openSUSE-SU-2026:20460-1

Severidad por fuente

Ninguna fuente da una puntuación CVSS.

La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.

Descripción

This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.177 (boo#1261249) * CVE-2026-5273: Use after free in CSS * CVE-2026-5272: Heap buffer overflow in GPU * CVE-2026-5274: Integer overflow in Codecs * CVE-2026-5275: Heap buffer overflow in ANGLE * CVE-2026-5276: Insufficient policy enforcement in WebUSB * CVE-2026-5277: Integer overflow in ANGLE * CVE-2026-5278: Use after free in Web MIDI * CVE-2026-5279: Object corruption in V8 * CVE-2026-5280: Use after free in WebCodecs * CVE-2026-5281: Use after free in Dawn * CVE-2026-5282: Out of bounds read in WebCodecs * CVE-2026-5283: Inappropriate implementation in ANGLE * CVE-2026-5284: Use after free in Dawn * CVE-2026-5285: Use after free in WebGL * CVE-2026-5286: Use after free in Dawn * CVE-2026-5287: Use after free in PDF * CVE-2026-5288: Use after free in WebView * CVE-2026-5289: Use after free in Navigation * CVE-2026-5290: Use after free in Compositing * CVE-2026-5291: Inappropriate implementation in WebGL * CVE-2026-5292: Out of bounds read in WebCodecs

Paquetes afectados y versiones corregidas

Referencias

• https://bugzilla.suse.com/1261249
• https://www.suse.com/security/cve/CVE-2026-5272/
• https://www.suse.com/security/cve/CVE-2026-5273/
• https://www.suse.com/security/cve/CVE-2026-5274/
• https://www.suse.com/security/cve/CVE-2026-5275/
• https://www.suse.com/security/cve/CVE-2026-5276/
• https://www.suse.com/security/cve/CVE-2026-5277/
• https://www.suse.com/security/cve/CVE-2026-5278/