{"id":"CVE-2026-5876","aliases":["ALPINE-CVE-2026-5876","DEBIAN-CVE-2026-5876","EUVD-2026-20682","GHSA-9wcm-fcg4-668c","openSUSE-SU-2026:10530-1","openSUSE-SU-2026:20575-1","openSUSE-SU-2026:20660-1"],"status":"published","title":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a...","description":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00257,"percentile":0.17468,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1300"],"published":"2026-04-08T21:20:47Z","modified":"2026-11-03T06:32:56Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.10.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.11.0-r3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"chromium","fixed_in":["147.0.7727.55-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["147.0.7727.55-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["147.0.7727.55-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.0-r3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"147.0.7727.55-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1","119.0.6045.159-1~deb11u1","119.0.6045.159-1~deb12u1","119.0.6045.199-1","119.0.6045.199-1~deb11u1","119.0.6045.199-1~deb12u1","120.0.6099.109-1","120.0.6099.109-1~deb11u1","120.0.6099.109-1~deb12u1","120.0.6099.129-1","120.0.6099.129-1~deb11u1","120.0.6099.129-1~deb12u1","120.0.6099.199-1","120.0.6099.199-1~deb11u1","120.0.6099.199-1~deb12u1","120.0.6099.216-1","120.0.6099.216-1~deb11u1","120.0.6099.216-1~deb12u1","120.0.6099.224-1","120.0.6099.224-1~deb11u1","120.0.6099.224-1~deb12u1","120.0.6099.224-2","120.0.6099.71-1","120.0.6099.71-1~deb11u1","120.0.6099.71-1~deb12u1","121.0.6167.139-1","121.0.6167.139-1~deb12u1","121.0.6167.160-1","121.0.6167.160-1~deb12u1","121.0.6167.85-1","121.0.6167.85-1~deb12u1","122.0.6261.111-1","122.0.6261.111-1~deb12u1","122.0.6261.128-1","122.0.6261.128-1~deb12u1","122.0.6261.57-1","122.0.6261.57-1~deb12u1","122.0.6261.94-1","122.0.6261.94-1~deb12u1","123.0.6312.105-1","123.0.6312.105-1~deb12u1","123.0.6312.105-1~deb13u1","123.0.6312.105-2","123.0.6312.122-1","123.0.6312.122-1~deb12u1","123.0.6312.58-1","123.0.6312.86-1","123.0.6312.86-1~deb12u1","124.0.6367.118-1","124.0.6367.118-1~deb12u1","124.0.6367.155-1","124.0.6367.155-1~deb12u1","124.0.6367.201-1","124.0.6367.201-1~deb12u1","124.0.6367.207-1","124.0.6367.207-1~deb12u1","124.0.6367.60-1","124.0.6367.60-1~deb12u1","124.0.6367.60-2","124.0.6367.78-1","124.0.6367.78-1~deb12u1","125.0.6422.112-1","125.0.6422.112-1~deb12u1","125.0.6422.141-1","125.0.6422.141-1~deb12u1","125.0.6422.60-1","125.0.6422.60-1~deb12u1","125.0.6422.76-1","125.0.6422.76-1~deb12u1","126.0.6478.114-1","126.0.6478.114-1~deb12u1","126.0.6478.126-1","126.0.6478.126-1~deb12u1","126.0.6478.126-1~deb13u1","126.0.6478.182-1","126.0.6478.182-1~deb12u1","126.0.6478.56-1","126.0.6478.56-1~deb12u1","127.0.6533.119-1","127.0.6533.119-1~deb13u1","127.0.6533.88-1","127.0.6533.88-1~deb12u1","127.0.6533.99-1","127.0.6533.99-1~deb12u1","128.0.6613.113-1","128.0.6613.113-1~deb12u1","128.0.6613.113-1~deb13u1","128.0.6613.119-1","128.0.6613.119-1~deb12u1","128.0.6613.137-1","128.0.6613.137-1~deb12u1","128.0.6613.84-1","128.0.6613.84-1~deb12u1","129.0.6668.100-1","129.0.6668.100-1~deb12u1","129.0.6668.100-2","129.0.6668.58-1","129.0.6668.58-1~deb12u1","129.0.6668.70-1","129.0.6668.70-1~deb12u1","129.0.6668.89-1","129.0.6668.89-1~deb12u1","130.0.6723.116-1","130.0.6723.116-1~deb12u1","130.0.6723.58-1","130.0.6723.58-1~deb12u1","130.0.6723.69-1","130.0.6723.69-1~deb12u1","130.0.6723.91-1","130.0.6723.91-1~deb12u1","130.0.6723.91-2","131.0.6778.108-1","131.0.6778.108-1~deb12u1","131.0.6778.139-1","131.0.6778.139-1~deb12u1","131.0.6778.204-1","131.0.6778.204-1~deb12u1","131.0.6778.264-1","131.0.6778.264-1~deb12u1","131.0.6778.85-1","131.0.6778.85-1~deb12u1","132.0.6834.110-1","132.0.6834.110-1~deb12u1","132.0.6834.159-1","132.0.6834.159-1~deb12u1","132.0.6834.83-1","132.0.6834.83-1~deb12u1","133.0.6943.126-1","133.0.6943.126-1~deb12u1","133.0.6943.141-2","133.0.6943.53-1","133.0.6943.53-1~deb12u1","133.0.6943.98-1","133.0.6943.98-1~deb12u1","134.0.6998.117-1","134.0.6998.117-1~deb12u1","134.0.6998.35-1","134.0.6998.35-1~deb12u1","134.0.6998.35-2","134.0.6998.35-3","134.0.6998.88-1","134.0.6998.88-1~deb12u1","135.0.7049.114-1","135.0.7049.52-1","135.0.7049.52-1~deb12u1","135.0.7049.84-1","135.0.7049.84-1~deb12u1","135.0.7049.95-1","135.0.7049.95-1~deb12u1","136.0.7103.113-1","136.0.7103.113-1~deb12u1","136.0.7103.59-2","136.0.7103.59-2~deb12u2","136.0.7103.92-1","136.0.7103.92-1~deb12u1","136.0.7103.92-2","137.0.7151.103-1","137.0.7151.103-1~deb12u1","137.0.7151.119-1","137.0.7151.119-1~deb12u1","137.0.7151.55-1","137.0.7151.55-2","137.0.7151.55-3","137.0.7151.55-3~deb12u1","137.0.7151.68-1","137.0.7151.68-1~deb12u1","138.0.7204.157-1","138.0.7204.157-1~deb12u1","138.0.7204.168-1","138.0.7204.168-1~deb12u1","138.0.7204.183-1","138.0.7204.183-1~deb12u1","138.0.7204.49-1","138.0.7204.49-1~deb12u1","138.0.7204.92-1","138.0.7204.92-1~deb12u1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"147.0.7727.55-1~deb13u1"}]}],"versions":["138.0.7204.183-1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.55-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"147.0.7727.55-1"}]}],"versions":["138.0.7204.183-1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.55-1~deb12u1","147.0.7727.55-1~deb13u1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"147.0.7727.55-1.1"}]}],"bundled":60},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"147.0.7727.137-bp160.1.1"}]}],"bundled":124}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://issues.chromium.org/issues/41485206","tags":["Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5876"},{"url":"https://github.com/advisories/GHSA-9wcm-fcg4-668c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-5876","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-5876","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5919","tags":["web"]},{"url":"https://bugzilla.suse.com/1261758","tags":["report"]},{"url":"https://bugzilla.suse.com/1262174","tags":["report"]},{"url":"https://bugzilla.suse.com/1262586","tags":["report"]},{"url":"https://bugzilla.suse.com/1263158","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7363","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-5876","description":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2026-04-08T21:20:47.387Z","modified":"2026-04-11T03:03:31.034Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-1300","CWE-1300"],"updated_at":"2026-11-02T13:39:39.001586Z"}],"euvd":[{"id":"EUVD-2026-20682","description":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2026-04-08T21:20:47Z","modified":"2026-04-11T03:03:31Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:29.371024Z"}],"ghsa":[{"id":"GHSA-9wcm-fcg4-668c","title":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a...","description":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2026-04-09T00:31:59Z","modified":"2026-04-11T06:31:14Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-1300"],"updated_at":"2026-11-02T15:07:25.53537Z"}],"nvd":[{"id":"CVE-2026-5876","description":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2026-04-08T22:16:27.21Z","modified":"2026-07-24T08:10:00.15Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-1300"],"updated_at":"2026-11-02T14:12:13.902911Z"}],"osv":[{"id":"ALPINE-CVE-2026-5876","description":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2026-04-08T22:16:27.21Z","modified":"2026-11-03T06:32:56.500896666Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"DEBIAN-CVE-2026-5876","description":"Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","status":"published","published":"2026-04-08T22:16:27.21Z","modified":"2026-10-01T03:03:28.128192138Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"openSUSE-SU-2026:10530-1","title":"chromedriver-147.0.7727.55-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-147.0.7727.55-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-11T00:00:00Z","modified":"2026-04-12T10:18:04.434641Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20575-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChromium 147.0.7727.55 (boo#1261758):\n\n  * CVE-2026-5858: Heap buffer overflow in WebML\n  * CVE-2026-5859: Integer overflow in WebML\n  * CVE-2026-5860: Use after free in WebRTC\n  * CVE-2026-5861: Use after free in V8\n  * CVE-2026-5862: Inappropriate implementation in V8\n  * CVE-2026-5863: Inappropriate implementation in V8\n  * CVE-2026-5864: Heap buffer overflow in WebAudio\n  * CVE-2026-5865: Type Confusion in V8\n  * CVE-2026-5866: Use after free in Media\n  * CVE-2026-5867: Heap buffer overflow in WebML\n  * CVE-2026-5868: Heap buffer overflow in ANGLE\n  * CVE-2026-5869: Heap buffer overflow in WebML\n  * CVE-2026-5870: Integer overflow in Skia\n  * CVE-2026-5871: Type Confusion in V8\n  * CVE-2026-5872: Use after free in Blink\n  * CVE-2026-5873: Out of bounds read and write in V8\n  * CVE-2026-5874: Use after free in PrivateAI\n  * CVE-2026-5875: Policy bypass in Blink\n  * CVE-2026-5876: Side-channel information leakage in Navigation\n  * CVE-2026-5877: Use after free in Navigation\n  * CVE-2026-5878: Incorrect security UI in Blink\n  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE\n  * CVE-2026-5880: Incorrect security UI in browser UI\n  * CVE-2026-5881: Policy bypass in LocalNetworkAccess\n  * CVE-2026-5882: Incorrect security UI in Fullscreen\n  * CVE-2026-5883: Use after free in Media\n  * CVE-2026-5884: Insufficient validation of untrusted input in Media\n  * CVE-2026-5885: Insufficient validation of untrusted input in WebML\n  * CVE-2026-5886: Out of bounds read in WebAudio\n  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads\n  * CVE-2026-5888: Uninitialized Use in WebCodecs\n  * CVE-2026-5889: Cryptographic Flaw in PDFium\n  * CVE-2026-5890: Race in WebCodecs\n  * CVE-2026-5891: Insufficient policy enforcement in browser UI\n  * CVE-2026-5892: Insufficient policy enforcement in PWAs\n  * CVE-2026-5893: Race in V8\n  * CVE-2026-5894: Inappropriate implementation in PDF\n  * CVE-2026-5895: Incorrect security UI in Omnibox\n  * CVE-2026-5896: Policy bypass in Audio\n  * CVE-2026-5897: Incorrect security UI in Downloads\n  * CVE-2026-5898: Incorrect security UI in Omnibox\n  * CVE-2026-5899: Incorrect security UI in History Navigation\n  * CVE-2026-5900: Policy bypass in Downloads\n  * CVE-2026-5901: Policy bypass in DevTools\n  * CVE-2026-5902: Race in Media\n  * CVE-2026-5903: Policy bypass in IFrameSandbox\n  * CVE-2026-5904: Use after free in V8\n  * CVE-2026-5905: Incorrect security UI in Permissions\n  * CVE-2026-5906: Incorrect security UI in Omnibox\n  * CVE-2026-5907: Insufficient data validation in Media\n  * CVE-2026-5908: Integer overflow in Media\n  * CVE-2026-5909: Integer overflow in Media\n  * CVE-2026-5910: Integer overflow in Media\n  * CVE-2026-5911: Policy bypass in ServiceWorkers\n  * CVE-2026-5912: Integer overflow in WebRTC\n  * CVE-2026-5913: Out of bounds read in Blink\n  * CVE-2026-5914: Type Confusion in CSS\n  * CVE-2026-5915: Insufficient validation of untrusted input in WebML\n  * CVE-2026-5918: Inappropriate implementation in Navigation\n  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets\n  * enforce a number of new Local Area Network (LAN) restrictions\n  * New Web Printing API\n  * vertical tabs support (trial)\n\n- new in 147 (for developers):\n\n  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.\n  * CSS contrast-color() helps meet accessibility requirements\n  * The CSS border-shape property lets you create non-rectangular borders\n\n  * CVE-2025-4096: Heap buffer overflow in HTML\n  * CVE-2025-4050: Out of bounds memory access in DevTools\n  * CVE-2025-4051: Insufficient data validation in DevTools\n  * CVE-2025-4052: Inappropriate implementation in DevTools\n  * CVE-2024-7000: Use after free in CSS\n  * CVE-2024-3834: Use after free in Downloads\n  * CVE-2020-6465: Use after free in reader mode\n  * CVE-2020-6466: Use after free in media\n  * CVE-2020-6467: Use after free in WebRTC\n  * CVE-2020-6468: Type Confusion in V8\n  * CVE-2020-6469: Insufficient policy enforcement in developer tools\n  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard\n  * CVE-2020-6471: Insufficient policy enforcement in developer tools\n  * CVE-2020-6472: Insufficient policy enforcement in developer tools\n  * CVE-2020-6473: Insufficient policy enforcement in Blink\n  * CVE-2020-6474: Use after free in Blink\n  * CVE-2020-6475: Incorrect security UI in full screen\n  * CVE-2020-6476: Insufficient policy enforcement in tab strip\n  * CVE-2020-6477: Inappropriate implementation in installer\n  * CVE-2020-6478: Inappropriate implementation in full screen\n  * CVE-2020-6479: Inappropriate implementation in sharing\n  * CVE-2020-6480: Insufficient policy enforcement in enterprise\n  * CVE-2020-6481: Insufficient policy enforcement in URL formatting\n  * CVE-2020-6482: Insufficient policy enforcement in developer tools\n  * CVE-2020-6483: Insufficient policy enforcement in payments\n  * CVE-2020-6484: Insufficient data validation in ChromeDriver\n  * CVE-2020-6485: Insufficient data validation in media router\n  * CVE-2020-6486: Insufficient policy enforcement in navigations\n  * CVE-2020-6487: Insufficient policy enforcement in downloads\n  * CVE-2020-6488: Insufficient policy enforcement in downloads\n  * CVE-2020-6489: Inappropriate implementation in developer tools\n  * CVE-2020-6490: Insufficient data validation in loader\n  * CVE-2020-6491: Incorrect security UI in site information\n  * CVE-2019-5754: Inappropriate implementation in QUIC Networking\n  * CVE-2019-5782:  Inappropriate implementation in V8\n  * CVE-2019-5755: Inappropriate implementation in V8\n  * CVE-2019-5756: Use after free in PDFium\n  * CVE-2019-5757: Type Confusion in SVG\n  * CVE-2019-5758: Use after free in Blink\n  * CVE-2019-5759: Use after free in HTML select elements\n  * CVE-2019-5760: Use after free in WebRTC\n  * CVE-2019-5761: Use after free in SwiftShader\n  * CVE-2019-5762: Use after free in PDFium\n  * CVE-2019-5763: Insufficient validation of untrusted input in V8\n  * CVE-2019-5764: Use after free in WebRTC\n  * CVE-2019-5765: Insufficient policy enforcement in the browser\n  * CVE-2019-5766: Insufficient policy enforcement in Canvas\n  * CVE-2019-5767: Incorrect security UI in WebAPKs\n  * CVE-2019-5768: Insufficient policy enforcement in DevTools\n  * CVE-2019-5769: Insufficient validation of untrusted input in Blink\n  * CVE-2019-5770: Heap buffer overflow in WebGL\n  * CVE-2019-5771: Heap buffer overflow in SwiftShader\n  * CVE-2019-5772: Use after free in PDFium\n  * CVE-2019-5773: Insufficient data validation in IndexedDB\n  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing\n  * CVE-2019-5775: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5776: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5777: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5778: Insufficient policy enforcement in Extensions\n  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker\n  * CVE-2019-5780: Insufficient policy enforcement\n  * CVE-2019-5781: Insufficient policy enforcement in Omnibox\n  * High CVE-2018-6031: Use after free in PDFium\n  * High CVE-2018-6032: Same origin bypass in Shared Worker\n  * High CVE-2018-6033: Race when opening downloaded files\n  * Medium CVE-2018-6034: Integer overflow in Blink\n  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6036: Integer underflow in WebAssembly\n  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill\n  * Medium CVE-2018-6038: Heap buffer overflow in WebGL\n  * Medium CVE-2018-6039: XSS in DevTools\n  * Medium CVE-2018-6040: Content security policy bypass\n  * Medium CVE-2018-6041: URL spoof in Navigation\n  * Medium CVE-2018-6042: URL spoof in OmniBox\n  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers\n  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6047: Cross origin URL leak in WebGL\n  * Low CVE-2018-6048: Referrer policy bypass in Blink\n  * Low CVE-2017-15420: URL spoofing in Omnibox\n  * Low CVE-2018-6049: UI spoof in Permissions\n  * Low CVE-2018-6050: URL spoof in OmniBox\n  * Low CVE-2018-6051: Referrer leak in XSS Auditor\n  * Low CVE-2018-6052: Incomplete no-referrer policy implementation\n  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page\n  * Low CVE-2018-6054: Use after free in WebUI\n  * CVE-2017-5070: Type confusion in V8\n  * CVE-2017-5071: Out of bounds read in V8\n  * CVE-2017-5072: Address spoofing in Omnibox\n  * CVE-2017-5073: Use after free in print preview\n  * CVE-2017-5074: Use after free in Apps Bluetooth\n  * CVE-2017-5075: Information leak in CSP reporting\n  * CVE-2017-5086: Address spoofing in Omnibox\n  * CVE-2017-5076: Address spoofing in Omnibox\n  * CVE-2017-5077: Heap buffer overflow in Skia\n  * CVE-2017-5078: Possible command injection in mailto handling\n  * CVE-2017-5079: UI spoofing in Blink\n  * CVE-2017-5080: Use after free in credit card autofill\n  * CVE-2017-5081: Extension verification bypass\n  * CVE-2017-5082: Insufficient hardening in credit card editor\n  * CVE-2017-5083: UI spoofing in Blink\n  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages\n    - CVE-2016-1663: Use-after-free in Blink's V8 bindings\n    * CVE-2013-6643: Unprompted sync with an attacker's\n  * Use Google's online spellchecker to identify misspelled words\n","status":"withdrawn","published":"2026-04-12T20:14:42Z","modified":"2026-09-02T14:00:15.850934382Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20660-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 147.0.7727.137 (boo#1263158)\n  * CVE-2026-7363: Use after free in Canvas\n  * CVE-2026-7361: Use after free in iOS\n  * CVE-2026-7344: Use after free in Accessibility\n  * CVE-2026-7343: Use after free in Views\n  * CVE-2026-7333: Use after free in GPU\n  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing\n  * CVE-2026-7359: Use after free in ANGLE\n  * CVE-2026-7358: Use after free in Animation\n  * CVE-2026-7334: Use after free in Views\n  * CVE-2026-7357: Use after free in GPU\n  * CVE-2026-7356: Use after free in Navigation\n  * CVE-2026-7354: Out of bounds read and write in Angle\n  * CVE-2026-7353: Heap buffer overflow in Skia\n  * CVE-2026-7352: Use after free in Media\n  * CVE-2026-7351: Race in MHTML\n  * CVE-2026-7350: Use after free in WebMIDI\n  * CVE-2026-7349: Use after free in Cast\n  * CVE-2026-7348: Use after free in Codecs\n  * CVE-2026-7335: Use after free in media\n  * CVE-2026-7336: Use after free in WebRTC\n  * CVE-2026-7337: Type Confusion in V8\n  * CVE-2026-7347: Use after free in Chromoting\n  * CVE-2026-7346: Inappropriate implementation in Tint\n  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback\n  * CVE-2026-7338: Use after free in Cast\n  * CVE-2026-7342: Use after free in WebView\n  * CVE-2026-7341: Use after free in WebRTC\n  * CVE-2026-7339: Heap buffer overflow in WebRTC\n  * CVE-2026-7340: Integer overflow in ANGLE\n  * CVE-2026-7355: Use after free in Media\n\n- Chromium 147.0.7727.116 (boo#1262586)\n\n- Chromium 147.0.7727.101 (boo#1262174)\n  * CVE-2026-6296: Heap buffer overflow in ANGLE\n  * CVE-2026-6297: Use after free in Proxy\n  * CVE-2026-6298: Heap buffer overflow in Skia\n  * CVE-2026-6299: Use after free in Prerender\n  * CVE-2026-6358: Use after free in XR\n  * CVE-2026-6359: Use after free in Video\n  * CVE-2026-6300: Use after free in CSS\n  * CVE-2026-6301: Type Confusion in Turbofan\n  * CVE-2026-6302: Use after free in Video\n  * CVE-2026-6303: Use after free in Codecs\n  * CVE-2026-6304: Use after free in Graphite\n  * CVE-2026-6305: Heap buffer overflow in PDFium\n  * CVE-2026-6306: Heap buffer overflow in PDFium\n  * CVE-2026-6307: Type Confusion in Turbofan\n  * CVE-2026-6308: Out of bounds read in Media\n  * CVE-2026-6309: Use after free in Viz\n  * CVE-2026-6360: Use after free in FileSystem\n  * CVE-2026-6310: Use after free in Dawn\n  * CVE-2026-6311: Uninitialized Use in Accessibility\n  * CVE-2026-6312: Insufficient policy enforcement in Passwords\n  * CVE-2026-6313: Insufficient policy enforcement in CORS\n  * CVE-2026-6314: Out of bounds write in GPU\n  * CVE-2026-6315: Use after free in Permissions\n  * CVE-2026-6316: Use after free in Forms\n  * CVE-2026-6361: Heap buffer overflow in PDFium\n  * CVE-2026-6362: Use after free in Codecs\n  * CVE-2026-6317: Use after free in Cast\n  * CVE-2026-6363: Type Confusion in V8\n  * CVE-2026-6318: Use after free in Codecs\n  * CVE-2026-6319: Use after free in Payments\n  * CVE-2026-6364: Out of bounds read in Skia\n\n- Chromium 147.0.7727.55 (boo#1261758):\n\n  * CVE-2026-5858: Heap buffer overflow in WebML\n  * CVE-2026-5859: Integer overflow in WebML\n  * CVE-2026-5860: Use after free in WebRTC\n  * CVE-2026-5861: Use after free in V8\n  * CVE-2026-5862: Inappropriate implementation in V8\n  * CVE-2026-5863: Inappropriate implementation in V8\n  * CVE-2026-5864: Heap buffer overflow in WebAudio\n  * CVE-2026-5865: Type Confusion in V8\n  * CVE-2026-5866: Use after free in Media\n  * CVE-2026-5867: Heap buffer overflow in WebML\n  * CVE-2026-5868: Heap buffer overflow in ANGLE\n  * CVE-2026-5869: Heap buffer overflow in WebML\n  * CVE-2026-5870: Integer overflow in Skia\n  * CVE-2026-5871: Type Confusion in V8\n  * CVE-2026-5872: Use after free in Blink\n  * CVE-2026-5873: Out of bounds read and write in V8\n  * CVE-2026-5874: Use after free in PrivateAI\n  * CVE-2026-5875: Policy bypass in Blink\n  * CVE-2026-5876: Side-channel information leakage in Navigation\n  * CVE-2026-5877: Use after free in Navigation\n  * CVE-2026-5878: Incorrect security UI in Blink\n  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE\n  * CVE-2026-5880: Incorrect security UI in browser UI\n  * CVE-2026-5881: Policy bypass in LocalNetworkAccess\n  * CVE-2026-5882: Incorrect security UI in Fullscreen\n  * CVE-2026-5883: Use after free in Media\n  * CVE-2026-5884: Insufficient validation of untrusted input in Media\n  * CVE-2026-5885: Insufficient validation of untrusted input in WebML\n  * CVE-2026-5886: Out of bounds read in WebAudio\n  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads\n  * CVE-2026-5888: Uninitialized Use in WebCodecs\n  * CVE-2026-5889: Cryptographic Flaw in PDFium\n  * CVE-2026-5890: Race in WebCodecs\n  * CVE-2026-5891: Insufficient policy enforcement in browser UI\n  * CVE-2026-5892: Insufficient policy enforcement in PWAs\n  * CVE-2026-5893: Race in V8\n  * CVE-2026-5894: Inappropriate implementation in PDF\n  * CVE-2026-5895: Incorrect security UI in Omnibox\n  * CVE-2026-5896: Policy bypass in Audio\n  * CVE-2026-5897: Incorrect security UI in Downloads\n  * CVE-2026-5898: Incorrect security UI in Omnibox\n  * CVE-2026-5899: Incorrect security UI in History Navigation\n  * CVE-2026-5900: Policy bypass in Downloads\n  * CVE-2026-5901: Policy bypass in DevTools\n  * CVE-2026-5902: Race in Media\n  * CVE-2026-5903: Policy bypass in IFrameSandbox\n  * CVE-2026-5904: Use after free in V8\n  * CVE-2026-5905: Incorrect security UI in Permissions\n  * CVE-2026-5906: Incorrect security UI in Omnibox\n  * CVE-2026-5907: Insufficient data validation in Media\n  * CVE-2026-5908: Integer overflow in Media\n  * CVE-2026-5909: Integer overflow in Media\n  * CVE-2026-5910: Integer overflow in Media\n  * CVE-2026-5911: Policy bypass in ServiceWorkers\n  * CVE-2026-5912: Integer overflow in WebRTC\n  * CVE-2026-5913: Out of bounds read in Blink\n  * CVE-2026-5914: Type Confusion in CSS\n  * CVE-2026-5915: Insufficient validation of untrusted input in WebML\n  * CVE-2026-5918: Inappropriate implementation in Navigation\n  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets\n  * enforce a number of new Local Area Network (LAN) restrictions\n  * New Web Printing API\n  * vertical tabs support (trial)\n\n- new in 147 (for developers):\n\n  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.\n  * CSS contrast-color() helps meet accessibility requirements\n  * The CSS border-shape property lets you create non-rectangular borders\n\n  * CVE-2025-4096: Heap buffer overflow in HTML\n  * CVE-2025-4050: Out of bounds memory access in DevTools\n  * CVE-2025-4051: Insufficient data validation in DevTools\n  * CVE-2025-4052: Inappropriate implementation in DevTools\n  * CVE-2024-7000: Use after free in CSS\n  * CVE-2024-3834: Use after free in Downloads\n  * CVE-2020-6465: Use after free in reader mode\n  * CVE-2020-6466: Use after free in media\n  * CVE-2020-6467: Use after free in WebRTC\n  * CVE-2020-6468: Type Confusion in V8\n  * CVE-2020-6469: Insufficient policy enforcement in developer tools\n  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard\n  * CVE-2020-6471: Insufficient policy enforcement in developer tools\n  * CVE-2020-6472: Insufficient policy enforcement in developer tools\n  * CVE-2020-6473: Insufficient policy enforcement in Blink\n  * CVE-2020-6474: Use after free in Blink\n  * CVE-2020-6475: Incorrect security UI in full screen\n  * CVE-2020-6476: Insufficient policy enforcement in tab strip\n  * CVE-2020-6477: Inappropriate implementation in installer\n  * CVE-2020-6478: Inappropriate implementation in full screen\n  * CVE-2020-6479: Inappropriate implementation in sharing\n  * CVE-2020-6480: Insufficient policy enforcement in enterprise\n  * CVE-2020-6481: Insufficient policy enforcement in URL formatting\n  * CVE-2020-6482: Insufficient policy enforcement in developer tools\n  * CVE-2020-6483: Insufficient policy enforcement in payments\n  * CVE-2020-6484: Insufficient data validation in ChromeDriver\n  * CVE-2020-6485: Insufficient data validation in media router\n  * CVE-2020-6486: Insufficient policy enforcement in navigations\n  * CVE-2020-6487: Insufficient policy enforcement in downloads\n  * CVE-2020-6488: Insufficient policy enforcement in downloads\n  * CVE-2020-6489: Inappropriate implementation in developer tools\n  * CVE-2020-6490: Insufficient data validation in loader\n  * CVE-2020-6491: Incorrect security UI in site information\n  * CVE-2019-5754: Inappropriate implementation in QUIC Networking\n  * CVE-2019-5782:  Inappropriate implementation in V8\n  * CVE-2019-5755: Inappropriate implementation in V8\n  * CVE-2019-5756: Use after free in PDFium\n  * CVE-2019-5757: Type Confusion in SVG\n  * CVE-2019-5758: Use after free in Blink\n  * CVE-2019-5759: Use after free in HTML select elements\n  * CVE-2019-5760: Use after free in WebRTC\n  * CVE-2019-5761: Use after free in SwiftShader\n  * CVE-2019-5762: Use after free in PDFium\n  * CVE-2019-5763: Insufficient validation of untrusted input in V8\n  * CVE-2019-5764: Use after free in WebRTC\n  * CVE-2019-5765: Insufficient policy enforcement in the browser\n  * CVE-2019-5766: Insufficient policy enforcement in Canvas\n  * CVE-2019-5767: Incorrect security UI in WebAPKs\n  * CVE-2019-5768: Insufficient policy enforcement in DevTools\n  * CVE-2019-5769: Insufficient validation of untrusted input in Blink\n  * CVE-2019-5770: Heap buffer overflow in WebGL\n  * CVE-2019-5771: Heap buffer overflow in SwiftShader\n  * CVE-2019-5772: Use after free in PDFium\n  * CVE-2019-5773: Insufficient data validation in IndexedDB\n  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing\n  * CVE-2019-5775: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5776: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5777: Insufficient policy enforcement in Omnibox\n  * CVE-2019-5778: Insufficient policy enforcement in Extensions\n  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker\n  * CVE-2019-5780: Insufficient policy enforcement\n  * CVE-2019-5781: Insufficient policy enforcement in Omnibox\n  * High CVE-2018-6031: Use after free in PDFium\n  * High CVE-2018-6032: Same origin bypass in Shared Worker\n  * High CVE-2018-6033: Race when opening downloaded files\n  * Medium CVE-2018-6034: Integer overflow in Blink\n  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6036: Integer underflow in WebAssembly\n  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill\n  * Medium CVE-2018-6038: Heap buffer overflow in WebGL\n  * Medium CVE-2018-6039: XSS in DevTools\n  * Medium CVE-2018-6040: Content security policy bypass\n  * Medium CVE-2018-6041: URL spoof in Navigation\n  * Medium CVE-2018-6042: URL spoof in OmniBox\n  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers\n  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions\n  * Medium CVE-2018-6047: Cross origin URL leak in WebGL\n  * Low CVE-2018-6048: Referrer policy bypass in Blink\n  * Low CVE-2017-15420: URL spoofing in Omnibox\n  * Low CVE-2018-6049: UI spoof in Permissions\n  * Low CVE-2018-6050: URL spoof in OmniBox\n  * Low CVE-2018-6051: Referrer leak in XSS Auditor\n  * Low CVE-2018-6052: Incomplete no-referrer policy implementation\n  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page\n  * Low CVE-2018-6054: Use after free in WebUI\n  * CVE-2017-5070: Type confusion in V8\n  * CVE-2017-5071: Out of bounds read in V8\n  * CVE-2017-5072: Address spoofing in Omnibox\n  * CVE-2017-5073: Use after free in print preview\n  * CVE-2017-5074: Use after free in Apps Bluetooth\n  * CVE-2017-5075: Information leak in CSP reporting\n  * CVE-2017-5086: Address spoofing in Omnibox\n  * CVE-2017-5076: Address spoofing in Omnibox\n  * CVE-2017-5077: Heap buffer overflow in Skia\n  * CVE-2017-5078: Possible command injection in mailto handling\n  * CVE-2017-5079: UI spoofing in Blink\n  * CVE-2017-5080: Use after free in credit card autofill\n  * CVE-2017-5081: Extension verification bypass\n  * CVE-2017-5082: Insufficient hardening in credit card editor\n  * CVE-2017-5083: UI spoofing in Blink\n  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages\n    - CVE-2016-1663: Use-after-free in Blink's V8 bindings\n    * CVE-2013-6643: Unprompted sync with an attacker's\n  * Use Google's online spellchecker to identify misspelled words\n","status":"published","published":"2026-08-31T08:40:11Z","modified":"2026-09-02T11:26:18.794471216Z","updated_at":"2026-11-02T16:58:41.463445Z"}]}}