openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21135-1)

critical Nessus Plugin ID 342586

Synopsis

The remote openSUSE host is missing one or more security updates.

Description

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21135-1 advisory.

Changes in chromium:

- Chromium 149.0.7827.155 (boo#1268373):
* CVE-2026-12437: Use after free in WebShare
* CVE-2026-12438: Inappropriate implementation in WebView
* CVE-2026-12439: Use after free in Digital Credentials
* CVE-2026-12440: Use after free in DigitalCredentials
* CVE-2026-12441: Use after free in File Input
* CVE-2026-12442: Use after free in Passwords
* CVE-2026-12443: Use after free in Web Authentication
* CVE-2026-12444: Out of bounds read in Chromoting
* CVE-2026-12445: Use after free in Extensions
* CVE-2026-12446: Insufficient data validation in Passwords
* CVE-2026-12447: Heap buffer overflow in WebRTC
* CVE-2026-12448: Inappropriate implementation in WebView
* CVE-2026-12449: Use after free in Chromoting
* CVE-2026-12450: Inappropriate implementation in Media
* CVE-2026-12451: Use after free in DigitalCredentials
* CVE-2026-12452: Use after free in Downloads
* CVE-2026-12453: Insufficient validation of untrusted input in Input
* CVE-2026-12454: Race in Safe Browsing
* CVE-2026-12455: Use after free in Tab Strip
* CVE-2026-12456: Insufficient validation of untrusted input in Extensions
* CVE-2026-12457: Insufficient data validation in Extensions
* CVE-2026-12458: Incorrect security UI in Passwords
* CVE-2026-12459: Inappropriate implementation in Serial
* CVE-2026-12460: Insufficient policy enforcement in File System Access
* CVE-2026-12461: Out of bounds read in WebRTC
* CVE-2026-12462: Use after free in Media
* CVE-2026-12463: Inappropriate implementation in Views
* CVE-2026-12464: Use after free in Browser
* CVE-2026-12465: Insufficient validation of untrusted input in Metrics
* CVE-2026-12466: Heap buffer overflow in WebRTC
* CVE-2026-12467: Use after free in Extensions
* CVE-2026-12468: Inappropriate implementation in Updater
* CVE-2026-12469: Uninitialized Use in GPU

- Chromium 149.0.7827.114 (boo#1268158):

* CVE-2026-12007: Use after free Core
* CVE-2026-12008: Use after free DigitalCredentials
* CVE-2026-12009: Insufficient validation of untrusted input Accessibility
* CVE-2026-12010: Heap buffer overflow GPU
* CVE-2026-12011: Use after free WebMIDI
* CVE-2026-12012: Use after free Network
* CVE-2026-12013: Use after free Media
* CVE-2026-12014: Use after free Cast
* CVE-2026-12015: Use after free Autofill
* CVE-2026-12016: Insufficient validation of untrusted input DevTools
* CVE-2026-12017: Insufficient validation of untrusted input Extensions
* CVE-2026-12018: Inappropriate implementation Mojo
* CVE-2026-12019: Out of bounds write Codecs
* CVE-2026-12020: Use after free Autofill
* CVE-2026-12022: Race Safe Browsing
* CVE-2026-12023: Use after free GPU
* CVE-2026-12024: Insufficient policy enforcement DevTools
* CVE-2026-12025: Insufficient validation of untrusted input Network
* CVE-2026-12026: Out of bounds read Video
* CVE-2026-12027: Insufficient policy enforcement Headless
* CVE-2026-12028: Use after free GPU
* CVE-2026-12029: Use after free Video
* CVE-2026-12030: Heap buffer overflow GPU
* CVE-2026-12031: Inappropriate implementation Views
* CVE-2026-12032: Inappropriate implementation Passwords
* CVE-2026-12033: Out of bounds read VideoCapture
* CVE-2026-12034: Insufficient validation of untrusted input Linux Toolkit Theming
* CVE-2026-12035: Use after free View

- Chromium 149.0.7827.102 (boo#1267911):
* CVE-2026-11628: Use after free in Ozone
* CVE-2026-11629: Use after free in Ozone
* CVE-2026-11630: Use after free in File Input
* CVE-2026-11631: Use after free in Aura
* CVE-2026-11632: Use after free in TabStrip
* CVE-2026-11633: Use after free in Bluetooth
* CVE-2026-11634: Use after free in Gamepad
* CVE-2026-11635: Use after free in Bluetooth
* CVE-2026-11636: Use after free in Autofill
* CVE-2026-11637: Use after free in Views
* CVE-2026-11638: Use after free in Printing
* CVE-2026-11639: Use after free in Compositing
* CVE-2026-11640: Integer overflow in libyuv
* CVE-2026-11641: Use after free in Bluetooth
* CVE-2026-11642: Use after free in Web Apps
* CVE-2026-11643: Use after free in Proxy
* CVE-2026-11644: Use after free in Views
* CVE-2026-11645: Out of bounds memory access in V8
* CVE-2026-11646: Use after free in ViewTransitions
* CVE-2026-11647: Use after free in Printing
* CVE-2026-11648: Use after free in FullScreen
* CVE-2026-11649: Use after free in V8
* CVE-2026-11650: Use after free in V8
* CVE-2026-11651: Use after free in Network
* CVE-2026-11652: Use after free in Extensions
* CVE-2026-11653: Insufficient validation of untrusted input in Extensions
* CVE-2026-11654: Use after free in CameraCapture
* CVE-2026-11655: Integer overflow in Media
* CVE-2026-11656: Use after free in ServiceWorker
* CVE-2026-11657: Use after free in Payments
* CVE-2026-11658: Insufficient validation of untrusted input in Extensions
* CVE-2026-11659: Insufficient validation of untrusted input in UI
* CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
* CVE-2026-11661: Use after free in Views
* CVE-2026-11662: Type Confusion in Bindings
* CVE-2026-11663: Use after free in Skia
* CVE-2026-11664: Use after free in Payments
* CVE-2026-11665: Out of bounds read in Dawn
* CVE-2026-11666: Insufficient validation of untrusted input in Input
* CVE-2026-11667: Out of bounds read in WebRTC
* CVE-2026-11668: Uninitialized Use in Codecs
* CVE-2026-11669: Integer overflow in Media
* CVE-2026-11670: Use after free in PDF
* CVE-2026-11671: Use after free in Navigation
* CVE-2026-11672: Out of bounds write in GPU
* CVE-2026-11673: Use after free in InterestGroups
* CVE-2026-11674: Use after free in Guest View
* CVE-2026-11675: Insufficient validation of untrusted input in Skia
* CVE-2026-11676: Insufficient validation of untrusted input in Dawn
* CVE-2026-11677: Race in Network
* CVE-2026-11678: Integer overflow in libyuv
* CVE-2026-11679: Use after free in Codecs
* CVE-2026-11680: Use after free in Media
* CVE-2026-11681: Use after free in Ozone
* CVE-2026-11682: Insufficient validation of untrusted input in Views
* CVE-2026-11683: Use after free in WebCodecs
* CVE-2026-11684: Insufficient policy enforcement in Network
* CVE-2026-11685: Insufficient data validation in MediaCapture
* CVE-2026-11686: Insufficient validation of untrusted input in Dawn
* CVE-2026-11687: Use after free in Dawn
* CVE-2026-11688: Object lifecycle issue in SVG
* CVE-2026-11689: Insufficient validation of untrusted input in Passwords
* CVE-2026-11690: Out of bounds read and write in Media
* CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
* CVE-2026-11692: Use after free in Read Anything
* CVE-2026-11693: Inappropriate implementation in Plugins
* CVE-2026-11694: Use after free in ServiceWorker
* CVE-2026-11695: Inappropriate implementation in Passwords
* CVE-2026-11696: Uninitialized Use in Video
* CVE-2026-11697: Insufficient validation of untrusted input in UI
* CVE-2026-11698: Use after free in Bluetooth
* CVE-2026-11699: Use after free in Bluetooth
* CVE-2026-11700: Use after free in Tracing
* CVE-2026-11701: Insufficient validation of untrusted input in Guest View

- Chromium 149 (149.0.7827.53) stable (boo#1267706):
* CVE-2026-10881: Out of bounds read and write in ANGLE
* CVE-2026-10882: Use after free in Network
* CVE-2026-10883: Out of bounds write in ANGLE
* CVE-2026-10884: Use after free in Chromecast
* CVE-2026-10885: Use after free in Chrome for iOS
* CVE-2026-10886: Use after free in FileSystem
* CVE-2026-10887: Use after free in Chromoting
* CVE-2026-10888: Use after free in Cast Streaming
* CVE-2026-10889: Out of bounds read in ANGLE
* CVE-2026-10890: Use after free in Cast
* CVE-2026-10891: Use after free in GFX
* CVE-2026-10892: Out of bounds write in GPU
* CVE-2026-10893: Use after free in Chromoting
* CVE-2026-10894: Use after free in Printing
* CVE-2026-10895: Use after free in Ozone
* CVE-2026-10896: Use after free in Chrome for iOS
* CVE-2026-10897: Out of bounds write in GPU
* CVE-2026-10898: Stack buffer overflow in GPU
* CVE-2026-10899: Use after free in Ozone
* CVE-2026-10900: Use after free in Passwords
* CVE-2026-10901: Use after free in Passwords
* CVE-2026-10902: Use after free in Ozone
* CVE-2026-10903: Use after free in WebRTC
* CVE-2026-10904: Inappropriate implementation in V8
* CVE-2026-10905: Use after free in Network
* CVE-2026-10906: Use after free in WebAuthentication
* CVE-2026-10907: Out of bounds write in ANGLE
* CVE-2026-10908: Use after free in FullScreen
* CVE-2026-10909: Use after free in Dawn
* CVE-2026-10910: Type Confusion in V8
* CVE-2026-10911: Insufficient validation of untrusted input in Media
* CVE-2026-10912: Insufficient validation of untrusted input in Extensions
* CVE-2026-10913: Use after free in ANGLE
* CVE-2026-10914: Use after free in ANGLE
* CVE-2026-10915: Use after free in Core
* CVE-2026-10916: Insufficient validation of untrusted input in DevTools
* CVE-2026-10917: Insufficient validation of untrusted input in Media
* CVE-2026-10918: Use after free in Viz
* CVE-2026-10919: Use after free in ANGLE
* CVE-2026-10920: Insufficient validation of untrusted input in WebShare
* CVE-2026-10921: Integer overflow in Dawn
* CVE-2026-10922: Insufficient validation of untrusted input in DevTools
* CVE-2026-10923: Use after free in WebAppInstalls
* CVE-2026-10924: Integer overflow in Chromecast
* CVE-2026-10925: Out of bounds write in Skia
* CVE-2026-10926: Use after free in Cast
* CVE-2026-10927: Out of bounds read in Dawn
* CVE-2026-10928: Script injection in Headless
* CVE-2026-10929: Heap buffer overflow in ANGLE
* CVE-2026-10930: Out of bounds read in ANGLE
* CVE-2026-10931: Use after free in FileSystem
* CVE-2026-10932: Use after free in UI
* CVE-2026-10933: Use after free in Audio
* CVE-2026-10934: Use after free in Autofill
* CVE-2026-10935: Inappropriate implementation in V8
* CVE-2026-10936: Type Confusion in V8
* CVE-2026-10937: Inappropriate implementation in Passwords
* CVE-2026-10938: Insufficient validation of untrusted input in Input
* CVE-2026-10939: Use after free in WebRTC
* CVE-2026-10940: Race in Codecs
* CVE-2026-10941: Out of bounds memory access in Skia
* CVE-2026-10942: Insufficient validation of untrusted input in UI
* CVE-2026-10943: Use after free in WebRTC
* CVE-2026-10944: Insufficient policy enforcement in Autofill
* CVE-2026-10945: Use after free in PDF
* CVE-2026-10946: Heap buffer overflow in Media
* CVE-2026-10947: Use after free in WebRTC
* CVE-2026-10948: Use after free in WebRTC
* CVE-2026-10949: Heap buffer overflow in Video
* CVE-2026-10950: Insufficient policy enforcement in Autofill
* CVE-2026-10951: Use after free in Autofill
* CVE-2026-10952: Use after free in Chrome for iOS
* CVE-2026-10953: Use after free in Core
* CVE-2026-10954: Use after free in Actor
* CVE-2026-10955: Type Confusion in ANGLE
* CVE-2026-10956: Use after free in MimeHandlerView
* CVE-2026-10957: Use after free in Glic
* CVE-2026-10958: Use after free in Chrome for iOS
* CVE-2026-10959: Use after free in Input
* CVE-2026-10960: Uninitialized Use in Codecs
* CVE-2026-10961: Use after free in Chrome for iOS
* CVE-2026-10962: Type Confusion in Media
* CVE-2026-10963: Integer overflow in V8
* CVE-2026-10964: Integer overflow in V8
* CVE-2026-10965: Integer overflow in DevTools
* CVE-2026-10966: Insufficient validation of untrusted input in Codecs
* CVE-2026-10967: Use after free in SurfaceCapture
* CVE-2026-10968: Insufficient validation of untrusted input in Dawn
* CVE-2026-10969: Insufficient validation of untrusted input in Extensions
* CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
* CVE-2026-10971: Insufficient validation of untrusted input in Printing
* CVE-2026-10972: Use after free in Ozone
* CVE-2026-10973: Uninitialized Use in Dawn
* CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
* CVE-2026-10975: Use after free in WebRTC
* CVE-2026-10976: Uninitialized Use in Dawn
* CVE-2026-10977: Uninitialized Use in Skia
* CVE-2026-10978: Use after free in Chromoting
* CVE-2026-10979: Out of bounds read in ANGLE
* CVE-2026-10980: Insufficient validation of untrusted input in DevTools
* CVE-2026-10981: Insufficient validation of untrusted input in Codecs
* CVE-2026-10982: Use after free in WebXR
* CVE-2026-10983: Insufficient validation of untrusted input in Dawn
* CVE-2026-10984: Inappropriate implementation in Accessibility
* CVE-2026-10985: Out of bounds read in Skia
* CVE-2026-10986: Integer overflow in Media
* CVE-2026-10987: Integer overflow in V8
* CVE-2026-10988: Use after free in Views
* CVE-2026-10989: Inappropriate implementation in V8
* CVE-2026-10990: Use after free in Glic
* CVE-2026-10991: Use after free in V8
* CVE-2026-10992: Insufficient data validation in Animation
* CVE-2026-10993: Heap buffer overflow in Skia
* CVE-2026-10994: Uninitialized Use in ANGLE
* CVE-2026-10995: Heap buffer overflow in TabStrip
* CVE-2026-10996: Inappropriate implementation in Workers
* CVE-2026-10997: Insufficient policy enforcement in Extensions
* CVE-2026-10998: Out of bounds read in Media
* CVE-2026-10999: Out of bounds memory access in ANGLE
* CVE-2026-11000: Use after free in Fonts
* CVE-2026-11001: Incorrect security UI in Payments
* CVE-2026-11002: Use after free in Autofill
* CVE-2026-11003: Use after free in WebRTC
* CVE-2026-11004: Out of bounds read in ANGLE
* CVE-2026-11005: Out of bounds read in ANGLE
* CVE-2026-11006: Out of bounds read in Dawn
* CVE-2026-11007: Insufficient validation of untrusted input in WebView
* CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
* CVE-2026-11009: Use after free in USB
* CVE-2026-11010: Use after free in WebShare
* CVE-2026-11011: Insufficient policy enforcement in Password Manager
* CVE-2026-11012: Use after free in Serial
* CVE-2026-11013: Insufficient validation of untrusted input in Network
* CVE-2026-11014: Insufficient policy enforcement in Extensions
* CVE-2026-11015: Out of bounds read in WebGPU
* CVE-2026-11016: Insufficient validation of untrusted input in Network
* CVE-2026-11017: Inappropriate implementation in Link Preview
* CVE-2026-11018: Insufficient policy enforcement in Actor
* CVE-2026-11019: Inappropriate implementation in Payments
* CVE-2026-11020: Inappropriate implementation in Extensions
* CVE-2026-11021: Insufficient validation of untrusted input in GPU
* CVE-2026-11022: Insufficient validation of untrusted input in DevTools
* CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
* CVE-2026-11024: Stack buffer overflow in Skia
* CVE-2026-11025: Insufficient policy enforcement in Navigation
* CVE-2026-11026: Insufficient policy enforcement in Extensions
* CVE-2026-11027: Insufficient validation of untrusted input in Glic
* CVE-2026-11028: Use after free in Media
* CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
* CVE-2026-11030: Use after free in Network
* CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
* CVE-2026-11032: Insufficient data validation in Password Manager
* CVE-2026-11033: Uninitialized Use in WebML
* CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
* CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
* CVE-2026-11036: Inappropriate implementation in DOM
* CVE-2026-11037: Out of bounds write in Codecs
* CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
* CVE-2026-11039: Uninitialized Use in Skia
* CVE-2026-11040: Use after free in ANGLE
* CVE-2026-11041: Insufficient validation of untrusted input in Media
* CVE-2026-11042: Use after free in Views
* CVE-2026-11043: Out of bounds write in ANGLE
* CVE-2026-11044: Integer overflow in ANGLE
* CVE-2026-11045: Insufficient validation of untrusted input in GPU
* CVE-2026-11046: Insufficient validation of untrusted input in Media
* CVE-2026-11047: Insufficient validation of untrusted input in Base
* CVE-2026-11048: Inappropriate implementation in Extensions
* CVE-2026-11049: Use after free in Password Manager
* CVE-2026-11050: Use after free in V8
* CVE-2026-11051: Out of bounds read in ANGLE
* CVE-2026-11052: Type Confusion in GPU
* CVE-2026-11053: VULNERABILITY in WebRTC
* CVE-2026-11054: Use after free in WebRTC
* CVE-2026-11055: Use after free in ANGLE
* CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
* CVE-2026-11057: Uninitialized Use in Skia
* CVE-2026-11058: Integer overflow in CredentialProvider
* CVE-2026-11059: Use after free in Blink
* CVE-2026-11060: Use after free in Media
* CVE-2026-11061: Out of bounds read in ANGLE
* CVE-2026-11062: Insufficient policy enforcement in Extensions
* CVE-2026-11063: Insufficient validation of untrusted input in WebNN
* CVE-2026-11064: Uninitialized Use in GPU
* CVE-2026-11065: Use after free in ANGLE
* CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
* CVE-2026-11067: Uninitialized Use in Dawn
* CVE-2026-11068: Use after free in WebSockets
* CVE-2026-11069: Insufficient validation of untrusted input in Cast
* CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
* CVE-2026-11071: Use after free in Base
* CVE-2026-11072: Use after free in WebView
* CVE-2026-11073: Use after free in WebGL
* CVE-2026-11074: Use after free in WebRTC
* CVE-2026-11075: Out of bounds read in V8
* CVE-2026-11076: Type Confusion in CSS
* CVE-2026-11077: Out of bounds read in Dawn
* CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
* CVE-2026-11079: Insufficient validation of untrusted input in Codecs
* CVE-2026-11080: Use after free in WebView
* CVE-2026-11081: Policy bypass in Canvas
* CVE-2026-11082: Use after free in GPU
* CVE-2026-11083: Inappropriate implementation in Password Manager
* CVE-2026-11084: Inappropriate implementation in Password Manager
* CVE-2026-11085: Integer overflow in GPU
* CVE-2026-11086: Insufficient validation of untrusted input in Dawn
* CVE-2026-11087: Uninitialized Use in ANGLE
* CVE-2026-11088: Integer overflow in ANGLE
* CVE-2026-11089: Uninitialized Use in Media
* CVE-2026-11090: Uninitialized Use in ANGLE
* CVE-2026-11091: Inappropriate implementation in Dawn
* CVE-2026-11092: Insufficient policy enforcement in DevTools
* CVE-2026-11093: Insufficient validation of untrusted input in Printing
* CVE-2026-11094: Use after free in Codecs
* CVE-2026-11095: Insufficient validation of untrusted input in Codecs
* CVE-2026-11096: Out of bounds read in WebRTC
* CVE-2026-11097: Inappropriate implementation in WebView
* CVE-2026-11098: Insufficient validation of untrusted input in GPU
* CVE-2026-11099: Vulnerability in Skia
* CVE-2026-11100: Use after free in File Input
* CVE-2026-11101: Uninitialized Use in Dawn
* CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
* CVE-2026-11103: Inappropriate implementation in Installer
* CVE-2026-11104: Uninitialized Use in ANGLE
* CVE-2026-11105: Insufficient validation of untrusted input in WebUI
* CVE-2026-11106: Inappropriate implementation in Media
* CVE-2026-11107: Inappropriate implementation in Downloads
* CVE-2026-11108: Inappropriate implementation in NFC
* CVE-2026-11109: Uninitialized Use in ANGLE
* CVE-2026-11110: Uninitialized Use in ANGLE
* CVE-2026-11111: Out of bounds read in ANGLE
* CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
* CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
* CVE-2026-11114: Use after free in Device Trust
* CVE-2026-11115: Use after free in Updater
* CVE-2026-11116: Use after free in Chromoting
* CVE-2026-11117: Use after free in Views
* CVE-2026-11118: Use after free in WebRTC
* CVE-2026-11119: Insufficient validation of untrusted input in GPU
* CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
* CVE-2026-11121: Insufficient validation of untrusted input in Skia
* CVE-2026-11122: Inappropriate implementation in Keyboard
* CVE-2026-11123: Uninitialized Use in ANGLE
* CVE-2026-11124: Heap buffer overflow in Skia
* CVE-2026-11125: Use after free in Compositing
* CVE-2026-11126: Insufficient validation of untrusted input in DevTools
* CVE-2026-11127: Inappropriate implementation in WebAPKs
* CVE-2026-11128: Insufficient validation of untrusted input in Web Share
* CVE-2026-11129: Inappropriate implementation in Extensions
* CVE-2026-11130: Use after free in Media
* CVE-2026-11131: Use after free in Autofill
* CVE-2026-11132: Policy bypass in Paint
* CVE-2026-11133: Insufficient policy enforcement in Paint
* CVE-2026-11134: Insufficient data validation in Media
* CVE-2026-11135: Insufficient policy enforcement in Autofill
* CVE-2026-11136: Use after free in Canvas
* CVE-2026-11137: Uninitialized Use in ANGLE
* CVE-2026-11138: Uninitialized Use in ANGLE
* CVE-2026-11139: Policy bypass in Paint
* CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
* CVE-2026-11141: Uninitialized Use in Audio
* CVE-2026-11142: Policy bypass in Paint
* CVE-2026-11143: Heap buffer overflow in Extensions
* CVE-2026-11144: Use after free in Media
* CVE-2026-11145: Race in Geolocation
* CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
* CVE-2026-11147: Use after free in WebML
* CVE-2026-11148: Inappropriate implementation in Payments
* CVE-2026-11149: Insufficient validation of untrusted input in Extensions
* CVE-2026-11150: Inappropriate implementation in XML
* CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
* CVE-2026-11152: Object lifecycle issue in Dawn
* CVE-2026-11153: Side-channel information leakage in Forms
* CVE-2026-11154: Use after free in Dawn
* CVE-2026-11155: Insufficient policy enforcement in CSS
* CVE-2026-11156: Inappropriate implementation in CSS
* CVE-2026-11157: Script injection in Accessibility
* CVE-2026-11158: Insufficient validation of untrusted input in Downloads
* CVE-2026-11159: Uninitialized Use in Skia
* CVE-2026-11160: Out of bounds read in Input
* CVE-2026-11161: Insufficient data validation in DataTransfer
* CVE-2026-11162: Insufficient policy enforcement in CSS
* CVE-2026-11163: Use after free in Messages
* CVE-2026-11164: Use after free in Blink
* CVE-2026-11165: Use after free in WebMIDI
* CVE-2026-11166: Inappropriate implementation in SVG
* CVE-2026-11167: Inappropriate implementation in WebView
* CVE-2026-11168: Insufficient policy enforcement in Extensions
* CVE-2026-11169: Inappropriate implementation in XML
* CVE-2026-11170: Inappropriate implementation in Chromoting
* CVE-2026-11171: Integer overflow in Blink
* CVE-2026-11172: Incorrect security UI in Contact Picker
* CVE-2026-11173: Out of bounds write in V8
* CVE-2026-11174: Insufficient policy enforcement in Site Isolation
* CVE-2026-11175: Incorrect security UI in Messages
* CVE-2026-11176: Inappropriate implementation in Media
* CVE-2026-11177: Use after free in Omnibox
* CVE-2026-11178: Policy bypass in WebView
* CVE-2026-11179: Inappropriate implementation in ORB
* CVE-2026-11180: Policy bypass in SVG
* CVE-2026-11181: Inappropriate implementation in Media Session
* CVE-2026-11182: Inappropriate implementation in SVG
* CVE-2026-11183: Out of bounds read in GWP-ASan
* CVE-2026-11184: Insufficient policy enforcement in Actor
* CVE-2026-11185: Use after free in V8
* CVE-2026-11186: Inappropriate implementation in CSS
* CVE-2026-11187: Insufficient policy enforcement in Glic
* CVE-2026-11188: Use after free in USB
* CVE-2026-11189: Insufficient validation of untrusted input in DevTools
* CVE-2026-11190: Insufficient policy enforcement in Extensions
* CVE-2026-11191: Out of bounds memory access in ANGLE
* CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
* CVE-2026-11193: Insufficient policy enforcement in Password Manager
* CVE-2026-11194: Inappropriate implementation in Network
* CVE-2026-11195: Inappropriate implementation in MHTML
* CVE-2026-11196: Type Confusion in XML
* CVE-2026-11197: Insufficient policy enforcement in Workers
* CVE-2026-11198: Insufficient validation of untrusted input in Codecs
* CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
* CVE-2026-11200: Inappropriate implementation in WebRTC
* CVE-2026-11201: Use after free in ServiceWorker
* CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
* CVE-2026-11203: Policy bypass in GPU
* CVE-2026-11204: Inappropriate implementation in Signin
* CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
* CVE-2026-11206: Policy bypass in ServiceWorker
* CVE-2026-11207: Insufficient validation of untrusted input in Autofill
* CVE-2026-11208: Use after free in Codecs
* CVE-2026-11209: Insufficient policy enforcement in Passwords
* CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
* CVE-2026-11211: Integer overflow in V8
* CVE-2026-11212: Insufficient policy enforcement in DevTools
* CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
* CVE-2026-11214: Inappropriate implementation in Chrome for iOS
* CVE-2026-11215: Inappropriate implementation in Cronet
* CVE-2026-11216: Incorrect security UI in File Input
* CVE-2026-11217: Insufficie ...

Please note that the description has been truncated due to length. Please refer to vendor advisory for the full description.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected chromedriver and / or chromium packages.

Plugin Details

Severity: Critical

ID: 342586

File Name: openSUSE-2026-21135-1.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 9/3/2026

Updated: 9/3/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.2

Percentile: 99.76

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-11120

CVSS v3

Risk Factor: Critical

Base Score: 9.6

Temporal Score: 8.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:novell:opensuse:16.0, p-cpe:/a:novell:opensuse:chromedriver, p-cpe:/a:novell:opensuse:chromium

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/31/2026

Vulnerability Publication Date: 6/2/2026

CISA Known Exploited Vulnerability Due Dates: 6/23/2026

Reference Information

CVE: CVE-2026-10881, CVE-2026-10882, CVE-2026-10883, CVE-2026-10884, CVE-2026-10885, CVE-2026-10886, CVE-2026-10887, CVE-2026-10888, CVE-2026-10889, CVE-2026-10890, CVE-2026-10891, CVE-2026-10892, CVE-2026-10893, CVE-2026-10894, CVE-2026-10895, CVE-2026-10896, CVE-2026-10897, CVE-2026-10898, CVE-2026-10899, CVE-2026-10900, CVE-2026-10901, CVE-2026-10902, CVE-2026-10903, CVE-2026-10904, CVE-2026-10905, CVE-2026-10906, CVE-2026-10907, CVE-2026-10908, CVE-2026-10909, CVE-2026-10910, CVE-2026-10911, CVE-2026-10912, CVE-2026-10913, CVE-2026-10914, CVE-2026-10915, CVE-2026-10916, CVE-2026-10917, CVE-2026-10918, CVE-2026-10919, CVE-2026-10920, CVE-2026-10921, CVE-2026-10922, CVE-2026-10923, CVE-2026-10924, CVE-2026-10925, CVE-2026-10926, CVE-2026-10927, CVE-2026-10928, CVE-2026-10929, CVE-2026-10930, CVE-2026-10931, CVE-2026-10932, CVE-2026-10933, CVE-2026-10934, CVE-2026-10935, CVE-2026-10936, CVE-2026-10937, CVE-2026-10938, CVE-2026-10939, CVE-2026-10940, CVE-2026-10941, CVE-2026-10942, CVE-2026-10943, CVE-2026-10944, CVE-2026-10945, CVE-2026-10946, CVE-2026-10947, CVE-2026-10948, CVE-2026-10949, CVE-2026-10950, CVE-2026-10951, CVE-2026-10952, CVE-2026-10953, CVE-2026-10954, CVE-2026-10955, CVE-2026-10956, CVE-2026-10957, CVE-2026-10958, CVE-2026-10959, CVE-2026-10960, CVE-2026-10961, CVE-2026-10962, CVE-2026-10963, CVE-2026-10964, CVE-2026-10965, CVE-2026-10966, CVE-2026-10967, CVE-2026-10968, CVE-2026-10969, CVE-2026-10970, CVE-2026-10971, CVE-2026-10972, CVE-2026-10973, CVE-2026-10974, CVE-2026-10975, CVE-2026-10976, CVE-2026-10977, CVE-2026-10978, CVE-2026-10979, CVE-2026-10980, CVE-2026-10981, CVE-2026-10982, CVE-2026-10983, CVE-2026-10984, CVE-2026-10985, CVE-2026-10986, CVE-2026-10987, CVE-2026-10988, CVE-2026-10989, CVE-2026-10990, CVE-2026-10991, CVE-2026-10992, CVE-2026-10993, CVE-2026-10994, CVE-2026-10995, CVE-2026-10996, CVE-2026-10997, CVE-2026-10998, CVE-2026-10999, CVE-2026-11000, CVE-2026-11001, CVE-2026-11002, CVE-2026-11003, CVE-2026-11004, CVE-2026-11005, CVE-2026-11006, CVE-2026-11007, CVE-2026-11008, CVE-2026-11009, CVE-2026-11010, CVE-2026-11011, CVE-2026-11012, CVE-2026-11013, CVE-2026-11014, CVE-2026-11015, CVE-2026-11016, CVE-2026-11017, CVE-2026-11018, CVE-2026-11019, CVE-2026-11020, CVE-2026-11021, CVE-2026-11022, CVE-2026-11023, CVE-2026-11024, CVE-2026-11025, CVE-2026-11026, CVE-2026-11027, CVE-2026-11028, CVE-2026-11029, CVE-2026-11030, CVE-2026-11031, CVE-2026-11032, CVE-2026-11033, CVE-2026-11034, CVE-2026-11035, CVE-2026-11036, CVE-2026-11037, CVE-2026-11038, CVE-2026-11039, CVE-2026-11040, CVE-2026-11041, CVE-2026-11042, CVE-2026-11043, CVE-2026-11044, CVE-2026-11045, CVE-2026-11046, CVE-2026-11047, CVE-2026-11048, CVE-2026-11049, CVE-2026-11050, CVE-2026-11051, CVE-2026-11052, CVE-2026-11053, CVE-2026-11054, CVE-2026-11055, CVE-2026-11056, CVE-2026-11057, CVE-2026-11058, CVE-2026-11059, CVE-2026-11060, CVE-2026-11061, CVE-2026-11062, CVE-2026-11063, CVE-2026-11064, CVE-2026-11065, CVE-2026-11066, CVE-2026-11067, CVE-2026-11068, CVE-2026-11069, CVE-2026-11070, CVE-2026-11071, CVE-2026-11072, CVE-2026-11073, CVE-2026-11074, CVE-2026-11075, CVE-2026-11076, CVE-2026-11077, CVE-2026-11078, CVE-2026-11079, CVE-2026-11080, CVE-2026-11081, CVE-2026-11082, CVE-2026-11083, CVE-2026-11084, CVE-2026-11085, CVE-2026-11086, CVE-2026-11087, CVE-2026-11088, CVE-2026-11089, CVE-2026-11090, CVE-2026-11091, CVE-2026-11092, CVE-2026-11093, CVE-2026-11094, CVE-2026-11095, CVE-2026-11096, CVE-2026-11097, CVE-2026-11098, CVE-2026-11099, CVE-2026-11100, CVE-2026-11101, CVE-2026-11102, CVE-2026-11103, CVE-2026-11104, CVE-2026-11105, CVE-2026-11106, CVE-2026-11107, CVE-2026-11108, CVE-2026-11109, CVE-2026-11110, CVE-2026-11111, CVE-2026-11112, CVE-2026-11113, CVE-2026-11114, CVE-2026-11115, CVE-2026-11116, CVE-2026-11117, CVE-2026-11118, CVE-2026-11119, CVE-2026-11120, CVE-2026-11121, CVE-2026-11122, CVE-2026-11123, CVE-2026-11124, CVE-2026-11125, CVE-2026-11126, CVE-2026-11127, CVE-2026-11128, CVE-2026-11129, CVE-2026-11130, CVE-2026-11131, CVE-2026-11132, CVE-2026-11133, CVE-2026-11134, CVE-2026-11135, CVE-2026-11136, CVE-2026-11137, CVE-2026-11138, CVE-2026-11139, CVE-2026-11140, CVE-2026-11141, CVE-2026-11142, CVE-2026-11143, CVE-2026-11144, CVE-2026-11145, CVE-2026-11146, CVE-2026-11147, CVE-2026-11148, CVE-2026-11149, CVE-2026-11150, CVE-2026-11151, CVE-2026-11152, CVE-2026-11153, CVE-2026-11154, CVE-2026-11155, CVE-2026-11156, CVE-2026-11157, CVE-2026-11158, CVE-2026-11159, CVE-2026-11160, CVE-2026-11161, CVE-2026-11162, CVE-2026-11163, CVE-2026-11164, CVE-2026-11165, CVE-2026-11166, CVE-2026-11167, CVE-2026-11168, CVE-2026-11169, CVE-2026-11170, CVE-2026-11171, CVE-2026-11172, CVE-2026-11173, CVE-2026-11174, CVE-2026-11175, CVE-2026-11176, CVE-2026-11177, CVE-2026-11178, CVE-2026-11179, CVE-2026-11180, CVE-2026-11181, CVE-2026-11182, CVE-2026-11183, CVE-2026-11184, CVE-2026-11185, CVE-2026-11186, CVE-2026-11187, CVE-2026-11188, CVE-2026-11189, CVE-2026-11190, CVE-2026-11191, CVE-2026-11192, CVE-2026-11193, CVE-2026-11194, CVE-2026-11195, CVE-2026-11196, CVE-2026-11197, CVE-2026-11198, CVE-2026-11199, CVE-2026-11200, CVE-2026-11201, CVE-2026-11202, CVE-2026-11203, CVE-2026-11204, CVE-2026-11205, CVE-2026-11206, CVE-2026-11207, CVE-2026-11208, CVE-2026-11209, CVE-2026-11210, CVE-2026-11211, CVE-2026-11212, CVE-2026-11213, CVE-2026-11214, CVE-2026-11215, CVE-2026-11216, CVE-2026-11217, CVE-2026-11218, CVE-2026-11219, CVE-2026-11220, CVE-2026-11221, CVE-2026-11222, CVE-2026-11223, CVE-2026-11224, CVE-2026-11225, CVE-2026-11226, CVE-2026-11227, CVE-2026-11228, CVE-2026-11229, CVE-2026-11230, CVE-2026-11231, CVE-2026-11232, CVE-2026-11233, CVE-2026-11234, CVE-2026-11235, CVE-2026-11236, CVE-2026-11237, CVE-2026-11238, CVE-2026-11239, CVE-2026-11240, CVE-2026-11241, CVE-2026-11242, CVE-2026-11243, CVE-2026-11244, CVE-2026-11245, CVE-2026-11246, CVE-2026-11247, CVE-2026-11248, CVE-2026-11249, CVE-2026-11250, CVE-2026-11251, CVE-2026-11252, CVE-2026-11253, CVE-2026-11254, CVE-2026-11255, CVE-2026-11256, CVE-2026-11257, CVE-2026-11258, CVE-2026-11259, CVE-2026-11260, CVE-2026-11261, CVE-2026-11262, CVE-2026-11263, CVE-2026-11264, CVE-2026-11265, CVE-2026-11266, CVE-2026-11267, CVE-2026-11268, CVE-2026-11269, CVE-2026-11270, CVE-2026-11271, CVE-2026-11272, CVE-2026-11273, CVE-2026-11274, CVE-2026-11275, CVE-2026-11276, CVE-2026-11277, CVE-2026-11278, CVE-2026-11279, CVE-2026-11280, CVE-2026-11281, CVE-2026-11282, CVE-2026-11283, CVE-2026-11284, CVE-2026-11285, CVE-2026-11286, CVE-2026-11287, CVE-2026-11288, CVE-2026-11289, CVE-2026-11290, CVE-2026-11291, CVE-2026-11292, CVE-2026-11293, CVE-2026-11294, CVE-2026-11295, CVE-2026-11296, CVE-2026-11297, CVE-2026-11298, CVE-2026-11299, CVE-2026-11300, CVE-2026-11301, CVE-2026-11302, CVE-2026-11303, CVE-2026-11304, CVE-2026-11305, CVE-2026-11306, CVE-2026-11307, CVE-2026-11308, CVE-2026-11309, CVE-2026-11628, CVE-2026-11629, CVE-2026-11630, CVE-2026-11631, CVE-2026-11632, CVE-2026-11633, CVE-2026-11634, CVE-2026-11635, CVE-2026-11636, CVE-2026-11637, CVE-2026-11638, CVE-2026-11639, CVE-2026-11640, CVE-2026-11641, CVE-2026-11642, CVE-2026-11643, CVE-2026-11644, CVE-2026-11645, CVE-2026-11646, CVE-2026-11647, CVE-2026-11648, CVE-2026-11649, CVE-2026-11650, CVE-2026-11651, CVE-2026-11652, CVE-2026-11653, CVE-2026-11654, CVE-2026-11655, CVE-2026-11656, CVE-2026-11657, CVE-2026-11658, CVE-2026-11659, CVE-2026-11660, CVE-2026-11661, CVE-2026-11662, CVE-2026-11663, CVE-2026-11664, CVE-2026-11665, CVE-2026-11666, CVE-2026-11667, CVE-2026-11668, CVE-2026-11669, CVE-2026-11670, CVE-2026-11671, CVE-2026-11672, CVE-2026-11673, CVE-2026-11674, CVE-2026-11675, CVE-2026-11676, CVE-2026-11677, CVE-2026-11678, CVE-2026-11679, CVE-2026-11680, CVE-2026-11681, CVE-2026-11682, CVE-2026-11683, CVE-2026-11684, CVE-2026-11685, CVE-2026-11686, CVE-2026-11687, CVE-2026-11688, CVE-2026-11689, CVE-2026-11690, CVE-2026-11691, CVE-2026-11692, CVE-2026-11693, CVE-2026-11694, CVE-2026-11695, CVE-2026-11696, CVE-2026-11697, CVE-2026-11698, CVE-2026-11699, CVE-2026-11700, CVE-2026-11701, CVE-2026-12007, CVE-2026-12008, CVE-2026-12009, CVE-2026-12010, CVE-2026-12011, CVE-2026-12012, CVE-2026-12013, CVE-2026-12014, CVE-2026-12015, CVE-2026-12016, CVE-2026-12017, CVE-2026-12018, CVE-2026-12019, CVE-2026-12020, CVE-2026-12022, CVE-2026-12023, CVE-2026-12024, CVE-2026-12025, CVE-2026-12026, CVE-2026-12027, CVE-2026-12028, CVE-2026-12029, CVE-2026-12030, CVE-2026-12031, CVE-2026-12032, CVE-2026-12033, CVE-2026-12034, CVE-2026-12035, CVE-2026-12437, CVE-2026-12438, CVE-2026-12439, CVE-2026-12440, CVE-2026-12441, CVE-2026-12442, CVE-2026-12443, CVE-2026-12444, CVE-2026-12445, CVE-2026-12446, CVE-2026-12447, CVE-2026-12448, CVE-2026-12449, CVE-2026-12450, CVE-2026-12451, CVE-2026-12452, CVE-2026-12453, CVE-2026-12454, CVE-2026-12455, CVE-2026-12456, CVE-2026-12457, CVE-2026-12458, CVE-2026-12459, CVE-2026-12460, CVE-2026-12461, CVE-2026-12462, CVE-2026-12463, CVE-2026-12464, CVE-2026-12465, CVE-2026-12466, CVE-2026-12467, CVE-2026-12468, CVE-2026-12469

Detections

Analytics

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21135-1)

critical Nessus Plugin ID 342586

Synopsis

Description

Solution

See Also

Plugin Details

Risk Information

VPR

CVSS v2

CVSS v3

Vulnerability Information

Reference Information