in Omnibox\n * CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials\n * CVE-2026-87629: Incorrect authorization in Sources\n * CVE-2026-87653: UI misrepresentation in FullScreen\n * CVE-2026-87634: Use after free in WebPackaging\n * CVE-2026-87429: Missing authorization in ServiceWorker\n * CVE-2026-87618: Incorrect reference resolution in Storage\n * CVE-2026-87614: Incorrect authorization in ServiceWorker\n * CVE-2026-87619: Observable discrepancy in Prefetch\n * CVE-2026-87561: Incorrect authorization in Web Authentication\n * CVE-2026-87598: Incorrect authorization in ServiceWorker\n * CVE-2026-87519: Incorrect authorization in Safebrowsing\n * CVE-2026-87543: Missing authorization in Core\n * CVE-2026-87522: Missing authorization in WebView\n * CVE-2026-87568: Improper input validation in Chromium\n * CVE-2026-87656: Improper state validation in Safebrowsing\n * CVE-2026-87511: Missing authorization in DevTools\n * CVE-2026-87627: Interpretation conflict in Safebrowsing\n * CVE-2026-87595: Server-side request forgery in Mobile\n * CVE-2026-87592: Out of bounds read in Tint\n * CVE-2026-87620: Observable discrepancy in SVG\n * CVE-2026-87502: Confused deputy in Fullscreen\n * CVE-2026-87448: Use after free in DevTools\n * CVE-2026-87459: Observable discrepancy in Select\n * CVE-2026-87463: Incorrect authorization in Certificate\n * CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing\n * CVE-2026-87538: Clickjacking in Input\n * CVE-2026-87545: Information leak in Mobile\n * CVE-2026-87617: Use after free in DevTools\n * CVE-2026-87523: Race condition in DataTransfer\n * CVE-2026-87565: Information leak in Passwords\n * CVE-2026-87597: UI misrepresentation in CustomTabs\n * CVE-2026-87624: UI misrepresentation in Passwords\n * CVE-2026-87605: Missing authorization in Contacts\n * CVE-2026-87490: Information leak in Transactions Platform\n * CVE-2026-87583: UI misrepresentation in Passwords\n * CVE-2026-87509: Incorrect authorization in Updater\n * CVE-2026-87473: Incorrect authorization in FileHandling\n * CVE-2026-87461: Information leak in Core\n * CVE-2026-87631: Missing authorization in DOM\n * CVE-2026-87469: Improper input validation in Extensions\n * CVE-2026-87489: Memory corruption in V8\n * CVE-2026-87575: Incorrect authorization in Loader\n * CVE-2026-87571: Improper certificate validation in Loader\n * CVE-2026-87477: Information leak in Core\n * CVE-2026-87551: Improper certificate validation in CORS\n * CVE-2026-87608: Improper certificate validation in FedCM\n * CVE-2026-87437: Information leak in Frames\n * CVE-2026-87602: Out of bounds read in ANGLE\n * CVE-2026-87601: Race condition in V8\n * CVE-2026-87544: Incorrect authorization in Extensions\n * CVE-2026-87430: Buffer overflow in WebRTC\n * CVE-2026-87593: Information leak in Editing\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-packagehub-590",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21858-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1279840",
"url": "https://bugzilla.suse.com/1279840"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87429 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87430 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87431 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87432 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87433 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87433/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87434 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87435 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87436 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87437 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87438 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87438/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87439 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87440 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87441 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87442 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87443 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87443/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87444 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87445 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87446 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87448 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87449 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87450 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87450/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87451 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87451/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87452 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87452/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87453 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87454 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87454/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87455 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87456 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87457 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87458 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87458/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87459 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87460 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87461 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87461/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87462 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87463 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87464 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87465 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87466 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87467 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87468 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87469 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87470 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87470/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87471 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87472 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87473 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87474 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87474/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87475 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87476 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87477 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87478 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87479 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87480 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87481 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87482 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87483 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87483/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87484 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87484/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87485 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87485/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87486 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87486/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87487 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87487/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87488 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87488/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87489 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87490 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87490/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87491 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87491/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87492 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87492/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87493 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87494 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87495 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87496 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87497 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87498 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87499 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87500 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87501 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87502 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87505 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87505/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87506 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87507 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87507/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87508 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87509 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87510 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87511 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87512 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87513 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87514 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87515 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87516 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87517 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87518 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87519 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87520 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87520/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87521 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87522 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87522/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87523 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87524 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87524/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87525 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87526 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87527 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87528 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87529 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87530 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87531 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87532 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87533 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87534 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87535 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87536 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87537 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87538 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87539 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87540 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87541 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87542 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87542/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87543 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87544 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87545 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87546 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87547 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87548 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87549 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87550 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87551 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87552 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87553 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87553/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87554 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87555 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87556 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87557 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87558 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87559 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87560 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87561 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87562 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87563 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87564 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87565 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87565/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87566 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87567 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87568 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87569 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87570 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87571 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87572 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87573 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87574 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87575 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87576 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87577 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87578 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87579 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87580 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87580/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87581 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87582 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87583 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87584 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87585 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87585/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87586 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87586/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87587 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87588 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87589 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87590 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87591 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87591/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87592 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87593 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87594 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87595 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87596 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87597 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87598 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87599 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87600 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87601 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87602 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87603 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87604 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87605 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87606 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87607 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87608 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87609 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87610 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87611 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87612 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87612/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87613 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87614 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87615 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87616 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87617 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87618 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87619 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87620 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87621 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87622 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87623 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87624 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87625 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87626 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87626/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87627 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87627/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87628 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87628/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87629 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87630 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87631 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87632 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87633 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87633/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87634 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87635 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87636 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87637 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87638 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87639 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87640 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87641 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87642 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87643 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87644 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87645 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87646 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87647 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87647/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87648 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87649 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87650 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87651 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87652 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87653 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87654 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87655 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87656 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87657 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87658 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87658/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2026-09-17T17:44:45Z",
"generator": {
"date": "2026-09-16T08:15:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21858-1",
"initial_release_date": "2026-09-16T08:15:10Z",
"revision_history": [
{
"date": "2026-09-16T08:15:10Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-17T17:44:45Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"product": {
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"product_id": "chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@153.0.8010.36-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"product": {
"name": "chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"product_id": "chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:153.0.8010.36:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@153.0.8010.36-bp160.1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"product": {
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"product_id": "chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@153.0.8010.36-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"product": {
"name": "chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"product_id": "chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:153.0.8010.36:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@153.0.8010.36-bp160.1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"product": {
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"product_id": "chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/chromedriver@153.0.8010.36-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-0:153.0.8010.36-bp160.1.1.x86_64",
"product": {
"name": "chromium-0:153.0.8010.36-bp160.1.1.x86_64",
"product_id": "chromium-0:153.0.8010.36-bp160.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:chromium:chromium:153.0.8010.36:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/chromium@153.0.8010.36-bp160.1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64"
},
"product_reference": "chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le"
},
"product_reference": "chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-0:153.0.8010.36-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64"
},
"product_reference": "chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:153.0.8010.36-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64"
},
"product_reference": "chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:153.0.8010.36-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le"
},
"product_reference": "chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-0:153.0.8010.36-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
},
"product_reference": "chromium-0:153.0.8010.36-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-87429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87429"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87429",
"url": "https://www.suse.com/security/cve/CVE-2026-87429"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87429",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87429"
},
{
"cve": "CVE-2026-87430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87430"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87430",
"url": "https://www.suse.com/security/cve/CVE-2026-87430"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87430",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87430"
},
{
"cve": "CVE-2026-87431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87431"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87431",
"url": "https://www.suse.com/security/cve/CVE-2026-87431"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87431",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87431"
},
{
"cve": "CVE-2026-87432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87432"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87432",
"url": "https://www.suse.com/security/cve/CVE-2026-87432"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87432",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87432"
},
{
"cve": "CVE-2026-87433",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87433"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87433",
"url": "https://www.suse.com/security/cve/CVE-2026-87433"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87433",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87433"
},
{
"cve": "CVE-2026-87434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87434"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87434",
"url": "https://www.suse.com/security/cve/CVE-2026-87434"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87434",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87434"
},
{
"cve": "CVE-2026-87435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87435"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87435",
"url": "https://www.suse.com/security/cve/CVE-2026-87435"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87435",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87435"
},
{
"cve": "CVE-2026-87436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87436"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87436",
"url": "https://www.suse.com/security/cve/CVE-2026-87436"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87436",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87436"
},
{
"cve": "CVE-2026-87437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87437"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87437",
"url": "https://www.suse.com/security/cve/CVE-2026-87437"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87437",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87437"
},
{
"cve": "CVE-2026-87438",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87438"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87438",
"url": "https://www.suse.com/security/cve/CVE-2026-87438"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87438",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87438"
},
{
"cve": "CVE-2026-87439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87439"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87439",
"url": "https://www.suse.com/security/cve/CVE-2026-87439"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87439",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87439"
},
{
"cve": "CVE-2026-87440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87440"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87440",
"url": "https://www.suse.com/security/cve/CVE-2026-87440"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87440",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87440"
},
{
"cve": "CVE-2026-87441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87441"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87441",
"url": "https://www.suse.com/security/cve/CVE-2026-87441"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87441",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87441"
},
{
"cve": "CVE-2026-87442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87442"
}
],
"notes": [
{
"category": "general",
"text": "Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87442",
"url": "https://www.suse.com/security/cve/CVE-2026-87442"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87442",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87442"
},
{
"cve": "CVE-2026-87443",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87443"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87443",
"url": "https://www.suse.com/security/cve/CVE-2026-87443"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87443",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87443"
},
{
"cve": "CVE-2026-87444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87444"
}
],
"notes": [
{
"category": "general",
"text": "Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87444",
"url": "https://www.suse.com/security/cve/CVE-2026-87444"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87444",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87444"
},
{
"cve": "CVE-2026-87445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87445"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87445",
"url": "https://www.suse.com/security/cve/CVE-2026-87445"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87445",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87445"
},
{
"cve": "CVE-2026-87446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87446"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87446",
"url": "https://www.suse.com/security/cve/CVE-2026-87446"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87446",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87446"
},
{
"cve": "CVE-2026-87447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87447"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87447",
"url": "https://www.suse.com/security/cve/CVE-2026-87447"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87447",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87447"
},
{
"cve": "CVE-2026-87448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87448"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87448",
"url": "https://www.suse.com/security/cve/CVE-2026-87448"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87448",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87448"
},
{
"cve": "CVE-2026-87449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87449"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87449",
"url": "https://www.suse.com/security/cve/CVE-2026-87449"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87449",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87449"
},
{
"cve": "CVE-2026-87450",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87450"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87450",
"url": "https://www.suse.com/security/cve/CVE-2026-87450"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87450",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87450"
},
{
"cve": "CVE-2026-87451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87451"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87451",
"url": "https://www.suse.com/security/cve/CVE-2026-87451"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87451",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87451"
},
{
"cve": "CVE-2026-87452",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87452"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87452",
"url": "https://www.suse.com/security/cve/CVE-2026-87452"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87452",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87452"
},
{
"cve": "CVE-2026-87453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87453"
}
],
"notes": [
{
"category": "general",
"text": "Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87453",
"url": "https://www.suse.com/security/cve/CVE-2026-87453"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87453",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87453"
},
{
"cve": "CVE-2026-87454",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87454"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87454",
"url": "https://www.suse.com/security/cve/CVE-2026-87454"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87454",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87454"
},
{
"cve": "CVE-2026-87455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87455"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87455",
"url": "https://www.suse.com/security/cve/CVE-2026-87455"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87455",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87455"
},
{
"cve": "CVE-2026-87456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87456"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87456",
"url": "https://www.suse.com/security/cve/CVE-2026-87456"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87456",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87456"
},
{
"cve": "CVE-2026-87457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87457"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87457",
"url": "https://www.suse.com/security/cve/CVE-2026-87457"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87457",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87457"
},
{
"cve": "CVE-2026-87458",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87458"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87458",
"url": "https://www.suse.com/security/cve/CVE-2026-87458"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87458",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87458"
},
{
"cve": "CVE-2026-87459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87459"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87459",
"url": "https://www.suse.com/security/cve/CVE-2026-87459"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87459",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87459"
},
{
"cve": "CVE-2026-87460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87460"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87460",
"url": "https://www.suse.com/security/cve/CVE-2026-87460"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87460",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87460"
},
{
"cve": "CVE-2026-87461",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87461"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87461",
"url": "https://www.suse.com/security/cve/CVE-2026-87461"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87461",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87461"
},
{
"cve": "CVE-2026-87462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87462"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87462",
"url": "https://www.suse.com/security/cve/CVE-2026-87462"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87462",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87462"
},
{
"cve": "CVE-2026-87463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87463"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87463",
"url": "https://www.suse.com/security/cve/CVE-2026-87463"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87463",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87463"
},
{
"cve": "CVE-2026-87464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87464"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87464",
"url": "https://www.suse.com/security/cve/CVE-2026-87464"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87464",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87464"
},
{
"cve": "CVE-2026-87465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87465"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87465",
"url": "https://www.suse.com/security/cve/CVE-2026-87465"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87465",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87465"
},
{
"cve": "CVE-2026-87466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87466"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87466",
"url": "https://www.suse.com/security/cve/CVE-2026-87466"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87466",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87466"
},
{
"cve": "CVE-2026-87467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87467"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87467",
"url": "https://www.suse.com/security/cve/CVE-2026-87467"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87467",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87467"
},
{
"cve": "CVE-2026-87468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87468"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87468",
"url": "https://www.suse.com/security/cve/CVE-2026-87468"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87468",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87468"
},
{
"cve": "CVE-2026-87469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87469"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87469",
"url": "https://www.suse.com/security/cve/CVE-2026-87469"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87469",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87469"
},
{
"cve": "CVE-2026-87470",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87470"
}
],
"notes": [
{
"category": "general",
"text": "Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87470",
"url": "https://www.suse.com/security/cve/CVE-2026-87470"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87470",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87470"
},
{
"cve": "CVE-2026-87471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87471"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87471",
"url": "https://www.suse.com/security/cve/CVE-2026-87471"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87471",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87471"
},
{
"cve": "CVE-2026-87472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87472"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87472",
"url": "https://www.suse.com/security/cve/CVE-2026-87472"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87472",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87472"
},
{
"cve": "CVE-2026-87473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87473"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87473",
"url": "https://www.suse.com/security/cve/CVE-2026-87473"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87473",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87473"
},
{
"cve": "CVE-2026-87474",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87474"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87474",
"url": "https://www.suse.com/security/cve/CVE-2026-87474"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87474",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87474"
},
{
"cve": "CVE-2026-87475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87475"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87475",
"url": "https://www.suse.com/security/cve/CVE-2026-87475"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87475",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87475"
},
{
"cve": "CVE-2026-87476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87476"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87476",
"url": "https://www.suse.com/security/cve/CVE-2026-87476"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87476",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87476"
},
{
"cve": "CVE-2026-87477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87477"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87477",
"url": "https://www.suse.com/security/cve/CVE-2026-87477"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87477",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87477"
},
{
"cve": "CVE-2026-87478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87478"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87478",
"url": "https://www.suse.com/security/cve/CVE-2026-87478"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87478",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87478"
},
{
"cve": "CVE-2026-87479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87479"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87479",
"url": "https://www.suse.com/security/cve/CVE-2026-87479"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87479",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87479"
},
{
"cve": "CVE-2026-87480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87480"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87480",
"url": "https://www.suse.com/security/cve/CVE-2026-87480"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87480",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87480"
},
{
"cve": "CVE-2026-87481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87481"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87481",
"url": "https://www.suse.com/security/cve/CVE-2026-87481"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87481",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87481"
},
{
"cve": "CVE-2026-87482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87482"
}
],
"notes": [
{
"category": "general",
"text": "Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87482",
"url": "https://www.suse.com/security/cve/CVE-2026-87482"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87482",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87482"
},
{
"cve": "CVE-2026-87483",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87483"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87483",
"url": "https://www.suse.com/security/cve/CVE-2026-87483"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87483",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87483"
},
{
"cve": "CVE-2026-87484",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87484"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87484",
"url": "https://www.suse.com/security/cve/CVE-2026-87484"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87484",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87484"
},
{
"cve": "CVE-2026-87485",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87485"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87485",
"url": "https://www.suse.com/security/cve/CVE-2026-87485"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87485",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87485"
},
{
"cve": "CVE-2026-87486",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87486"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87486",
"url": "https://www.suse.com/security/cve/CVE-2026-87486"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87486",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87486"
},
{
"cve": "CVE-2026-87487",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87487"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87487",
"url": "https://www.suse.com/security/cve/CVE-2026-87487"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87487",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87487"
},
{
"cve": "CVE-2026-87488",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87488"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87488",
"url": "https://www.suse.com/security/cve/CVE-2026-87488"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87488",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87488"
},
{
"cve": "CVE-2026-87489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87489"
}
],
"notes": [
{
"category": "general",
"text": "Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87489",
"url": "https://www.suse.com/security/cve/CVE-2026-87489"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87489",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87489"
},
{
"cve": "CVE-2026-87490",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87490"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87490",
"url": "https://www.suse.com/security/cve/CVE-2026-87490"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87490",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87490"
},
{
"cve": "CVE-2026-87491",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87491"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87491",
"url": "https://www.suse.com/security/cve/CVE-2026-87491"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87491",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87491"
},
{
"cve": "CVE-2026-87492",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87492"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87492",
"url": "https://www.suse.com/security/cve/CVE-2026-87492"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87492",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87492"
},
{
"cve": "CVE-2026-87493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87493"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87493",
"url": "https://www.suse.com/security/cve/CVE-2026-87493"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87493",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87493"
},
{
"cve": "CVE-2026-87494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87494"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87494",
"url": "https://www.suse.com/security/cve/CVE-2026-87494"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87494",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87494"
},
{
"cve": "CVE-2026-87495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87495"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87495",
"url": "https://www.suse.com/security/cve/CVE-2026-87495"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87495",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87495"
},
{
"cve": "CVE-2026-87496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87496"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87496",
"url": "https://www.suse.com/security/cve/CVE-2026-87496"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87496",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87496"
},
{
"cve": "CVE-2026-87497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87497"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87497",
"url": "https://www.suse.com/security/cve/CVE-2026-87497"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87497",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87497"
},
{
"cve": "CVE-2026-87498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87498"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87498",
"url": "https://www.suse.com/security/cve/CVE-2026-87498"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87498",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87498"
},
{
"cve": "CVE-2026-87499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87499"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87499",
"url": "https://www.suse.com/security/cve/CVE-2026-87499"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87499",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87499"
},
{
"cve": "CVE-2026-87500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87500"
}
],
"notes": [
{
"category": "general",
"text": "Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87500",
"url": "https://www.suse.com/security/cve/CVE-2026-87500"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87500",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87500"
},
{
"cve": "CVE-2026-87501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87501"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87501",
"url": "https://www.suse.com/security/cve/CVE-2026-87501"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87501",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87501"
},
{
"cve": "CVE-2026-87502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87502"
}
],
"notes": [
{
"category": "general",
"text": "Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87502",
"url": "https://www.suse.com/security/cve/CVE-2026-87502"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87502",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87502"
},
{
"cve": "CVE-2026-87503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87503"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87503",
"url": "https://www.suse.com/security/cve/CVE-2026-87503"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87503",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87503"
},
{
"cve": "CVE-2026-87504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87504"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87504",
"url": "https://www.suse.com/security/cve/CVE-2026-87504"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87504",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87504"
},
{
"cve": "CVE-2026-87505",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87505"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87505",
"url": "https://www.suse.com/security/cve/CVE-2026-87505"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87505",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87505"
},
{
"cve": "CVE-2026-87506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87506"
}
],
"notes": [
{
"category": "general",
"text": "Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87506",
"url": "https://www.suse.com/security/cve/CVE-2026-87506"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87506",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87506"
},
{
"cve": "CVE-2026-87507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87507"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87507",
"url": "https://www.suse.com/security/cve/CVE-2026-87507"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87507",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87507"
},
{
"cve": "CVE-2026-87508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87508"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87508",
"url": "https://www.suse.com/security/cve/CVE-2026-87508"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87508",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87508"
},
{
"cve": "CVE-2026-87509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87509"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87509",
"url": "https://www.suse.com/security/cve/CVE-2026-87509"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87509",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87509"
},
{
"cve": "CVE-2026-87510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87510"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87510",
"url": "https://www.suse.com/security/cve/CVE-2026-87510"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87510",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87510"
},
{
"cve": "CVE-2026-87511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87511"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87511",
"url": "https://www.suse.com/security/cve/CVE-2026-87511"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87511",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87511"
},
{
"cve": "CVE-2026-87512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87512"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87512",
"url": "https://www.suse.com/security/cve/CVE-2026-87512"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87512",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87512"
},
{
"cve": "CVE-2026-87513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87513"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87513",
"url": "https://www.suse.com/security/cve/CVE-2026-87513"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87513",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87513"
},
{
"cve": "CVE-2026-87514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87514"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87514",
"url": "https://www.suse.com/security/cve/CVE-2026-87514"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87514",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87514"
},
{
"cve": "CVE-2026-87515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87515"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87515",
"url": "https://www.suse.com/security/cve/CVE-2026-87515"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87515",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87515"
},
{
"cve": "CVE-2026-87516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87516"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87516",
"url": "https://www.suse.com/security/cve/CVE-2026-87516"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87516",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87516"
},
{
"cve": "CVE-2026-87517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87517"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87517",
"url": "https://www.suse.com/security/cve/CVE-2026-87517"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87517",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87517"
},
{
"cve": "CVE-2026-87518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87518"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87518",
"url": "https://www.suse.com/security/cve/CVE-2026-87518"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87518",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87518"
},
{
"cve": "CVE-2026-87519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87519"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87519",
"url": "https://www.suse.com/security/cve/CVE-2026-87519"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87519",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87519"
},
{
"cve": "CVE-2026-87520",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87520"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87520",
"url": "https://www.suse.com/security/cve/CVE-2026-87520"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87520",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87520"
},
{
"cve": "CVE-2026-87521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87521"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87521",
"url": "https://www.suse.com/security/cve/CVE-2026-87521"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87521",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87521"
},
{
"cve": "CVE-2026-87522",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87522"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87522",
"url": "https://www.suse.com/security/cve/CVE-2026-87522"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87522",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87522"
},
{
"cve": "CVE-2026-87523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87523"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87523",
"url": "https://www.suse.com/security/cve/CVE-2026-87523"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87523",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87523"
},
{
"cve": "CVE-2026-87524",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87524"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87524",
"url": "https://www.suse.com/security/cve/CVE-2026-87524"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87524",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87524"
},
{
"cve": "CVE-2026-87525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87525"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87525",
"url": "https://www.suse.com/security/cve/CVE-2026-87525"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87525",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87525"
},
{
"cve": "CVE-2026-87526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87526"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87526",
"url": "https://www.suse.com/security/cve/CVE-2026-87526"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87526",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87526"
},
{
"cve": "CVE-2026-87527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87527"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87527",
"url": "https://www.suse.com/security/cve/CVE-2026-87527"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87527",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87527"
},
{
"cve": "CVE-2026-87528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87528"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87528",
"url": "https://www.suse.com/security/cve/CVE-2026-87528"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87528",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87528"
},
{
"cve": "CVE-2026-87529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87529"
}
],
"notes": [
{
"category": "general",
"text": "Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87529",
"url": "https://www.suse.com/security/cve/CVE-2026-87529"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87529",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87529"
},
{
"cve": "CVE-2026-87530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87530"
}
],
"notes": [
{
"category": "general",
"text": "Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87530",
"url": "https://www.suse.com/security/cve/CVE-2026-87530"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87530",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87530"
},
{
"cve": "CVE-2026-87531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87531"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87531",
"url": "https://www.suse.com/security/cve/CVE-2026-87531"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87531",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87531"
},
{
"cve": "CVE-2026-87532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87532"
}
],
"notes": [
{
"category": "general",
"text": "Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87532",
"url": "https://www.suse.com/security/cve/CVE-2026-87532"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87532",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87532"
},
{
"cve": "CVE-2026-87533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87533"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87533",
"url": "https://www.suse.com/security/cve/CVE-2026-87533"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87533",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87533"
},
{
"cve": "CVE-2026-87534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87534"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87534",
"url": "https://www.suse.com/security/cve/CVE-2026-87534"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87534",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87534"
},
{
"cve": "CVE-2026-87535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87535"
}
],
"notes": [
{
"category": "general",
"text": "Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87535",
"url": "https://www.suse.com/security/cve/CVE-2026-87535"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87535",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87535"
},
{
"cve": "CVE-2026-87536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87536"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87536",
"url": "https://www.suse.com/security/cve/CVE-2026-87536"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87536",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87536"
},
{
"cve": "CVE-2026-87537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87537"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87537",
"url": "https://www.suse.com/security/cve/CVE-2026-87537"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87537",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87537"
},
{
"cve": "CVE-2026-87538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87538"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87538",
"url": "https://www.suse.com/security/cve/CVE-2026-87538"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87538",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87538"
},
{
"cve": "CVE-2026-87539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87539"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87539",
"url": "https://www.suse.com/security/cve/CVE-2026-87539"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87539",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87539"
},
{
"cve": "CVE-2026-87540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87540"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87540",
"url": "https://www.suse.com/security/cve/CVE-2026-87540"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87540",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87540"
},
{
"cve": "CVE-2026-87541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87541"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87541",
"url": "https://www.suse.com/security/cve/CVE-2026-87541"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87541",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87541"
},
{
"cve": "CVE-2026-87542",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87542"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87542",
"url": "https://www.suse.com/security/cve/CVE-2026-87542"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87542",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87542"
},
{
"cve": "CVE-2026-87543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87543"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87543",
"url": "https://www.suse.com/security/cve/CVE-2026-87543"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87543",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87543"
},
{
"cve": "CVE-2026-87544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87544"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87544",
"url": "https://www.suse.com/security/cve/CVE-2026-87544"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87544",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87544"
},
{
"cve": "CVE-2026-87545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87545"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87545",
"url": "https://www.suse.com/security/cve/CVE-2026-87545"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87545",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87545"
},
{
"cve": "CVE-2026-87546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87546"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87546",
"url": "https://www.suse.com/security/cve/CVE-2026-87546"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87546",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87546"
},
{
"cve": "CVE-2026-87547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87547"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87547",
"url": "https://www.suse.com/security/cve/CVE-2026-87547"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87547",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87547"
},
{
"cve": "CVE-2026-87548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87548"
}
],
"notes": [
{
"category": "general",
"text": "Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87548",
"url": "https://www.suse.com/security/cve/CVE-2026-87548"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87548",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87548"
},
{
"cve": "CVE-2026-87549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87549"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87549",
"url": "https://www.suse.com/security/cve/CVE-2026-87549"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87549",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87549"
},
{
"cve": "CVE-2026-87550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87550"
}
],
"notes": [
{
"category": "general",
"text": "Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87550",
"url": "https://www.suse.com/security/cve/CVE-2026-87550"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87550",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87550"
},
{
"cve": "CVE-2026-87551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87551"
}
],
"notes": [
{
"category": "general",
"text": "Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87551",
"url": "https://www.suse.com/security/cve/CVE-2026-87551"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87551",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87551"
},
{
"cve": "CVE-2026-87552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87552"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87552",
"url": "https://www.suse.com/security/cve/CVE-2026-87552"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87552",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87552"
},
{
"cve": "CVE-2026-87553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87553"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87553",
"url": "https://www.suse.com/security/cve/CVE-2026-87553"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87553",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87553"
},
{
"cve": "CVE-2026-87554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87554"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87554",
"url": "https://www.suse.com/security/cve/CVE-2026-87554"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87554",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87554"
},
{
"cve": "CVE-2026-87555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87555"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87555",
"url": "https://www.suse.com/security/cve/CVE-2026-87555"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87555",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87555"
},
{
"cve": "CVE-2026-87556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87556"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87556",
"url": "https://www.suse.com/security/cve/CVE-2026-87556"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87556",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87556"
},
{
"cve": "CVE-2026-87557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87557"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87557",
"url": "https://www.suse.com/security/cve/CVE-2026-87557"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87557",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87557"
},
{
"cve": "CVE-2026-87558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87558"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87558",
"url": "https://www.suse.com/security/cve/CVE-2026-87558"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87558",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87558"
},
{
"cve": "CVE-2026-87559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87559"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87559",
"url": "https://www.suse.com/security/cve/CVE-2026-87559"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87559",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87559"
},
{
"cve": "CVE-2026-87560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87560"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87560",
"url": "https://www.suse.com/security/cve/CVE-2026-87560"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87560",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87560"
},
{
"cve": "CVE-2026-87561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87561"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87561",
"url": "https://www.suse.com/security/cve/CVE-2026-87561"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87561",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87561"
},
{
"cve": "CVE-2026-87562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87562"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87562",
"url": "https://www.suse.com/security/cve/CVE-2026-87562"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87562",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87562"
},
{
"cve": "CVE-2026-87563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87563"
}
],
"notes": [
{
"category": "general",
"text": "Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87563",
"url": "https://www.suse.com/security/cve/CVE-2026-87563"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87563",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87563"
},
{
"cve": "CVE-2026-87564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87564"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87564",
"url": "https://www.suse.com/security/cve/CVE-2026-87564"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87564",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87564"
},
{
"cve": "CVE-2026-87565",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87565"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87565",
"url": "https://www.suse.com/security/cve/CVE-2026-87565"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87565",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87565"
},
{
"cve": "CVE-2026-87566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87566"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87566",
"url": "https://www.suse.com/security/cve/CVE-2026-87566"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87566",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87566"
},
{
"cve": "CVE-2026-87567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87567"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87567",
"url": "https://www.suse.com/security/cve/CVE-2026-87567"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87567",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87567"
},
{
"cve": "CVE-2026-87568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87568"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87568",
"url": "https://www.suse.com/security/cve/CVE-2026-87568"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87568",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87568"
},
{
"cve": "CVE-2026-87569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87569"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87569",
"url": "https://www.suse.com/security/cve/CVE-2026-87569"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87569",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87569"
},
{
"cve": "CVE-2026-87570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87570"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87570",
"url": "https://www.suse.com/security/cve/CVE-2026-87570"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87570",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87570"
},
{
"cve": "CVE-2026-87571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87571"
}
],
"notes": [
{
"category": "general",
"text": "Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87571",
"url": "https://www.suse.com/security/cve/CVE-2026-87571"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87571",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87571"
},
{
"cve": "CVE-2026-87572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87572"
}
],
"notes": [
{
"category": "general",
"text": "Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87572",
"url": "https://www.suse.com/security/cve/CVE-2026-87572"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87572",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87572"
},
{
"cve": "CVE-2026-87573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87573"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87573",
"url": "https://www.suse.com/security/cve/CVE-2026-87573"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87573",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87573"
},
{
"cve": "CVE-2026-87574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87574"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87574",
"url": "https://www.suse.com/security/cve/CVE-2026-87574"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87574",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87574"
},
{
"cve": "CVE-2026-87575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87575"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87575",
"url": "https://www.suse.com/security/cve/CVE-2026-87575"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87575",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87575"
},
{
"cve": "CVE-2026-87576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87576"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87576",
"url": "https://www.suse.com/security/cve/CVE-2026-87576"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87576",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87576"
},
{
"cve": "CVE-2026-87577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87577"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87577",
"url": "https://www.suse.com/security/cve/CVE-2026-87577"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87577",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87577"
},
{
"cve": "CVE-2026-87578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87578"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87578",
"url": "https://www.suse.com/security/cve/CVE-2026-87578"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87578",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87578"
},
{
"cve": "CVE-2026-87579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87579"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87579",
"url": "https://www.suse.com/security/cve/CVE-2026-87579"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87579",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87579"
},
{
"cve": "CVE-2026-87580",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87580"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87580",
"url": "https://www.suse.com/security/cve/CVE-2026-87580"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87580",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87580"
},
{
"cve": "CVE-2026-87581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87581"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87581",
"url": "https://www.suse.com/security/cve/CVE-2026-87581"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87581",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87581"
},
{
"cve": "CVE-2026-87582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87582"
}
],
"notes": [
{
"category": "general",
"text": "Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87582",
"url": "https://www.suse.com/security/cve/CVE-2026-87582"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87582",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87582"
},
{
"cve": "CVE-2026-87583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87583"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87583",
"url": "https://www.suse.com/security/cve/CVE-2026-87583"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87583",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87583"
},
{
"cve": "CVE-2026-87584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87584"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87584",
"url": "https://www.suse.com/security/cve/CVE-2026-87584"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87584",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87584"
},
{
"cve": "CVE-2026-87585",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87585"
}
],
"notes": [
{
"category": "general",
"text": "Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87585",
"url": "https://www.suse.com/security/cve/CVE-2026-87585"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87585",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87585"
},
{
"cve": "CVE-2026-87586",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87586"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87586",
"url": "https://www.suse.com/security/cve/CVE-2026-87586"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87586",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87586"
},
{
"cve": "CVE-2026-87587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87587"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87587",
"url": "https://www.suse.com/security/cve/CVE-2026-87587"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87587",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87587"
},
{
"cve": "CVE-2026-87588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87588"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87588",
"url": "https://www.suse.com/security/cve/CVE-2026-87588"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87588",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87588"
},
{
"cve": "CVE-2026-87589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87589"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87589",
"url": "https://www.suse.com/security/cve/CVE-2026-87589"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87589",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87589"
},
{
"cve": "CVE-2026-87590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87590"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87590",
"url": "https://www.suse.com/security/cve/CVE-2026-87590"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87590",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87590"
},
{
"cve": "CVE-2026-87591",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87591"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87591",
"url": "https://www.suse.com/security/cve/CVE-2026-87591"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87591",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87591"
},
{
"cve": "CVE-2026-87592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87592"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87592",
"url": "https://www.suse.com/security/cve/CVE-2026-87592"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87592",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87592"
},
{
"cve": "CVE-2026-87593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87593"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87593",
"url": "https://www.suse.com/security/cve/CVE-2026-87593"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87593",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87593"
},
{
"cve": "CVE-2026-87594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87594"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87594",
"url": "https://www.suse.com/security/cve/CVE-2026-87594"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87594",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87594"
},
{
"cve": "CVE-2026-87595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87595"
}
],
"notes": [
{
"category": "general",
"text": "Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87595",
"url": "https://www.suse.com/security/cve/CVE-2026-87595"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87595",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87595"
},
{
"cve": "CVE-2026-87596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87596"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87596",
"url": "https://www.suse.com/security/cve/CVE-2026-87596"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87596",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87596"
},
{
"cve": "CVE-2026-87597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87597"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87597",
"url": "https://www.suse.com/security/cve/CVE-2026-87597"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87597",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87597"
},
{
"cve": "CVE-2026-87598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87598"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87598",
"url": "https://www.suse.com/security/cve/CVE-2026-87598"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87598",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87598"
},
{
"cve": "CVE-2026-87599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87599"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87599",
"url": "https://www.suse.com/security/cve/CVE-2026-87599"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87599",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87599"
},
{
"cve": "CVE-2026-87600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87600"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87600",
"url": "https://www.suse.com/security/cve/CVE-2026-87600"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87600",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87600"
},
{
"cve": "CVE-2026-87601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87601"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87601",
"url": "https://www.suse.com/security/cve/CVE-2026-87601"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87601",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87601"
},
{
"cve": "CVE-2026-87602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87602"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87602",
"url": "https://www.suse.com/security/cve/CVE-2026-87602"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87602",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87602"
},
{
"cve": "CVE-2026-87603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87603"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87603",
"url": "https://www.suse.com/security/cve/CVE-2026-87603"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87603",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87603"
},
{
"cve": "CVE-2026-87604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87604"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87604",
"url": "https://www.suse.com/security/cve/CVE-2026-87604"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87604",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87604"
},
{
"cve": "CVE-2026-87605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87605"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87605",
"url": "https://www.suse.com/security/cve/CVE-2026-87605"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87605",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87605"
},
{
"cve": "CVE-2026-87606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87606"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87606",
"url": "https://www.suse.com/security/cve/CVE-2026-87606"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87606",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87606"
},
{
"cve": "CVE-2026-87607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87607"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87607",
"url": "https://www.suse.com/security/cve/CVE-2026-87607"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87607",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87607"
},
{
"cve": "CVE-2026-87608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87608"
}
],
"notes": [
{
"category": "general",
"text": "Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87608",
"url": "https://www.suse.com/security/cve/CVE-2026-87608"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87608",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87608"
},
{
"cve": "CVE-2026-87609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87609"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87609",
"url": "https://www.suse.com/security/cve/CVE-2026-87609"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87609",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87609"
},
{
"cve": "CVE-2026-87610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87610"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87610",
"url": "https://www.suse.com/security/cve/CVE-2026-87610"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87610",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87610"
},
{
"cve": "CVE-2026-87611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87611"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87611",
"url": "https://www.suse.com/security/cve/CVE-2026-87611"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87611",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87611"
},
{
"cve": "CVE-2026-87612",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87612"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87612",
"url": "https://www.suse.com/security/cve/CVE-2026-87612"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87612",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87612"
},
{
"cve": "CVE-2026-87613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87613"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87613",
"url": "https://www.suse.com/security/cve/CVE-2026-87613"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87613",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87613"
},
{
"cve": "CVE-2026-87614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87614"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87614",
"url": "https://www.suse.com/security/cve/CVE-2026-87614"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87614",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87614"
},
{
"cve": "CVE-2026-87615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87615"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87615",
"url": "https://www.suse.com/security/cve/CVE-2026-87615"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87615",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87615"
},
{
"cve": "CVE-2026-87616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87616"
}
],
"notes": [
{
"category": "general",
"text": "Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87616",
"url": "https://www.suse.com/security/cve/CVE-2026-87616"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87616",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87616"
},
{
"cve": "CVE-2026-87617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87617"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87617",
"url": "https://www.suse.com/security/cve/CVE-2026-87617"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87617",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87617"
},
{
"cve": "CVE-2026-87618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87618"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87618",
"url": "https://www.suse.com/security/cve/CVE-2026-87618"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87618",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87618"
},
{
"cve": "CVE-2026-87619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87619"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87619",
"url": "https://www.suse.com/security/cve/CVE-2026-87619"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87619",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87619"
},
{
"cve": "CVE-2026-87620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87620"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87620",
"url": "https://www.suse.com/security/cve/CVE-2026-87620"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87620",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87620"
},
{
"cve": "CVE-2026-87621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87621"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87621",
"url": "https://www.suse.com/security/cve/CVE-2026-87621"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87621",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87621"
},
{
"cve": "CVE-2026-87622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87622"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87622",
"url": "https://www.suse.com/security/cve/CVE-2026-87622"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87622",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87622"
},
{
"cve": "CVE-2026-87623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87623"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87623",
"url": "https://www.suse.com/security/cve/CVE-2026-87623"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87623",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87623"
},
{
"cve": "CVE-2026-87624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87624"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87624",
"url": "https://www.suse.com/security/cve/CVE-2026-87624"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87624",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87624"
},
{
"cve": "CVE-2026-87625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87625"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87625",
"url": "https://www.suse.com/security/cve/CVE-2026-87625"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87625",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87625"
},
{
"cve": "CVE-2026-87626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87626"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87626",
"url": "https://www.suse.com/security/cve/CVE-2026-87626"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87626",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87626"
},
{
"cve": "CVE-2026-87627",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87627"
}
],
"notes": [
{
"category": "general",
"text": "Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87627",
"url": "https://www.suse.com/security/cve/CVE-2026-87627"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87627",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87627"
},
{
"cve": "CVE-2026-87628",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87628"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87628",
"url": "https://www.suse.com/security/cve/CVE-2026-87628"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87628",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87628"
},
{
"cve": "CVE-2026-87629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87629"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87629",
"url": "https://www.suse.com/security/cve/CVE-2026-87629"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87629",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87629"
},
{
"cve": "CVE-2026-87630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87630"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87630",
"url": "https://www.suse.com/security/cve/CVE-2026-87630"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87630",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87630"
},
{
"cve": "CVE-2026-87631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87631"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87631",
"url": "https://www.suse.com/security/cve/CVE-2026-87631"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87631",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87631"
},
{
"cve": "CVE-2026-87632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87632"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87632",
"url": "https://www.suse.com/security/cve/CVE-2026-87632"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87632",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87632"
},
{
"cve": "CVE-2026-87633",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87633"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87633",
"url": "https://www.suse.com/security/cve/CVE-2026-87633"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87633",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87633"
},
{
"cve": "CVE-2026-87634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87634"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87634",
"url": "https://www.suse.com/security/cve/CVE-2026-87634"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87634",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87634"
},
{
"cve": "CVE-2026-87635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87635"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87635",
"url": "https://www.suse.com/security/cve/CVE-2026-87635"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87635",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87635"
},
{
"cve": "CVE-2026-87636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87636"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87636",
"url": "https://www.suse.com/security/cve/CVE-2026-87636"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87636",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87636"
},
{
"cve": "CVE-2026-87637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87637"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87637",
"url": "https://www.suse.com/security/cve/CVE-2026-87637"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87637",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87637"
},
{
"cve": "CVE-2026-87638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87638"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87638",
"url": "https://www.suse.com/security/cve/CVE-2026-87638"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87638",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87638"
},
{
"cve": "CVE-2026-87639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87639"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87639",
"url": "https://www.suse.com/security/cve/CVE-2026-87639"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87639",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87639"
},
{
"cve": "CVE-2026-87640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87640"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87640",
"url": "https://www.suse.com/security/cve/CVE-2026-87640"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87640",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87640"
},
{
"cve": "CVE-2026-87641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87641"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87641",
"url": "https://www.suse.com/security/cve/CVE-2026-87641"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87641",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87641"
},
{
"cve": "CVE-2026-87642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87642"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87642",
"url": "https://www.suse.com/security/cve/CVE-2026-87642"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87642",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87642"
},
{
"cve": "CVE-2026-87643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87643"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87643",
"url": "https://www.suse.com/security/cve/CVE-2026-87643"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87643",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87643"
},
{
"cve": "CVE-2026-87644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87644"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87644",
"url": "https://www.suse.com/security/cve/CVE-2026-87644"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87644",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87644"
},
{
"cve": "CVE-2026-87645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87645"
}
],
"notes": [
{
"category": "general",
"text": "Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87645",
"url": "https://www.suse.com/security/cve/CVE-2026-87645"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87645",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87645"
},
{
"cve": "CVE-2026-87646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87646"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87646",
"url": "https://www.suse.com/security/cve/CVE-2026-87646"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87646",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87646"
},
{
"cve": "CVE-2026-87647",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87647"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87647",
"url": "https://www.suse.com/security/cve/CVE-2026-87647"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87647",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87647"
},
{
"cve": "CVE-2026-87648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87648"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87648",
"url": "https://www.suse.com/security/cve/CVE-2026-87648"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87648",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87648"
},
{
"cve": "CVE-2026-87649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87649"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87649",
"url": "https://www.suse.com/security/cve/CVE-2026-87649"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87649",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87649"
},
{
"cve": "CVE-2026-87650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87650"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87650",
"url": "https://www.suse.com/security/cve/CVE-2026-87650"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87650",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87650"
},
{
"cve": "CVE-2026-87651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87651"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87651",
"url": "https://www.suse.com/security/cve/CVE-2026-87651"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87651",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87651"
},
{
"cve": "CVE-2026-87652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87652"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87652",
"url": "https://www.suse.com/security/cve/CVE-2026-87652"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87652",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87652"
},
{
"cve": "CVE-2026-87653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87653"
}
],
"notes": [
{
"category": "general",
"text": "UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87653",
"url": "https://www.suse.com/security/cve/CVE-2026-87653"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87653",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87653"
},
{
"cve": "CVE-2026-87654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87654"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87654",
"url": "https://www.suse.com/security/cve/CVE-2026-87654"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87654",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87654"
},
{
"cve": "CVE-2026-87655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87655"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87655",
"url": "https://www.suse.com/security/cve/CVE-2026-87655"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87655",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87655"
},
{
"cve": "CVE-2026-87656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87656"
}
],
"notes": [
{
"category": "general",
"text": "Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87656",
"url": "https://www.suse.com/security/cve/CVE-2026-87656"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87656",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87656"
},
{
"cve": "CVE-2026-87657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87657"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87657",
"url": "https://www.suse.com/security/cve/CVE-2026-87657"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87657",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87657"
},
{
"cve": "CVE-2026-87658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87658"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87658",
"url": "https://www.suse.com/security/cve/CVE-2026-87658"
},
{
"category": "external",
"summary": "SUSE Bug 1279840 for CVE-2026-87658",
"url": "https://bugzilla.suse.com/1279840"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromedriver-0:153.0.8010.36-bp160.1.1.x86_64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.aarch64",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:chromium-0:153.0.8010.36-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-16T08:15:10Z",
"details": "critical"
}
],
"title": "CVE-2026-87658"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.