{"id":"CVE-2023-5186","aliases":["DEBIAN-CVE-2023-5186","DSA-5508-1","EUVD-2023-57523","GHSA-qf8c-938w-pvrw","MGASA-2023-0283","openSUSE-SU-2023:0277-1","openSUSE-SU-2023:0297-1","openSUSE-SU-2023:0298-1","openSUSE-SU-2024:13269-1","openSUSE-SU-2024:13276-1"],"status":"published","title":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker...","description":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High)","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00935,"percentile":0.61207,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-09-28T15:23:18Z","modified":"2026-10-26T18:00:13Z","fixes":[{"ecosystem":"Debian:12","package":"chromium","fixed_in":["117.0.5938.132-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["117.0.5938.132-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["117.0.5938.132-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1~deb11u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1~deb11u1"}]}],"versions":["100.0.4896.127-1","100.0.4896.127-1~deb11u1","100.0.4896.60-1","100.0.4896.60-1~deb11u1","100.0.4896.75-1","100.0.4896.75-1~deb11u1","100.0.4896.88-1","100.0.4896.88-1~deb11u1","101.0.4951.41-1","101.0.4951.41-1~deb11u1","101.0.4951.41-2","101.0.4951.54-1","101.0.4951.64-1","101.0.4951.64-1~deb11u1","102.0.5005.115-1","102.0.5005.115-1~deb11u1","102.0.5005.61-1","102.0.5005.61-1~deb11u1","103.0.5060.114-1","103.0.5060.114-1~deb11u1","103.0.5060.134-1","103.0.5060.134-1~deb11u1","103.0.5060.53-1","103.0.5060.53-1~deb11u1","104.0.5112.101-1","104.0.5112.101-1~deb11u1","104.0.5112.79-1","104.0.5112.79-1~deb11u1","105.0.5195.102-1","105.0.5195.102-1~deb11u1","105.0.5195.125-1","105.0.5195.125-1~deb11u1","105.0.5195.52-1","105.0.5195.52-1~deb11u1","106.0.5249.103-1","106.0.5249.103-2","106.0.5249.119-1","106.0.5249.119-1~deb11u1","106.0.5249.61-1","106.0.5249.61-1~deb11u1","106.0.5249.91-1","106.0.5249.91-1~deb11u1","107.0.5304.110-1","107.0.5304.110-1~deb11u1","107.0.5304.110-2","107.0.5304.121-1","107.0.5304.121-1~deb11u1","107.0.5304.68-1","107.0.5304.68-1~deb11u1","107.0.5304.87-1","107.0.5304.87-1~deb11u1","108.0.5359.124-1","108.0.5359.124-1~deb11u1","108.0.5359.71-1","108.0.5359.71-2","108.0.5359.71-2~deb11u1","108.0.5359.94-1","108.0.5359.94-1~deb11u1","109.0.5414.119-1","109.0.5414.119-1~deb11u1","109.0.5414.74-1","109.0.5414.74-2","109.0.5414.74-2~deb11u1","110.0.5481.177-1","110.0.5481.177-1~deb11u1","110.0.5481.77-1","110.0.5481.77-1~deb11u1","110.0.5481.77-2","111.0.5563.110-1","111.0.5563.110-1~deb11u1","111.0.5563.64-1","111.0.5563.64-1~deb11u1","112.0.5615.121-1","112.0.5615.121-1~deb11u1","112.0.5615.138-1","112.0.5615.138-1~deb11u1","112.0.5615.49-1","112.0.5615.49-2","112.0.5615.49-2~deb11u1","112.0.5615.49-2~deb11u2","113.0.5672.126-1","113.0.5672.126-1~deb11u1","113.0.5672.63-1","113.0.5672.63-1~deb11u1","113.0.5672.63-2","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","90.0.4430.212-1","93.0.4577.82-1","97.0.4692.71-0.1","97.0.4692.71-0.1~deb11u1","97.0.4692.99-1","97.0.4692.99-1~deb11u1","97.0.4692.99-1~deb11u2","98.0.4758.102-1","98.0.4758.102-1~deb11u1","98.0.4758.80-1","98.0.4758.80-1~deb11u1","99.0.4818.0-0.1","99.0.4844.51-1","99.0.4844.51-1~deb11u1","99.0.4844.51-2","99.0.4844.74-1","99.0.4844.74-1~deb11u1","99.0.4844.84-1","99.0.4844.84-1~deb11u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1~deb11u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1.mga9.tainted"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-bp155.2.40.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-bp155.2.40.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-bp155.2.40.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-bp155.2.40.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5 NonFree","package":"opera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103.0.4928.16-lp155.3.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4 NonFree","package":"opera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103.0.4928.16-lp154.2.53.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5938.132-1.1"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"google","product":"chrome"}],"references":[{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://crbug.com/1478889","tags":["x_transferred","Permissions Required","report"]},{"url":"https://www.debian.org/security/2023/dsa-5508","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202401-34","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5186"},{"url":"https://github.com/advisories/GHSA-qf8c-938w-pvrw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5186","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0283.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32317","tags":["report"]},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_21.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_15.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XVWTK2X25FKSQAO2JO5SKRXBOHGOHPUO/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215776","tags":["report"]},{"url":"https://bugzilla.suse.com/1215778","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5217","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SA3UIF6YUP4F422WZCCPKQ6TLSBG7YAK/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V5KRGLOBRAIYNFCNZH4YM2ETGNMPQEKZ/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-5186","description":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High)","status":"published","published":"2023-09-28T15:23:18.607Z","modified":"2025-02-13T17:19:56.138Z","updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57523","description":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High)","status":"published","published":"2023-09-28T15:23:18Z","modified":"2025-02-13T17:19:56Z","updated_at":"2026-11-03T00:03:48.029386Z"}],"ghsa":[{"id":"GHSA-qf8c-938w-pvrw","title":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker...","description":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High)","status":"published","published":"2023-09-28T18:30:45Z","modified":"2024-01-31T18:31:20Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:55:31.245778Z"}],"nvd":[{"id":"CVE-2023-5186","description":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High)","status":"published","published":"2023-09-28T16:15:10.76Z","modified":"2026-06-17T06:47:45.117Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:31.699785Z"}],"osv":[{"id":"CVE-2023-5186","description":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High)","status":"published","published":"2023-09-28T16:15:10.76Z","modified":"2026-04-16T04:39:08.076215584Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-5186","description":"Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High)","status":"published","published":"2023-09-28T16:15:10.76Z","modified":"2026-10-26T18:00:13.21023722Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"DSA-5508-1","title":"chromium - security update","status":"published","published":"2023-09-29T00:00:00Z","modified":"2026-03-09T02:11:05.205539Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0283","title":"Updated chromium-browser-stable package fixes bugs and vulnerabilities","description":"The chromium-browser-stable package has been updated to the 117.0.5938.92\nrelease, fixing bugs and 31 vulnerabilities, together with 117.0.5938.92,\n117.0.5938.88, 117.0.5938.62, 116.0.5845.187 and 116.0.5845.179.\n\nGoogle is aware that an exploit for CVE-2023-5217 exists in the wild.\n\nHigh CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx.\nReported by Clément Lecigne of Google's Threat Analysis Group on\n2023-09-25\n\nHigh CVE-2023-5186: Use after free in Passwords. Reported by [pwn2car]\non 2023-09-05\n\nHigh CVE-2023-5187: Use after free in Extensions. Reported by\nThomas Orlita on 2023-08-25\n\nCritical CVE-2023-4863: Heap buffer overflow in WebP. Reported by Apple\nSecurity Engineering and Architecture (SEAR) and The Citizen Lab at The\nUniversity of Torontoʼs Munk School on 2023-09-06\n\nMedium CVE-2023-4900: Inappropriate implementation in Custom Tabs.\nReported by Levit Nudi from Kenya on 2023-04-06\n\nMedium CVE-2023-4901: Inappropriate implementation in Prompts. Reported\nby Kang Ali on 2023-06-29\n\nMedium CVE-2023-4902: Inappropriate implementation in Input. Reported by\nAxel Chong on 2023-06-14\n\nMedium CVE-2023-4903: Inappropriate implementation in Custom Mobile Tabs.\nReported by Ahmed ElMasry on 2023-05-18\n\nMedium CVE-2023-4904: Insufficient policy enforcement in Downloads.\nReported by Tudor Enache @tudorhacks on 2023-06-09\n\nMedium CVE-2023-4905: Inappropriate implementation in Prompts. Reported\nby Hafiizh on 2023-04-29\n\nLow CVE-2023-4906: Insufficient policy enforcement in Autofill. Reported\nby Ahmed ElMasry on 2023-05-30\n\nLow CVE-2023-4907: Inappropriate implementation in Intents. Reported by\nMohit Raj (shadow2639)  on 2023-07-04\n\nLow CVE-2023-4908: Inappropriate implementation in Picture in Picture.\nReported by Axel Chong on 2023-06-06\n\nLow CVE-2023-4909: Inappropriate implementation in Interstitials.\nReported by Axel Chong on 2023-07-09\n\nCritical CVE-2023-4863: Heap buffer overflow in WebP\n\nHigh CVE-2023-4761: Out of bounds memory access in FedCM. Reported by\nDarkNavy on 2023-08-28\n\nHigh CVE-2023-4762: Type Confusion in V8. Reported by anonymous on\n2023-08-16\n\nHigh CVE-2023-4763: Use after free in Networks. Reported by anonymous\non 2023-08-03\n\nHigh CVE-2023-4764: Incorrect security UI in BFCache. Reported by Irvan\nKurniawan (sourc7) on 2023-05-20\n","status":"published","published":"2023-10-03T10:53:29Z","modified":"2026-04-16T04:42:09.759325859Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2023:0277-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\n- Chromium 117.0.5938.132 (boo#1215776):\n  * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778)\n  * CVE-2023-5186: Use after free in Passwords\n  * CVE-2023-5187: Use after free in Extensions\n\n- Chromium 117.0.5938.92:\n  * stability improvements\n","status":"published","published":"2023-09-29T07:34:25Z","modified":"2026-02-04T04:29:20.029317Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2023:0297-1","title":"Security update for opera","description":"This update for opera fixes the following issues:\n\n- Update to 103.0.4928.16\n  * CHR-9416 Updating Chromium on desktop-stable-* branches\n  * CHR-9433 Update Chromium on desktop-stable-117-4928 to\n    117.0.5938.89\n  * CHR-9449 Update Chromium on desktop-stable-117-4928 to\n    117.0.5938.132\n  * DNA-110337 Opera Intro extension custom versions\n  * DNA-111454 Player animations visual adjustments\n  * DNA-111618 Turn on #password-generator on all streams\n  * DNA-111645 Turn on flag #player-service-react on\n    developer stream\n  * DNA-111708 Player home page is shown while music service is\n    being loaded\n  * DNA-111722 [Tab strip][Tab island] Add tab in tab island\n    button appears after size of tabs is changed\n  * DNA-111727 JsonPrefStore is created twice for Local State file\n  * DNA-111838 Promote 103.0 to stable\n  * DNA-111845 Turn on flag #player-service-react on all streams\n  * DNA-111868 Translations for O103\n  * DNA-111874 OMenu and Context Menus has transparent few\n    px border\n- The update to chromium 117.0.5938.89 fixes following issues:\n  CVE-2023-5217, CVE-2023-5186, CVE-2023-5187\n- Complete Opera 103 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-103/\n\n- Update to 102.0.4880.78\n  * DNA-110952 Crash at base::subtle::RefCountedBase::\n    ReleaseImpl() const\n\n- Update to 102.0.4880.70\n  * DNA-105016 Do not open file selector when closing easy files\n    dialog with 'close this popup' option\n  * DNA-110437 Extensions font color in dark mode makes the text\n    not visible\n  * DNA-110443 Crash at EasyFilesView::ShowFileSelector\n  * DNA-111231 Amazon Music logo update in sidebar Player\n  * DNA-111280 Make import from Crypto Browser to Opera Browser\n    easier\n  * DNA-111355 [Sidebar] DevTools is not working correctly in\n    with sidebar panel\n  * DNA-111708 Player home page is shown while music service is\n    being loaded\n  * DNA-111162 Refresh Player home page\n  * DNA-111164 Implement animation in Player home page\n\n- Update to 102.0.4880.56\n  * DNA-110785 Crash at static void base::allocator::\n    UnretainedDanglingRawPtrDetectedDumpWithoutCrashing\n    (unsigned __int64)\n  * DNA-110973 Crash after dragging tab from island to another\n    screen\n  * DNA-111199 Disable user_education tests from\n    component_unittests\n  * DNA-111369 Crash at views::View::DoRemoveChildView(views::\n    View*, bool, bool, views::View*)\n  * DNA-111538 All new open windows don`t have a close button 'x'\n    in the right upper corner.\n- Changes in 102.0.4880.51\n  * CHR-9416 Automatic tries of updating Chromium on\n    desktop-stable-* branches\n  * DNA-110101 [Linux] Maximize/restore button does not work\n    properly\n  * DNA-110669 duplicated hints on system buttons\n  * DNA-110823 Uninstallation Survey Countries\n  * DNA-110881 Scroll bar doesn't change color in dark mode\n  * DNA-110930 Capture mouse events on the 1-pixel edge for\n    DevTools\n  * DNA-110935 ChatSonic colors are unreadable in Dark Mode\n  * DNA-111034 Dynamic icon does not look good in edit-tile-modal\n  * DNA-111035 Removal custom-image should restore dynamic icon\n  * DNA-111177 [Start page] Letter in SD is black on light\n    wallpaper\n  * DNA-111488 Improve profile migration for\n    desktop-stable-116-4880\n\n- Update to 102.0.4880.46\n  * CHR-9416 Automatic tries of updating Chromium on\n    desktop-stable-* branches\n  * DNA-110216 [Sidebar] Straight lines instead of rounded corners\n  * DNA-110539 [LIN] Crash at content::WebContentsImpl::\n    GetLastCommittedURL()\n  * DNA-110631 AB test mechanism for Speed Dial\n  * DNA-110656 [TabStrip] Memory leak for tab group\n  * DNA-111322 Only show splash screen on major version update\n  * DNA-111417 Crash at opera::component_based::\n    TabAnimationController::StartAnimatedLayout(opera::\n    component_based::TabAnimationController::AnimationInfo,\n    base::OnceCallback)\n  * DNA-111420 Update continue on link for euro rtv agd\n  * DNA-111440 Crash at opera::component_based::\n    ComponentTabBar::GetActiveTab()\n","status":"published","published":"2023-10-11T07:10:18Z","modified":"2026-02-04T04:20:56.113952Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2023:0298-1","title":"Security update for opera","description":"This update for opera fixes the following issues:\n\n- Update to 103.0.4928.16\n  * CHR-9416 Updating Chromium on desktop-stable-* branches\n  * CHR-9433 Update Chromium on desktop-stable-117-4928 to\n    117.0.5938.89\n  * CHR-9449 Update Chromium on desktop-stable-117-4928 to\n    117.0.5938.132\n  * DNA-110337 Opera Intro extension custom versions\n  * DNA-111454 Player animations visual adjustments\n  * DNA-111618 Turn on #password-generator on all streams\n  * DNA-111645 Turn on flag #player-service-react on\n    developer stream\n  * DNA-111708 Player home page is shown while music service is\n    being loaded\n  * DNA-111722 [Tab strip][Tab island] Add tab in tab island\n    button appears after size of tabs is changed\n  * DNA-111727 JsonPrefStore is created twice for Local State file\n  * DNA-111838 Promote 103.0 to stable\n  * DNA-111845 Turn on flag #player-service-react on all streams\n  * DNA-111868 Translations for O103\n  * DNA-111874 OMenu and Context Menus has transparent few\n    px border\n- The update to chromium 117.0.5938.89 fixes following issues:\n  CVE-2023-5217, CVE-2023-5186, CVE-2023-5187\n- Complete Opera 103 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-103/\n\n- Update to 102.0.4880.78\n  * DNA-110952 Crash at base::subtle::RefCountedBase::\n    ReleaseImpl() const\n\n- Update to 102.0.4880.70\n  * DNA-105016 Do not open file selector when closing easy files\n    dialog with 'close this popup' option\n  * DNA-110437 Extensions font color in dark mode makes the text\n    not visible\n  * DNA-110443 Crash at EasyFilesView::ShowFileSelector\n  * DNA-111231 Amazon Music logo update in sidebar Player\n  * DNA-111280 Make import from Crypto Browser to Opera Browser\n    easier\n  * DNA-111355 [Sidebar] DevTools is not working correctly in\n    with sidebar panel\n  * DNA-111708 Player home page is shown while music service is\n    being loaded\n  * DNA-111162 Refresh Player home page\n  * DNA-111164 Implement animation in Player home page\n\n- Update to 102.0.4880.56\n  * DNA-110785 Crash at static void base::allocator::\n    UnretainedDanglingRawPtrDetectedDumpWithoutCrashing\n    (unsigned __int64)\n  * DNA-110973 Crash after dragging tab from island to another\n    screen\n  * DNA-111199 Disable user_education tests from\n    component_unittests\n  * DNA-111369 Crash at views::View::DoRemoveChildView(views::\n    View*, bool, bool, views::View*)\n  * DNA-111538 All new open windows don`t have a close button 'x'\n    in the right upper corner.\n- Changes in 102.0.4880.51\n  * CHR-9416 Automatic tries of updating Chromium on\n    desktop-stable-* branches\n  * DNA-110101 [Linux] Maximize/restore button does not work\n    properly\n  * DNA-110669 duplicated hints on system buttons\n  * DNA-110823 Uninstallation Survey Countries\n  * DNA-110881 Scroll bar doesn't change color in dark mode\n  * DNA-110930 Capture mouse events on the 1-pixel edge for\n    DevTools\n  * DNA-110935 ChatSonic colors are unreadable in Dark Mode\n  * DNA-111034 Dynamic icon does not look good in edit-tile-modal\n  * DNA-111035 Removal custom-image should restore dynamic icon\n  * DNA-111177 [Start page] Letter in SD is black on light\n    wallpaper\n  * DNA-111488 Improve profile migration for\n    desktop-stable-116-4880\n\n- Update to 102.0.4880.46\n  * CHR-9416 Automatic tries of updating Chromium on\n    desktop-stable-* branches\n  * DNA-110216 [Sidebar] Straight lines instead of rounded corners\n  * DNA-110539 [LIN] Crash at content::WebContentsImpl::\n    GetLastCommittedURL()\n  * DNA-110631 AB test mechanism for Speed Dial\n  * DNA-110656 [TabStrip] Memory leak for tab group\n  * DNA-111322 Only show splash screen on major version update\n  * DNA-111417 Crash at opera::component_based::\n    TabAnimationController::StartAnimatedLayout(opera::\n    component_based::TabAnimationController::AnimationInfo,\n    base::OnceCallback)\n  * DNA-111420 Update continue on link for euro rtv agd\n  * DNA-111440 Crash at opera::component_based::\n    ComponentTabBar::GetActiveTab()\n","status":"published","published":"2023-10-11T07:10:39Z","modified":"2025-05-07T18:15:27.827315Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:13269-1","title":"chromedriver-117.0.5938.132-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:44.946635Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13276-1","title":"ungoogled-chromium-117.0.5938.132-1.1 on GA media","description":"These are all security issues fixed in the ungoogled-chromium-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:59.138783Z","updated_at":"2026-11-02T16:58:36.025801Z"}]}}