{"id":"CVE-2026-106366","aliases":["DEBIAN-CVE-2026-106366","EUVD-2026-93800","GHSA-p5x7-pmr2-6jpr","openSUSE-SU-2026:12091-1","openSUSE-SU-2026:22041-1","openSUSE-SU-2026:22124-1"],"status":"published","title":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a...","description":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00217,"percentile":0.12287,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-459"],"published":"2026-10-06T18:41:07Z","modified":"2026-11-01T17:28:15Z","fixes":[{"ecosystem":"Debian:12","package":"chromium","fixed_in":["155.0.8059.39-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["155.0.8059.39-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["155.0.8059.39-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"155.0.8059.39-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1","119.0.6045.159-1~deb11u1","119.0.6045.159-1~deb12u1","119.0.6045.199-1","119.0.6045.199-1~deb11u1","119.0.6045.199-1~deb12u1","120.0.6099.109-1","120.0.6099.109-1~deb11u1","120.0.6099.109-1~deb12u1","120.0.6099.129-1","120.0.6099.129-1~deb11u1","120.0.6099.129-1~deb12u1","120.0.6099.199-1","120.0.6099.199-1~deb11u1","120.0.6099.199-1~deb12u1","120.0.6099.216-1","120.0.6099.216-1~deb11u1","120.0.6099.216-1~deb12u1","120.0.6099.224-1","120.0.6099.224-1~deb11u1","120.0.6099.224-1~deb12u1","120.0.6099.224-2","120.0.6099.71-1","120.0.6099.71-1~deb11u1","120.0.6099.71-1~deb12u1","121.0.6167.139-1","121.0.6167.139-1~deb12u1","121.0.6167.160-1","121.0.6167.160-1~deb12u1","121.0.6167.85-1","121.0.6167.85-1~deb12u1","122.0.6261.111-1","122.0.6261.111-1~deb12u1","122.0.6261.128-1","122.0.6261.128-1~deb12u1","122.0.6261.57-1","122.0.6261.57-1~deb12u1","122.0.6261.94-1","122.0.6261.94-1~deb12u1","123.0.6312.105-1","123.0.6312.105-1~deb12u1","123.0.6312.105-1~deb13u1","123.0.6312.105-2","123.0.6312.122-1","123.0.6312.122-1~deb12u1","123.0.6312.58-1","123.0.6312.86-1","123.0.6312.86-1~deb12u1","124.0.6367.118-1","124.0.6367.118-1~deb12u1","124.0.6367.155-1","124.0.6367.155-1~deb12u1","124.0.6367.201-1","124.0.6367.201-1~deb12u1","124.0.6367.207-1","124.0.6367.207-1~deb12u1","124.0.6367.60-1","124.0.6367.60-1~deb12u1","124.0.6367.60-2","124.0.6367.78-1","124.0.6367.78-1~deb12u1","125.0.6422.112-1","125.0.6422.112-1~deb12u1","125.0.6422.141-1","125.0.6422.141-1~deb12u1","125.0.6422.60-1","125.0.6422.60-1~deb12u1","125.0.6422.76-1","125.0.6422.76-1~deb12u1","126.0.6478.114-1","126.0.6478.114-1~deb12u1","126.0.6478.126-1","126.0.6478.126-1~deb12u1","126.0.6478.126-1~deb13u1","126.0.6478.182-1","126.0.6478.182-1~deb12u1","126.0.6478.56-1","126.0.6478.56-1~deb12u1","127.0.6533.119-1","127.0.6533.119-1~deb13u1","127.0.6533.88-1","127.0.6533.88-1~deb12u1","127.0.6533.99-1","127.0.6533.99-1~deb12u1","128.0.6613.113-1","128.0.6613.113-1~deb12u1","128.0.6613.113-1~deb13u1","128.0.6613.119-1","128.0.6613.119-1~deb12u1","128.0.6613.137-1","128.0.6613.137-1~deb12u1","128.0.6613.84-1","128.0.6613.84-1~deb12u1","129.0.6668.100-1","129.0.6668.100-1~deb12u1","129.0.6668.100-2","129.0.6668.58-1","129.0.6668.58-1~deb12u1","129.0.6668.70-1","129.0.6668.70-1~deb12u1","129.0.6668.89-1","129.0.6668.89-1~deb12u1","130.0.6723.116-1","130.0.6723.116-1~deb12u1","130.0.6723.58-1","130.0.6723.58-1~deb12u1","130.0.6723.69-1","130.0.6723.69-1~deb12u1","130.0.6723.91-1","130.0.6723.91-1~deb12u1","130.0.6723.91-2","131.0.6778.108-1","131.0.6778.108-1~deb12u1","131.0.6778.139-1","131.0.6778.139-1~deb12u1","131.0.6778.204-1","131.0.6778.204-1~deb12u1","131.0.6778.264-1","131.0.6778.264-1~deb12u1","131.0.6778.85-1","131.0.6778.85-1~deb12u1","132.0.6834.110-1","132.0.6834.110-1~deb12u1","132.0.6834.159-1","132.0.6834.159-1~deb12u1","132.0.6834.83-1","132.0.6834.83-1~deb12u1","133.0.6943.126-1","133.0.6943.126-1~deb12u1","133.0.6943.141-2","133.0.6943.53-1","133.0.6943.53-1~deb12u1","133.0.6943.98-1","133.0.6943.98-1~deb12u1","134.0.6998.117-1","134.0.6998.117-1~deb12u1","134.0.6998.35-1","134.0.6998.35-1~deb12u1","134.0.6998.35-2","134.0.6998.35-3","134.0.6998.88-1","134.0.6998.88-1~deb12u1","135.0.7049.114-1","135.0.7049.52-1","135.0.7049.52-1~deb12u1","135.0.7049.84-1","135.0.7049.84-1~deb12u1","135.0.7049.95-1","135.0.7049.95-1~deb12u1","136.0.7103.113-1","136.0.7103.113-1~deb12u1","136.0.7103.59-2","136.0.7103.59-2~deb12u2","136.0.7103.92-1","136.0.7103.92-1~deb12u1","136.0.7103.92-2","137.0.7151.103-1","137.0.7151.103-1~deb12u1","137.0.7151.119-1","137.0.7151.119-1~deb12u1","137.0.7151.55-1","137.0.7151.55-2","137.0.7151.55-3","137.0.7151.55-3~deb12u1","137.0.7151.68-1","137.0.7151.68-1~deb12u1","138.0.7204.157-1","138.0.7204.157-1~deb12u1","138.0.7204.168-1","138.0.7204.168-1~deb12u1","138.0.7204.183-1","138.0.7204.183-1~deb12u1","138.0.7204.49-1","138.0.7204.49-1~deb12u1","138.0.7204.92-1","138.0.7204.92-1~deb12u1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.101-1","147.0.7727.101-1~deb12u1","147.0.7727.101-1~deb13u1","147.0.7727.116-1","147.0.7727.116-1~deb12u1","147.0.7727.116-1~deb13u1","147.0.7727.137-1","147.0.7727.137-1~deb12u1","147.0.7727.137-1~deb13u1","147.0.7727.55-1","147.0.7727.55-1~deb12u1","147.0.7727.55-1~deb13u1","148.0.7778.167-1","148.0.7778.167-1~deb12u1","148.0.7778.167-1~deb13u1","148.0.7778.178-1","148.0.7778.178-1~deb12u1","148.0.7778.178-1~deb13u1","148.0.7778.215-1","148.0.7778.215-1~deb12u1","148.0.7778.215-1~deb13u1","148.0.7778.215-2","148.0.7778.96-1","148.0.7778.96-1~deb12u1","148.0.7778.96-1~deb13u1","148.0.7778.96-2","148.0.7778.96-3","149.0.7827.102-1","149.0.7827.102-1~deb12u1","149.0.7827.102-1~deb13u1","149.0.7827.114-1","149.0.7827.114-1~deb12u1","149.0.7827.114-1~deb13u1","149.0.7827.155-1","149.0.7827.155-1~deb12u1","149.0.7827.155-1~deb13u1","149.0.7827.196-1","149.0.7827.196-1~deb12u1","149.0.7827.196-1~deb13u1","149.0.7827.53-1","149.0.7827.53-1~deb12u1","149.0.7827.53-1~deb13u1","150.0.7871.100-1","150.0.7871.100-1~deb12u1","150.0.7871.100-1~deb13u1","150.0.7871.114-1","150.0.7871.114-1~deb12u1","150.0.7871.114-1~deb13u1","150.0.7871.124-1","150.0.7871.124-1~deb12u1","150.0.7871.124-1~deb13u1","150.0.7871.181-1","150.0.7871.181-1~deb12u1","150.0.7871.181-1~deb13u1","150.0.7871.46-1","150.0.7871.46-1~deb12u1","150.0.7871.46-1~deb13u1","151.0.7922.108-1","151.0.7922.108-1~deb12u1","151.0.7922.108-1~deb13u1","151.0.7922.108-2","151.0.7922.137-1","151.0.7922.137-1~deb12u1","151.0.7922.137-1~deb13u1","151.0.7922.137-2","151.0.7922.169-1","151.0.7922.169-1~deb12u1","151.0.7922.169-1~deb13u1","151.0.7922.173-1","151.0.7922.173-1~deb12u1","151.0.7922.173-1~deb13u1","151.0.7922.47-1","151.0.7922.71-1","151.0.7922.71-1~deb12u1","151.0.7922.71-1~deb13u1","152.0.7977.64-1","152.0.7977.75-1","152.0.7977.75-1~deb12u1","152.0.7977.75-1~deb13u1","152.0.7977.82-1","152.0.7977.82-1~deb12u1","152.0.7977.82-1~deb13u1","153.0.8010.47-1","153.0.8010.47-2","153.0.8010.47-2~deb12u1","153.0.8010.47-2~deb13u1","153.0.8010.52-1","153.0.8010.52-1~deb12u1","153.0.8010.52-1~deb13u1","154.0.8037.57-1","154.0.8037.57-1~deb12u1","154.0.8037.57-1~deb13u1","154.0.8037.92-1","154.0.8037.92-1~deb12u1","154.0.8037.92-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"155.0.8059.39-1~deb13u1"}]}],"versions":["138.0.7204.183-1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.101-1","147.0.7727.101-1~deb12u1","147.0.7727.101-1~deb13u1","147.0.7727.116-1","147.0.7727.116-1~deb12u1","147.0.7727.116-1~deb13u1","147.0.7727.137-1","147.0.7727.137-1~deb12u1","147.0.7727.137-1~deb13u1","147.0.7727.55-1","147.0.7727.55-1~deb12u1","147.0.7727.55-1~deb13u1","148.0.7778.167-1","148.0.7778.167-1~deb12u1","148.0.7778.167-1~deb13u1","148.0.7778.178-1","148.0.7778.178-1~deb12u1","148.0.7778.178-1~deb13u1","148.0.7778.215-1","148.0.7778.215-1~deb12u1","148.0.7778.215-1~deb13u1","148.0.7778.215-2","148.0.7778.96-1","148.0.7778.96-1~deb12u1","148.0.7778.96-1~deb13u1","148.0.7778.96-2","148.0.7778.96-3","149.0.7827.102-1","149.0.7827.102-1~deb12u1","149.0.7827.102-1~deb13u1","149.0.7827.114-1","149.0.7827.114-1~deb12u1","149.0.7827.114-1~deb13u1","149.0.7827.155-1","149.0.7827.155-1~deb12u1","149.0.7827.155-1~deb13u1","149.0.7827.196-1","149.0.7827.196-1~deb12u1","149.0.7827.196-1~deb13u1","149.0.7827.53-1","149.0.7827.53-1~deb12u1","149.0.7827.53-1~deb13u1","150.0.7871.100-1","150.0.7871.100-1~deb12u1","150.0.7871.100-1~deb13u1","150.0.7871.114-1","150.0.7871.114-1~deb12u1","150.0.7871.114-1~deb13u1","150.0.7871.124-1","150.0.7871.124-1~deb12u1","150.0.7871.124-1~deb13u1","150.0.7871.181-1","150.0.7871.181-1~deb12u1","150.0.7871.181-1~deb13u1","150.0.7871.46-1","150.0.7871.46-1~deb12u1","150.0.7871.46-1~deb13u1","151.0.7922.108-1","151.0.7922.108-1~deb12u1","151.0.7922.108-1~deb13u1","151.0.7922.108-2","151.0.7922.137-1","151.0.7922.137-1~deb12u1","151.0.7922.137-1~deb13u1","151.0.7922.137-2","151.0.7922.169-1","151.0.7922.169-1~deb12u1","151.0.7922.169-1~deb13u1","151.0.7922.173-1","151.0.7922.173-1~deb12u1","151.0.7922.173-1~deb13u1","151.0.7922.47-1","151.0.7922.71-1","151.0.7922.71-1~deb12u1","151.0.7922.71-1~deb13u1","152.0.7977.64-1","152.0.7977.75-1","152.0.7977.75-1~deb12u1","152.0.7977.75-1~deb13u1","152.0.7977.82-1","152.0.7977.82-1~deb12u1","152.0.7977.82-1~deb13u1","153.0.8010.47-1","153.0.8010.47-2","153.0.8010.47-2~deb12u1","153.0.8010.47-2~deb13u1","153.0.8010.52-1","153.0.8010.52-1~deb12u1","153.0.8010.52-1~deb13u1","154.0.8037.57-1","154.0.8037.57-1~deb12u1","154.0.8037.57-1~deb13u1","154.0.8037.92-1","154.0.8037.92-1~deb12u1","154.0.8037.92-1~deb13u1","155.0.8059.39-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"155.0.8059.39-1"}]}],"versions":["138.0.7204.183-1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.101-1","147.0.7727.101-1~deb12u1","147.0.7727.101-1~deb13u1","147.0.7727.116-1","147.0.7727.116-1~deb12u1","147.0.7727.116-1~deb13u1","147.0.7727.137-1","147.0.7727.137-1~deb12u1","147.0.7727.137-1~deb13u1","147.0.7727.55-1","147.0.7727.55-1~deb12u1","147.0.7727.55-1~deb13u1","148.0.7778.167-1","148.0.7778.167-1~deb12u1","148.0.7778.167-1~deb13u1","148.0.7778.178-1","148.0.7778.178-1~deb12u1","148.0.7778.178-1~deb13u1","148.0.7778.215-1","148.0.7778.215-1~deb12u1","148.0.7778.215-1~deb13u1","148.0.7778.215-2","148.0.7778.96-1","148.0.7778.96-1~deb12u1","148.0.7778.96-1~deb13u1","148.0.7778.96-2","148.0.7778.96-3","149.0.7827.102-1","149.0.7827.102-1~deb12u1","149.0.7827.102-1~deb13u1","149.0.7827.114-1","149.0.7827.114-1~deb12u1","149.0.7827.114-1~deb13u1","149.0.7827.155-1","149.0.7827.155-1~deb12u1","149.0.7827.155-1~deb13u1","149.0.7827.196-1","149.0.7827.196-1~deb12u1","149.0.7827.196-1~deb13u1","149.0.7827.53-1","149.0.7827.53-1~deb12u1","149.0.7827.53-1~deb13u1","150.0.7871.100-1","150.0.7871.100-1~deb12u1","150.0.7871.100-1~deb13u1","150.0.7871.114-1","150.0.7871.114-1~deb12u1","150.0.7871.114-1~deb13u1","150.0.7871.124-1","150.0.7871.124-1~deb12u1","150.0.7871.124-1~deb13u1","150.0.7871.181-1","150.0.7871.181-1~deb12u1","150.0.7871.181-1~deb13u1","150.0.7871.46-1","150.0.7871.46-1~deb12u1","150.0.7871.46-1~deb13u1","151.0.7922.108-1","151.0.7922.108-1~deb12u1","151.0.7922.108-1~deb13u1","151.0.7922.108-2","151.0.7922.137-1","151.0.7922.137-1~deb12u1","151.0.7922.137-1~deb13u1","151.0.7922.137-2","151.0.7922.169-1","151.0.7922.169-1~deb12u1","151.0.7922.169-1~deb13u1","151.0.7922.173-1","151.0.7922.173-1~deb12u1","151.0.7922.173-1~deb13u1","151.0.7922.47-1","151.0.7922.71-1","151.0.7922.71-1~deb12u1","151.0.7922.71-1~deb13u1","152.0.7977.64-1","152.0.7977.75-1","152.0.7977.75-1~deb12u1","152.0.7977.75-1~deb13u1","152.0.7977.82-1","152.0.7977.82-1~deb12u1","152.0.7977.82-1~deb13u1","153.0.8010.47-1","153.0.8010.47-2","153.0.8010.47-2~deb12u1","153.0.8010.47-2~deb13u1","153.0.8010.52-1","153.0.8010.52-1~deb12u1","153.0.8010.52-1~deb13u1","154.0.8037.57-1","154.0.8037.57-1~deb12u1","154.0.8037.57-1~deb13u1","154.0.8037.92-1","154.0.8037.92-1~deb12u1","154.0.8037.92-1~deb13u1","155.0.8059.39-1~deb12u1","155.0.8059.39-1~deb13u1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"155.0.8059.39-1.1"}]}],"bundled":246},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"155.0.8059.84-bp160.1.1"}]}],"bundled":293}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://issues.chromium.org/issues/552115620","tags":["Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106366"},{"url":"https://github.com/advisories/GHSA-p5x7-pmr2-6jpr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-106366","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106427","tags":["web"]},{"url":"https://bugzilla.suse.com/1284354","tags":["report"]},{"url":"https://bugzilla.suse.com/1285401","tags":["report"]},{"url":"https://bugzilla.suse.com/1285733","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-110922","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-106366","description":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2026-10-06T18:41:07.001Z","modified":"2026-10-14T12:37:10.446Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-459"],"updated_at":"2026-11-02T14:20:04.156238Z"}],"euvd":[{"id":"EUVD-2026-93800","description":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2026-10-06T18:41:07Z","modified":"2026-10-14T12:37:10Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T17:27:15.969628Z"}],"ghsa":[{"id":"GHSA-p5x7-pmr2-6jpr","title":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a...","description":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2026-10-06T21:31:48Z","modified":"2026-10-14T15:33:09Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-459"],"updated_at":"2026-11-02T15:13:26.117603Z"}],"nvd":[{"id":"CVE-2026-106366","description":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2026-10-06T19:18:05.62Z","modified":"2026-10-14T18:39:36.233Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-459"],"updated_at":"2026-11-02T14:12:54.486849Z"}],"osv":[{"id":"DEBIAN-CVE-2026-106366","description":"Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2026-10-06T19:18:05.62Z","modified":"2026-10-24T05:00:32.340588519Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:48.903138Z"},{"id":"openSUSE-SU-2026:12091-1","title":"chromedriver-155.0.8059.39-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-155.0.8059.39-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-09T00:00:00Z","modified":"2026-10-10T17:23:22.299770438Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22041-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354):\n  * CVE-2026-106382: Use after free in Chromecast\n  * CVE-2026-106197: Use after free in Browser\n  * CVE-2026-106358: Use after free in Navigation\n  * CVE-2026-106347: Use after free in Track\n  * CVE-2026-106245: Uninitialized resource in ANGLE\n  * CVE-2026-106327: Incorrect authorization in Core\n  * CVE-2026-106366: Incomplete cleanup in CustomTabs\n  * CVE-2026-106258: Uninitialized resource in ANGLE\n  * CVE-2026-106376: Uninitialized resource in ANGLE\n  * CVE-2026-106308: Incorrect reference resolution in Autofill\n  * CVE-2026-106215: Uninitialized resource in ANGLE\n  * CVE-2026-106369: Missing authorization in Translate\n  * CVE-2026-106293: Type confusion in ANGLE\n  * CVE-2026-106377: Race condition in Fonts\n  * CVE-2026-106412: Race condition in Core\n  * CVE-2026-106243: Incomplete cleanup in Proxy Auth\n  * CVE-2026-106214: Information leak in Proxy\n  * CVE-2026-106364: Incorrect authorization in Omnibox\n  * CVE-2026-106239: Integer overflow in WebGL\n  * CVE-2026-106426: Race condition in Fonts\n  * CVE-2026-106419: Use after free in ANGLE\n  * CVE-2026-106396: Improper input validation in Omnibox\n  * CVE-2026-106323: Missing authorization in Chrome for iOS\n  * CVE-2026-106231: Uninitialized resource in Dawn\n  * CVE-2026-106202: Uninitialized resource in ANGLE\n  * CVE-2026-106273: Uninitialized resource in Video\n  * CVE-2026-106203: Incomplete cleanup in Autofill\n  * CVE-2026-106332: Integer overflow in Compositing\n  * CVE-2026-106281: Use after free in Tint\n  * CVE-2026-106298: Use after free in Chrome Tabs\n  * CVE-2026-106193: Use after free in Parser\n  * CVE-2026-106255: Race condition in V8\n  * CVE-2026-106393: Use after free in Storage\n  * CVE-2026-106227: Use after free in Core\n  * CVE-2026-106379: Uninitialized resource in Skia\n  * CVE-2026-106211: Use after free in TabStrip\n  * CVE-2026-106329: Incorrect authorization in FileSystem\n  * CVE-2026-106248: Use after free in Bindings\n  * CVE-2026-106235: Use after free in WebAudio\n  * CVE-2026-106257: Use after free in HTML\n  * CVE-2026-106268: Use after free in WebRTC\n  * CVE-2026-106278: Use after free in Select\n  * CVE-2026-106233: Use after free in Metrics\n  * CVE-2026-106318: Use after free in Media\n  * CVE-2026-106411: Use after free in Parser\n  * CVE-2026-106423: Use after free in Media\n  * CVE-2026-106346: Improper state validation in DevTools\n  * CVE-2026-106190: Use after free in Media\n  * CVE-2026-106357: Use after free in WebRTC\n  * CVE-2026-106240: Type confusion in V8\n  * CVE-2026-106184: Uninitialized resource in Media\n  * CVE-2026-106383: Use after free in Media\n  * CVE-2026-106349: Use after free in V8\n  * CVE-2026-106421: Use after free in PDF\n  * CVE-2026-106204: Use after free in PDF\n  * CVE-2026-106200: Use after free in Track\n  * CVE-2026-106265: UI misrepresentation in File\n  * CVE-2026-106238: Race condition in Fonts\n  * CVE-2026-106324: Incorrect authorization in WebAppInstalls\n  * CVE-2026-106420: Incorrect calculation in API\n  * CVE-2026-106222: Incorrect authorization in Sync\n  * CVE-2026-106208: Missing authorization in API\n  * CVE-2026-106286: Confused deputy in Omnibox\n  * CVE-2026-106181: Incorrect reference resolution in DevTools\n  * CVE-2026-106315: Use after free in Modularization\n  * CVE-2026-106274: Incorrect reference resolution in Browser\n  * CVE-2026-106365: Missing authorization in Animation\n  * CVE-2026-106267: Missing authorization in Network\n  * CVE-2026-106194: Missing authorization in WebAppInstalls\n  * CVE-2026-106313: Incorrect authorization in Browser\n  * CVE-2026-106283: Use after free in Streaming\n  * CVE-2026-106291: Use after free in GarbageCollection\n  * CVE-2026-106300: Race condition in CacheStorage\n  * CVE-2026-106314: Incorrect authorization in Bluetooth\n  * CVE-2026-106223: Uninitialized resource in GPU\n  * CVE-2026-106242: Information leak in Omnibox\n  * CVE-2026-106241: Incorrect authorization in Search\n  * CVE-2026-106381: Incorrect authorization in Passwords\n  * CVE-2026-106217: Missing authorization in Google Lens\n  * CVE-2026-106425: Missing authorization in BrowserTag\n  * CVE-2026-106225: Missing authorization in Autofill\n  * CVE-2026-106363: Missing authorization in FullScreen\n  * CVE-2026-106266: Confused deputy in Contextual Tasks\n  * CVE-2026-106189: Code injection in ReaderMode\n  * CVE-2026-106335: Use after free in Media\n  * CVE-2026-106415: Information leak in Enterprise\n  * CVE-2026-106224: Missing authorization in Google Lens\n  * CVE-2026-106185: Improper input validation in Viz\n  * CVE-2026-106244: Incorrect authorization in Permissions\n  * CVE-2026-106407: Incorrect authorization in GetUserMedia\n  * CVE-2026-106389: Incorrect authorization in USB\n  * CVE-2026-106397: Incorrect authorization in Mobile\n  * CVE-2026-106196: Missing authorization in Navigation\n  * CVE-2026-106414: Improper input validation in Mobile\n  * CVE-2026-106408: Protection mechanism failure in Mobile\n  * CVE-2026-106261: Uninitialized resource in Video\n  * CVE-2026-106406: Missing authorization in Mobile\n  * CVE-2026-106290: Uninitialized resource in GPU\n  * CVE-2026-106378: Privilege elevation in Sandbox\n  * CVE-2026-106198: Missing authorization in FileSystem\n  * CVE-2026-106326: Confused deputy in UI\n  * CVE-2026-106354: Improper resource exposure in Extensions\n  * CVE-2026-106342: Information leak in Autofill\n  * CVE-2026-106424: Information leak in Audio\n  * CVE-2026-106253: Incorrect authorization in Extensions\n  * CVE-2026-106279: Incorrect reference resolution in Passwords\n  * CVE-2026-106361: Incorrect provision of specified functionality in Mobile\n  * CVE-2026-106402: Incorrect authorization in Extensions\n  * CVE-2026-106311: Clickjacking in PermissionElement\n  * CVE-2026-106246: Incorrect authorization in Browser\n  * CVE-2026-106302: UI misrepresentation in PermissionElement\n  * CVE-2026-106416: Code injection in Extensions\n  * CVE-2026-106182: UI misrepresentation in Paint\n  * CVE-2026-106282: UI misrepresentation in WebOTP\n  * CVE-2026-106392: Information leak in WebAudio\n  * CVE-2026-106188: Confused deputy in SignIn\n  * CVE-2026-106370: Uninitialized resource in GPU\n  * CVE-2026-106356: Clickjacking in EVP\n  * CVE-2026-106405: Race condition in CustomTabs\n  * CVE-2026-106322: Open redirect in AppManifest\n  * CVE-2026-106280: Incorrect authorization in PermissionElement\n  * CVE-2026-106206: Improper input validation in Mobile\n  * CVE-2026-106180: Observable discrepancy in Animation\n  * CVE-2026-106303: Observable discrepancy in Autofill AI\n  * CVE-2026-106201: Race condition in V8\n  * CVE-2026-106333: Incorrect authorization in Input\n  * CVE-2026-106228: Confused deputy in Google Lens\n  * CVE-2026-106289: Missing authorization in FedCM\n  * CVE-2026-106277: Information leak in Animation\n  * CVE-2026-106410: Missing authorization in Permissions\n  * CVE-2026-106284: Out of bounds read in Printing\n  * CVE-2026-106209: UI misrepresentation in Mobile\n  * CVE-2026-106216: Cross-site request forgery in ReadingList\n  * CVE-2026-106328: Incorrect authorization in PDF\n  * CVE-2026-106387: Missing authorization in Mobile\n  * CVE-2026-106400: Clickjacking in Messages\n  * CVE-2026-106205: Missing authorization in Passwords\n  * CVE-2026-106213: Race condition in WebAudio\n  * CVE-2026-106230: Incorrect reference resolution in Offline\n  * CVE-2026-106367: Missing authorization in Mobile\n  * CVE-2026-106226: Improper input validation in Compositing\n  * CVE-2026-106229: UI misrepresentation in FileSystem\n  * CVE-2026-106232: UI misrepresentation in Browser\n  * CVE-2026-106391: Incorrect authorization in WebShare\n  * CVE-2026-106336: Observable discrepancy in Paint\n  * CVE-2026-106403: Incorrect authorization in Accessibility\n  * CVE-2026-106373: Use after free in Fonts\n  * CVE-2026-106301: Confused deputy in Contextual Tasks\n  * CVE-2026-106292: Buffer overflow in Fonts\n  * CVE-2026-106262: Incomplete cleanup in GetUserMedia\n  * CVE-2026-106360: Information leak in Payments\n  * CVE-2026-106375: Incomplete cleanup in Dawn\n  * CVE-2026-106348: Information leak in Animation\n  * CVE-2026-106307: Incorrect authorization in Network\n  * CVE-2026-106212: Incorrect authorization in Autofill\n  * CVE-2026-106398: Incorrect authorization in Media\n  * CVE-2026-106388: Missing authorization in DataTransfer\n  * CVE-2026-106271: Missing authorization in Workers\n  * CVE-2026-106395: Uninitialized resource in Dawn\n  * CVE-2026-106304: Out of bounds read in ANGLE\n  * CVE-2026-106401: Out of bounds write in Media\n  * CVE-2026-106330: Information leak in Paint\n  * CVE-2026-106295: Incorrect authorization in Unbounded Element\n  * CVE-2026-106352: Incorrect authorization in WebProtect\n  * CVE-2026-106337: UI misrepresentation in UI\n  * CVE-2026-106263: Improper input validation in SignIn\n  * CVE-2026-106404: Incorrect authorization in FontAccess\n  * CVE-2026-106183: Missing authorization in Chromoting\n  * CVE-2026-106386: Uninitialized resource in WebAudio\n  * CVE-2026-106351: Observable discrepancy in Safebrowsing\n  * CVE-2026-106384: Missing authorization in SiteIsolation\n  * CVE-2026-106207: Race condition in V8\n  * CVE-2026-106321: Information leak in Editing\n  * CVE-2026-106210: Observable discrepancy in Scroll\n  * CVE-2026-106254: Information leak in Mobile\n  * CVE-2026-106372: Incorrect authorization in UI\n  * CVE-2026-106341: Type confusion in V8\n  * CVE-2026-106409: Incorrect reference resolution in WebAppInstalls\n  * CVE-2026-106340: Missing authorization in CredentialProvider\n  * CVE-2026-106276: UI misrepresentation in Payments\n  * CVE-2026-106338: UI misrepresentation in PictureInPicture\n  * CVE-2026-106317: UI misrepresentation in FullScreen\n  * CVE-2026-106344: Missing authorization in Permissions\n  * CVE-2026-106359: Confused deputy in DeviceBoundSessionCredentials\n  * CVE-2026-106353: Improper input validation in Mobile\n  * CVE-2026-106312: Missing authorization in SignIn\n  * CVE-2026-106191: Missing authorization in Actor\n  * CVE-2026-106250: Missing authorization in Actor\n  * CVE-2026-106309: Incorrect authorization in Selection\n  * CVE-2026-106187: Missing authorization in Permissions\n  * CVE-2026-106394: Incomplete cleanup in Glic\n  * CVE-2026-106306: Incorrect authorization in DevTools\n  * CVE-2026-106427: Confused deputy in Mobile\n  * CVE-2026-106252: Incorrect comparison in Fonts\n  * CVE-2026-106287: Information loss in CORS\n  * CVE-2026-106297: Incorrect authorization in Scheduling\n  * CVE-2026-106260: Incorrect authorization in DevTools\n  * CVE-2026-106362: Missing authorization in DevTools\n  * CVE-2026-106275: Uninitialized resource in GPU\n  * CVE-2026-106199: Incorrect authorization in Actor\n  * CVE-2026-106299: Improper input validation in WebAudio\n  * CVE-2026-106422: Incorrect authorization in API\n  * CVE-2026-106186: Uncontrolled search path element in CredentialProvider\n  * CVE-2026-106247: Buffer overflow in ANGLE\n  * CVE-2026-106192: Information leak in Mobile\n  * CVE-2026-106399: Out of bounds read in Skia\n  * CVE-2026-106264: Missing authorization in Web Authentication (Passkeys \u0026 Security Keys)\n  * CVE-2026-106285: UI misrepresentation in WebAppInstalls\n  * CVE-2026-106220: Information leak in Passwords\n  * CVE-2026-106417: Integer overflow in Media\n  * CVE-2026-106221: Confused deputy in WebAPKs\n  * CVE-2026-106259: Incorrect authorization in PermissionElement\n  * CVE-2026-106296: Improper privilege management in UI\n  * CVE-2026-106249: Incorrect authorization in Autofill\n  * CVE-2026-106374: Type confusion in V8\n  * CVE-2026-106380: UI misrepresentation in UI\n  * CVE-2026-106179: UI misrepresentation in WebAppInstalls\n  * CVE-2026-106368: UI misrepresentation in UI\n  * CVE-2026-106237: Information leak in Permissions\n  * CVE-2026-106331: Improper input validation in Extensions\n  * CVE-2026-106270: Incorrect authorization in WebAppInstalls\n  * CVE-2026-106350: Incorrect authorization in Browser\n  * CVE-2026-106288: Missing authorization in Browser\n  * CVE-2026-106305: UI misrepresentation in Mobile\n  * CVE-2026-106418: Missing authorization in Network\n  * CVE-2026-106343: Improper state validation in Autofill AI\n  * CVE-2026-106371: Incorrect authorization in Transactions Platform\n  * CVE-2026-106256: Information leak in Passwords\n  * CVE-2026-106413: Race condition in Browser\n  * CVE-2026-106339: Use of released resource in Core\n  * CVE-2026-106320: Use of released resource in UI\n  * CVE-2026-106195: Incorrect authorization in Chromoting\n  * CVE-2026-106316: UI misrepresentation in Chromoting\n  * CVE-2026-106385: Race condition in Chromoting\n  * CVE-2026-106325: Incorrect reference resolution in Core\n  * CVE-2026-106390: Incorrect provision of specified functionality in SanitizerAPI\n  * CVE-2026-106294: Incomplete cleanup in Chromoting\n  * CVE-2026-106334: Information leak in Payments\n  * CVE-2026-106236: UI misrepresentation in Chromoting\n  * CVE-2026-106251: UI misrepresentation in Chromoting\n  * CVE-2026-106310: Use of released resource in FontAccess\n  * CVE-2026-106345: Use of released resource in Session\n  * CVE-2026-106272: UI misrepresentation in Chromoting\n  * CVE-2026-106355: Missing authorization in Media\n  * CVE-2026-106234: Use after free in Network\n  * CVE-2026-106269: Use after free in CSS\n","status":"withdrawn","published":"2026-10-09T02:54:37Z","modified":"2026-10-31T19:00:08.281136635Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"openSUSE-SU-2026:22124-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 155.0.8059.84 (boo#1285733):\n  * CVE-2026-110922: Use after free in Prerender\n  * CVE-2026-110913: Memory corruption in DOM\n  * CVE-2026-110919: Use after free in V8\n  * CVE-2026-110918: Memory corruption in Core\n  * CVE-2026-110917: Memory corruption in SVG\n  * CVE-2026-110921: Use after free in V8\n  * CVE-2026-110920: Memory corruption in V8\n  * CVE-2026-110916: Improper input validation in Desktop\n  * CVE-2026-110915: Use after free in Compositing\n  * CVE-2026-110914: Memory corruption in Workers\n\n- Chromium 155.0.8059.79 (boo#1285401):\n  * CVE-2026-110152: Buffer overflow in ANGLE\n  * CVE-2026-110149: Use after free in Browser\n  * CVE-2026-110136: Use after free in PDF\n  * CVE-2026-110161: Use after free in Network\n  * CVE-2026-110165: Use after free in Core\n  * CVE-2026-110148: Use after free in SVG\n  * CVE-2026-110151: Use after free in Media\n  * CVE-2026-110162: Use after free in Desktop\n  * CVE-2026-110170: Use after free in Bindings\n  * CVE-2026-110160: Missing authorization in ReadingMode\n  * CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk\n  * CVE-2026-110146: Information leak in Passwords\n  * CVE-2026-110150: Privilege elevation in Installer\n  * CVE-2026-110156: Incorrect reference resolution in Extensions\n  * CVE-2026-110137: Use after free in WebRTC\n  * CVE-2026-110140: Type confusion in V8\n  * CVE-2026-110158: Use after free in Passwords\n  * CVE-2026-110145: Use after free in Passwords\n  * CVE-2026-110159: Incorrect authorization in Updater\n  * CVE-2026-110144: Incorrect authorization in Mojo\n  * CVE-2026-110153: Use after free in Media\n  * CVE-2026-110166: Buffer overflow in Animation\n  * CVE-2026-110169: Use after free in V8\n  * CVE-2026-110168: Use after free in V8\n  * CVE-2026-110139: Use after free in Media\n  * CVE-2026-110172: Use after free in Media\n  * CVE-2026-110164: Use after free in DOM\n  * CVE-2026-110163: Use after free in DOM\n  * CVE-2026-110141: Observable discrepancy in Media\n  * CVE-2026-110138: Use after free in ShapeDetection\n  * CVE-2026-110157: Use after free in SVG\n  * CVE-2026-110147: Use after free in PDF\n  * CVE-2026-110154: Use after free in Canvas\n  * CVE-2026-110155: Buffer overflow in PDFium\n  * CVE-2026-110167: Use after free in Media\n  * CVE-2026-110171: Use after free in Media\n  * CVE-2026-110142: Use after free in FileSystem\n\n- Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354):\n  * CVE-2026-106382: Use after free in Chromecast\n  * CVE-2026-106197: Use after free in Browser\n  * CVE-2026-106358: Use after free in Navigation\n  * CVE-2026-106347: Use after free in Track\n  * CVE-2026-106245: Uninitialized resource in ANGLE\n  * CVE-2026-106327: Incorrect authorization in Core\n  * CVE-2026-106366: Incomplete cleanup in CustomTabs\n  * CVE-2026-106258: Uninitialized resource in ANGLE\n  * CVE-2026-106376: Uninitialized resource in ANGLE\n  * CVE-2026-106308: Incorrect reference resolution in Autofill\n  * CVE-2026-106215: Uninitialized resource in ANGLE\n  * CVE-2026-106369: Missing authorization in Translate\n  * CVE-2026-106293: Type confusion in ANGLE\n  * CVE-2026-106377: Race condition in Fonts\n  * CVE-2026-106412: Race condition in Core\n  * CVE-2026-106243: Incomplete cleanup in Proxy Auth\n  * CVE-2026-106214: Information leak in Proxy\n  * CVE-2026-106364: Incorrect authorization in Omnibox\n  * CVE-2026-106239: Integer overflow in WebGL\n  * CVE-2026-106426: Race condition in Fonts\n  * CVE-2026-106419: Use after free in ANGLE\n  * CVE-2026-106396: Improper input validation in Omnibox\n  * CVE-2026-106323: Missing authorization in Chrome for iOS\n  * CVE-2026-106231: Uninitialized resource in Dawn\n  * CVE-2026-106202: Uninitialized resource in ANGLE\n  * CVE-2026-106273: Uninitialized resource in Video\n  * CVE-2026-106203: Incomplete cleanup in Autofill\n  * CVE-2026-106332: Integer overflow in Compositing\n  * CVE-2026-106281: Use after free in Tint\n  * CVE-2026-106298: Use after free in Chrome Tabs\n  * CVE-2026-106193: Use after free in Parser\n  * CVE-2026-106255: Race condition in V8\n  * CVE-2026-106393: Use after free in Storage\n  * CVE-2026-106227: Use after free in Core\n  * CVE-2026-106379: Uninitialized resource in Skia\n  * CVE-2026-106211: Use after free in TabStrip\n  * CVE-2026-106329: Incorrect authorization in FileSystem\n  * CVE-2026-106248: Use after free in Bindings\n  * CVE-2026-106235: Use after free in WebAudio\n  * CVE-2026-106257: Use after free in HTML\n  * CVE-2026-106268: Use after free in WebRTC\n  * CVE-2026-106278: Use after free in Select\n  * CVE-2026-106233: Use after free in Metrics\n  * CVE-2026-106318: Use after free in Media\n  * CVE-2026-106411: Use after free in Parser\n  * CVE-2026-106423: Use after free in Media\n  * CVE-2026-106346: Improper state validation in DevTools\n  * CVE-2026-106190: Use after free in Media\n  * CVE-2026-106357: Use after free in WebRTC\n  * CVE-2026-106240: Type confusion in V8\n  * CVE-2026-106184: Uninitialized resource in Media\n  * CVE-2026-106383: Use after free in Media\n  * CVE-2026-106349: Use after free in V8\n  * CVE-2026-106421: Use after free in PDF\n  * CVE-2026-106204: Use after free in PDF\n  * CVE-2026-106200: Use after free in Track\n  * CVE-2026-106265: UI misrepresentation in File\n  * CVE-2026-106238: Race condition in Fonts\n  * CVE-2026-106324: Incorrect authorization in WebAppInstalls\n  * CVE-2026-106420: Incorrect calculation in API\n  * CVE-2026-106222: Incorrect authorization in Sync\n  * CVE-2026-106208: Missing authorization in API\n  * CVE-2026-106286: Confused deputy in Omnibox\n  * CVE-2026-106181: Incorrect reference resolution in DevTools\n  * CVE-2026-106315: Use after free in Modularization\n  * CVE-2026-106274: Incorrect reference resolution in Browser\n  * CVE-2026-106365: Missing authorization in Animation\n  * CVE-2026-106267: Missing authorization in Network\n  * CVE-2026-106194: Missing authorization in WebAppInstalls\n  * CVE-2026-106313: Incorrect authorization in Browser\n  * CVE-2026-106283: Use after free in Streaming\n  * CVE-2026-106291: Use after free in GarbageCollection\n  * CVE-2026-106300: Race condition in CacheStorage\n  * CVE-2026-106314: Incorrect authorization in Bluetooth\n  * CVE-2026-106223: Uninitialized resource in GPU\n  * CVE-2026-106242: Information leak in Omnibox\n  * CVE-2026-106241: Incorrect authorization in Search\n  * CVE-2026-106381: Incorrect authorization in Passwords\n  * CVE-2026-106217: Missing authorization in Google Lens\n  * CVE-2026-106425: Missing authorization in BrowserTag\n  * CVE-2026-106225: Missing authorization in Autofill\n  * CVE-2026-106363: Missing authorization in FullScreen\n  * CVE-2026-106266: Confused deputy in Contextual Tasks\n  * CVE-2026-106189: Code injection in ReaderMode\n  * CVE-2026-106335: Use after free in Media\n  * CVE-2026-106415: Information leak in Enterprise\n  * CVE-2026-106224: Missing authorization in Google Lens\n  * CVE-2026-106185: Improper input validation in Viz\n  * CVE-2026-106244: Incorrect authorization in Permissions\n  * CVE-2026-106407: Incorrect authorization in GetUserMedia\n  * CVE-2026-106389: Incorrect authorization in USB\n  * CVE-2026-106397: Incorrect authorization in Mobile\n  * CVE-2026-106196: Missing authorization in Navigation\n  * CVE-2026-106414: Improper input validation in Mobile\n  * CVE-2026-106408: Protection mechanism failure in Mobile\n  * CVE-2026-106261: Uninitialized resource in Video\n  * CVE-2026-106406: Missing authorization in Mobile\n  * CVE-2026-106290: Uninitialized resource in GPU\n  * CVE-2026-106378: Privilege elevation in Sandbox\n  * CVE-2026-106198: Missing authorization in FileSystem\n  * CVE-2026-106326: Confused deputy in UI\n  * CVE-2026-106354: Improper resource exposure in Extensions\n  * CVE-2026-106342: Information leak in Autofill\n  * CVE-2026-106424: Information leak in Audio\n  * CVE-2026-106253: Incorrect authorization in Extensions\n  * CVE-2026-106279: Incorrect reference resolution in Passwords\n  * CVE-2026-106361: Incorrect provision of specified functionality in Mobile\n  * CVE-2026-106402: Incorrect authorization in Extensions\n  * CVE-2026-106311: Clickjacking in PermissionElement\n  * CVE-2026-106246: Incorrect authorization in Browser\n  * CVE-2026-106302: UI misrepresentation in PermissionElement\n  * CVE-2026-106416: Code injection in Extensions\n  * CVE-2026-106182: UI misrepresentation in Paint\n  * CVE-2026-106282: UI misrepresentation in WebOTP\n  * CVE-2026-106392: Information leak in WebAudio\n  * CVE-2026-106188: Confused deputy in SignIn\n  * CVE-2026-106370: Uninitialized resource in GPU\n  * CVE-2026-106356: Clickjacking in EVP\n  * CVE-2026-106405: Race condition in CustomTabs\n  * CVE-2026-106322: Open redirect in AppManifest\n  * CVE-2026-106280: Incorrect authorization in PermissionElement\n  * CVE-2026-106206: Improper input validation in Mobile\n  * CVE-2026-106180: Observable discrepancy in Animation\n  * CVE-2026-106303: Observable discrepancy in Autofill AI\n  * CVE-2026-106201: Race condition in V8\n  * CVE-2026-106333: Incorrect authorization in Input\n  * CVE-2026-106228: Confused deputy in Google Lens\n  * CVE-2026-106289: Missing authorization in FedCM\n  * CVE-2026-106277: Information leak in Animation\n  * CVE-2026-106410: Missing authorization in Permissions\n  * CVE-2026-106284: Out of bounds read in Printing\n  * CVE-2026-106209: UI misrepresentation in Mobile\n  * CVE-2026-106216: Cross-site request forgery in ReadingList\n  * CVE-2026-106328: Incorrect authorization in PDF\n  * CVE-2026-106387: Missing authorization in Mobile\n  * CVE-2026-106400: Clickjacking in Messages\n  * CVE-2026-106205: Missing authorization in Passwords\n  * CVE-2026-106213: Race condition in WebAudio\n  * CVE-2026-106230: Incorrect reference resolution in Offline\n  * CVE-2026-106367: Missing authorization in Mobile\n  * CVE-2026-106226: Improper input validation in Compositing\n  * CVE-2026-106229: UI misrepresentation in FileSystem\n  * CVE-2026-106232: UI misrepresentation in Browser\n  * CVE-2026-106391: Incorrect authorization in WebShare\n  * CVE-2026-106336: Observable discrepancy in Paint\n  * CVE-2026-106403: Incorrect authorization in Accessibility\n  * CVE-2026-106373: Use after free in Fonts\n  * CVE-2026-106301: Confused deputy in Contextual Tasks\n  * CVE-2026-106292: Buffer overflow in Fonts\n  * CVE-2026-106262: Incomplete cleanup in GetUserMedia\n  * CVE-2026-106360: Information leak in Payments\n  * CVE-2026-106375: Incomplete cleanup in Dawn\n  * CVE-2026-106348: Information leak in Animation\n  * CVE-2026-106307: Incorrect authorization in Network\n  * CVE-2026-106212: Incorrect authorization in Autofill\n  * CVE-2026-106398: Incorrect authorization in Media\n  * CVE-2026-106388: Missing authorization in DataTransfer\n  * CVE-2026-106271: Missing authorization in Workers\n  * CVE-2026-106395: Uninitialized resource in Dawn\n  * CVE-2026-106304: Out of bounds read in ANGLE\n  * CVE-2026-106401: Out of bounds write in Media\n  * CVE-2026-106330: Information leak in Paint\n  * CVE-2026-106295: Incorrect authorization in Unbounded Element\n  * CVE-2026-106352: Incorrect authorization in WebProtect\n  * CVE-2026-106337: UI misrepresentation in UI\n  * CVE-2026-106263: Improper input validation in SignIn\n  * CVE-2026-106404: Incorrect authorization in FontAccess\n  * CVE-2026-106183: Missing authorization in Chromoting\n  * CVE-2026-106386: Uninitialized resource in WebAudio\n  * CVE-2026-106351: Observable discrepancy in Safebrowsing\n  * CVE-2026-106384: Missing authorization in SiteIsolation\n  * CVE-2026-106207: Race condition in V8\n  * CVE-2026-106321: Information leak in Editing\n  * CVE-2026-106210: Observable discrepancy in Scroll\n  * CVE-2026-106254: Information leak in Mobile\n  * CVE-2026-106372: Incorrect authorization in UI\n  * CVE-2026-106341: Type confusion in V8\n  * CVE-2026-106409: Incorrect reference resolution in WebAppInstalls\n  * CVE-2026-106340: Missing authorization in CredentialProvider\n  * CVE-2026-106276: UI misrepresentation in Payments\n  * CVE-2026-106338: UI misrepresentation in PictureInPicture\n  * CVE-2026-106317: UI misrepresentation in FullScreen\n  * CVE-2026-106344: Missing authorization in Permissions\n  * CVE-2026-106359: Confused deputy in DeviceBoundSessionCredentials\n  * CVE-2026-106353: Improper input validation in Mobile\n  * CVE-2026-106312: Missing authorization in SignIn\n  * CVE-2026-106191: Missing authorization in Actor\n  * CVE-2026-106250: Missing authorization in Actor\n  * CVE-2026-106309: Incorrect authorization in Selection\n  * CVE-2026-106187: Missing authorization in Permissions\n  * CVE-2026-106394: Incomplete cleanup in Glic\n  * CVE-2026-106306: Incorrect authorization in DevTools\n  * CVE-2026-106427: Confused deputy in Mobile\n  * CVE-2026-106252: Incorrect comparison in Fonts\n  * CVE-2026-106287: Information loss in CORS\n  * CVE-2026-106297: Incorrect authorization in Scheduling\n  * CVE-2026-106260: Incorrect authorization in DevTools\n  * CVE-2026-106362: Missing authorization in DevTools\n  * CVE-2026-106275: Uninitialized resource in GPU\n  * CVE-2026-106199: Incorrect authorization in Actor\n  * CVE-2026-106299: Improper input validation in WebAudio\n  * CVE-2026-106422: Incorrect authorization in API\n  * CVE-2026-106186: Uncontrolled search path element in CredentialProvider\n  * CVE-2026-106247: Buffer overflow in ANGLE\n  * CVE-2026-106192: Information leak in Mobile\n  * CVE-2026-106399: Out of bounds read in Skia\n  * CVE-2026-106264: Missing authorization in Web Authentication (Passkeys \u0026 Security Keys)\n  * CVE-2026-106285: UI misrepresentation in WebAppInstalls\n  * CVE-2026-106220: Information leak in Passwords\n  * CVE-2026-106417: Integer overflow in Media\n  * CVE-2026-106221: Confused deputy in WebAPKs\n  * CVE-2026-106259: Incorrect authorization in PermissionElement\n  * CVE-2026-106296: Improper privilege management in UI\n  * CVE-2026-106249: Incorrect authorization in Autofill\n  * CVE-2026-106374: Type confusion in V8\n  * CVE-2026-106380: UI misrepresentation in UI\n  * CVE-2026-106179: UI misrepresentation in WebAppInstalls\n  * CVE-2026-106368: UI misrepresentation in UI\n  * CVE-2026-106237: Information leak in Permissions\n  * CVE-2026-106331: Improper input validation in Extensions\n  * CVE-2026-106270: Incorrect authorization in WebAppInstalls\n  * CVE-2026-106350: Incorrect authorization in Browser\n  * CVE-2026-106288: Missing authorization in Browser\n  * CVE-2026-106305: UI misrepresentation in Mobile\n  * CVE-2026-106418: Missing authorization in Network\n  * CVE-2026-106343: Improper state validation in Autofill AI\n  * CVE-2026-106371: Incorrect authorization in Transactions Platform\n  * CVE-2026-106256: Information leak in Passwords\n  * CVE-2026-106413: Race condition in Browser\n  * CVE-2026-106339: Use of released resource in Core\n  * CVE-2026-106320: Use of released resource in UI\n  * CVE-2026-106195: Incorrect authorization in Chromoting\n  * CVE-2026-106316: UI misrepresentation in Chromoting\n  * CVE-2026-106385: Race condition in Chromoting\n  * CVE-2026-106325: Incorrect reference resolution in Core\n  * CVE-2026-106390: Incorrect provision of specified functionality in SanitizerAPI\n  * CVE-2026-106294: Incomplete cleanup in Chromoting\n  * CVE-2026-106334: Information leak in Payments\n  * CVE-2026-106236: UI misrepresentation in Chromoting\n  * CVE-2026-106251: UI misrepresentation in Chromoting\n  * CVE-2026-106310: Use of released resource in FontAccess\n  * CVE-2026-106345: Use of released resource in Session\n  * CVE-2026-106272: UI misrepresentation in Chromoting\n  * CVE-2026-106355: Missing authorization in Media\n  * CVE-2026-106234: Use after free in Network\n  * CVE-2026-106269: Use after free in CSS\n","status":"published","published":"2026-10-28T07:49:34Z","modified":"2026-11-01T17:28:15.748729872Z","updated_at":"2026-11-02T16:58:42.426393Z"}]}}