The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20076-1 advisory.

    Changes in chromium:

    Chromium 142.0.7444.175 (boo#1253698):

      * CVE-2025-13223: Type Confusion in V8
      * CVE-2025-13224: Type Confusion in V8

    Chromium 142.0.7444.162 (boo#1253267):

      * CVE-2025-13042: Inappropriate implementation in V8

    Chromium 142.0.7444.134 (boo#1253089):

      * CVE-2025-12725: Out of bounds write in WebGPU
      * CVE-2025-12726: Inappropriate implementation in Views
      * CVE-2025-12727: Inappropriate implementation in V8
      * CVE-2025-12728: Inappropriate implementation in Omnibox
      * CVE-2025-12729: Inappropriate implementation in Omnibox

    Chromium 142.0.7444.59, the stable channel promotion of 142.

    Security fixes (boo#1252881):

      * CVE-2025-12428: Type Confusion in V8
      * CVE-2025-12429: Inappropriate implementation in V8
      * CVE-2025-12430: Object lifecycle issue in Media
      * CVE-2025-12431: Inappropriate implementation in Extensions
      * CVE-2025-12432: Race in V8
      * CVE-2025-12433: Inappropriate implementation in V8
      * CVE-2025-12434: Race in Storage
      * CVE-2025-12435: Incorrect security UI in Omnibox
      * CVE-2025-12436: Policy bypass in Extensions
      * CVE-2025-12437: Use after free in PageInfo
      * CVE-2025-12438: Use after free in Ozone
      * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
      * CVE-2025-12440: Inappropriate implementation in Autofill
      * CVE-2025-12441: Out of bounds read in V8
      * CVE-2025-12443: Out of bounds read in WebXR
      * CVE-2025-12444: Incorrect security UI in Fullscreen UI
      * CVE-2025-12445: Policy bypass in Extensions
      * CVE-2025-12446: Incorrect security UI in SplitView
      * CVE-2025-12447: Incorrect security UI in Omnibox

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

openSUSE 16 Security Update : chromium (openSUSE-SU-2025:20076-1)

high Nessus Plugin ID 276605

Version 1.2

Version 1.1

Version 1.2 Sep 3, 2026, 6:34 PM CVE (set "CVE" coverage to "CVE-2025-12428,CVE-2025-12429,CVE-2025-12430,CVE-2025-12431,CVE-2025-12432,CVE-2025-12433,CVE-2025-12434,CVE-2025-12435,CVE-2025-12436,CVE-2025-12437,CVE-2025-12438,CVE-2025-12439,CVE-2025-12440,CVE-2025-12441,CVE-2025-12443,CVE-2025-12444,CVE-2025-12445,CVE-2025-12446,CVE-2025-12447,CVE-2025-12725,CVE-2025-12726,CVE-2025-12727,CVE-2025-12728,CVE-2025-12729,CVE-2025-13042,CVE-2025-13223,CVE-2025-13224,CVE-2025-54874") CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSS metrics ("Cvssv4 score" set to 7.5) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") CVSSv2 score source (changed from "CVE-2025-13224" to "CVE-2025-54874") Plugin metadata Plugin Feed: 202609031834
Version 1.1 Nov 24, 2025, 10:08 PM New Plugin Feed: 202511242208