{"id":"CVE-2026-87656","aliases":["DEBIAN-CVE-2026-87656","EUVD-2026-74443","GHSA-4xh2-7jp7-gcp9","openSUSE-SU-2026:11750-1","openSUSE-SU-2026:21858-1","openSUSE-SU-2026:21921-1"],"status":"published","title":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a...","description":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00227,"percentile":0.13544,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-754"],"published":"2026-09-09T00:10:01Z","modified":"2026-11-01T17:28:13Z","fixes":[{"ecosystem":"Debian:12","package":"chromium","fixed_in":["153.0.8010.52-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["153.0.8010.47-2~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["153.0.8010.47-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.52-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1","119.0.6045.159-1~deb11u1","119.0.6045.159-1~deb12u1","119.0.6045.199-1","119.0.6045.199-1~deb11u1","119.0.6045.199-1~deb12u1","120.0.6099.109-1","120.0.6099.109-1~deb11u1","120.0.6099.109-1~deb12u1","120.0.6099.129-1","120.0.6099.129-1~deb11u1","120.0.6099.129-1~deb12u1","120.0.6099.199-1","120.0.6099.199-1~deb11u1","120.0.6099.199-1~deb12u1","120.0.6099.216-1","120.0.6099.216-1~deb11u1","120.0.6099.216-1~deb12u1","120.0.6099.224-1","120.0.6099.224-1~deb11u1","120.0.6099.224-1~deb12u1","120.0.6099.224-2","120.0.6099.71-1","120.0.6099.71-1~deb11u1","120.0.6099.71-1~deb12u1","121.0.6167.139-1","121.0.6167.139-1~deb12u1","121.0.6167.160-1","121.0.6167.160-1~deb12u1","121.0.6167.85-1","121.0.6167.85-1~deb12u1","122.0.6261.111-1","122.0.6261.111-1~deb12u1","122.0.6261.128-1","122.0.6261.128-1~deb12u1","122.0.6261.57-1","122.0.6261.57-1~deb12u1","122.0.6261.94-1","122.0.6261.94-1~deb12u1","123.0.6312.105-1","123.0.6312.105-1~deb12u1","123.0.6312.105-1~deb13u1","123.0.6312.105-2","123.0.6312.122-1","123.0.6312.122-1~deb12u1","123.0.6312.58-1","123.0.6312.86-1","123.0.6312.86-1~deb12u1","124.0.6367.118-1","124.0.6367.118-1~deb12u1","124.0.6367.155-1","124.0.6367.155-1~deb12u1","124.0.6367.201-1","124.0.6367.201-1~deb12u1","124.0.6367.207-1","124.0.6367.207-1~deb12u1","124.0.6367.60-1","124.0.6367.60-1~deb12u1","124.0.6367.60-2","124.0.6367.78-1","124.0.6367.78-1~deb12u1","125.0.6422.112-1","125.0.6422.112-1~deb12u1","125.0.6422.141-1","125.0.6422.141-1~deb12u1","125.0.6422.60-1","125.0.6422.60-1~deb12u1","125.0.6422.76-1","125.0.6422.76-1~deb12u1","126.0.6478.114-1","126.0.6478.114-1~deb12u1","126.0.6478.126-1","126.0.6478.126-1~deb12u1","126.0.6478.126-1~deb13u1","126.0.6478.182-1","126.0.6478.182-1~deb12u1","126.0.6478.56-1","126.0.6478.56-1~deb12u1","127.0.6533.119-1","127.0.6533.119-1~deb13u1","127.0.6533.88-1","127.0.6533.88-1~deb12u1","127.0.6533.99-1","127.0.6533.99-1~deb12u1","128.0.6613.113-1","128.0.6613.113-1~deb12u1","128.0.6613.113-1~deb13u1","128.0.6613.119-1","128.0.6613.119-1~deb12u1","128.0.6613.137-1","128.0.6613.137-1~deb12u1","128.0.6613.84-1","128.0.6613.84-1~deb12u1","129.0.6668.100-1","129.0.6668.100-1~deb12u1","129.0.6668.100-2","129.0.6668.58-1","129.0.6668.58-1~deb12u1","129.0.6668.70-1","129.0.6668.70-1~deb12u1","129.0.6668.89-1","129.0.6668.89-1~deb12u1","130.0.6723.116-1","130.0.6723.116-1~deb12u1","130.0.6723.58-1","130.0.6723.58-1~deb12u1","130.0.6723.69-1","130.0.6723.69-1~deb12u1","130.0.6723.91-1","130.0.6723.91-1~deb12u1","130.0.6723.91-2","131.0.6778.108-1","131.0.6778.108-1~deb12u1","131.0.6778.139-1","131.0.6778.139-1~deb12u1","131.0.6778.204-1","131.0.6778.204-1~deb12u1","131.0.6778.264-1","131.0.6778.264-1~deb12u1","131.0.6778.85-1","131.0.6778.85-1~deb12u1","132.0.6834.110-1","132.0.6834.110-1~deb12u1","132.0.6834.159-1","132.0.6834.159-1~deb12u1","132.0.6834.83-1","132.0.6834.83-1~deb12u1","133.0.6943.126-1","133.0.6943.126-1~deb12u1","133.0.6943.141-2","133.0.6943.53-1","133.0.6943.53-1~deb12u1","133.0.6943.98-1","133.0.6943.98-1~deb12u1","134.0.6998.117-1","134.0.6998.117-1~deb12u1","134.0.6998.35-1","134.0.6998.35-1~deb12u1","134.0.6998.35-2","134.0.6998.35-3","134.0.6998.88-1","134.0.6998.88-1~deb12u1","135.0.7049.114-1","135.0.7049.52-1","135.0.7049.52-1~deb12u1","135.0.7049.84-1","135.0.7049.84-1~deb12u1","135.0.7049.95-1","135.0.7049.95-1~deb12u1","136.0.7103.113-1","136.0.7103.113-1~deb12u1","136.0.7103.59-2","136.0.7103.59-2~deb12u2","136.0.7103.92-1","136.0.7103.92-1~deb12u1","136.0.7103.92-2","137.0.7151.103-1","137.0.7151.103-1~deb12u1","137.0.7151.119-1","137.0.7151.119-1~deb12u1","137.0.7151.55-1","137.0.7151.55-2","137.0.7151.55-3","137.0.7151.55-3~deb12u1","137.0.7151.68-1","137.0.7151.68-1~deb12u1","138.0.7204.157-1","138.0.7204.157-1~deb12u1","138.0.7204.168-1","138.0.7204.168-1~deb12u1","138.0.7204.183-1","138.0.7204.183-1~deb12u1","138.0.7204.49-1","138.0.7204.49-1~deb12u1","138.0.7204.92-1","138.0.7204.92-1~deb12u1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.101-1","147.0.7727.101-1~deb12u1","147.0.7727.101-1~deb13u1","147.0.7727.116-1","147.0.7727.116-1~deb12u1","147.0.7727.116-1~deb13u1","147.0.7727.137-1","147.0.7727.137-1~deb12u1","147.0.7727.137-1~deb13u1","147.0.7727.55-1","147.0.7727.55-1~deb12u1","147.0.7727.55-1~deb13u1","148.0.7778.167-1","148.0.7778.167-1~deb12u1","148.0.7778.167-1~deb13u1","148.0.7778.178-1","148.0.7778.178-1~deb12u1","148.0.7778.178-1~deb13u1","148.0.7778.215-1","148.0.7778.215-1~deb12u1","148.0.7778.215-1~deb13u1","148.0.7778.215-2","148.0.7778.96-1","148.0.7778.96-1~deb12u1","148.0.7778.96-1~deb13u1","148.0.7778.96-2","148.0.7778.96-3","149.0.7827.102-1","149.0.7827.102-1~deb12u1","149.0.7827.102-1~deb13u1","149.0.7827.114-1","149.0.7827.114-1~deb12u1","149.0.7827.114-1~deb13u1","149.0.7827.155-1","149.0.7827.155-1~deb12u1","149.0.7827.155-1~deb13u1","149.0.7827.196-1","149.0.7827.196-1~deb12u1","149.0.7827.196-1~deb13u1","149.0.7827.53-1","149.0.7827.53-1~deb12u1","149.0.7827.53-1~deb13u1","150.0.7871.100-1","150.0.7871.100-1~deb12u1","150.0.7871.100-1~deb13u1","150.0.7871.114-1","150.0.7871.114-1~deb12u1","150.0.7871.114-1~deb13u1","150.0.7871.124-1","150.0.7871.124-1~deb12u1","150.0.7871.124-1~deb13u1","150.0.7871.181-1","150.0.7871.181-1~deb12u1","150.0.7871.181-1~deb13u1","150.0.7871.46-1","150.0.7871.46-1~deb12u1","150.0.7871.46-1~deb13u1","151.0.7922.108-1","151.0.7922.108-1~deb12u1","151.0.7922.108-1~deb13u1","151.0.7922.108-2","151.0.7922.137-1","151.0.7922.137-1~deb12u1","151.0.7922.137-1~deb13u1","151.0.7922.137-2","151.0.7922.169-1","151.0.7922.169-1~deb12u1","151.0.7922.169-1~deb13u1","151.0.7922.173-1","151.0.7922.173-1~deb12u1","151.0.7922.173-1~deb13u1","151.0.7922.47-1","151.0.7922.71-1","151.0.7922.71-1~deb12u1","151.0.7922.71-1~deb13u1","152.0.7977.64-1","152.0.7977.75-1","152.0.7977.75-1~deb12u1","152.0.7977.75-1~deb13u1","152.0.7977.82-1","152.0.7977.82-1~deb12u1","152.0.7977.82-1~deb13u1","153.0.8010.47-1","153.0.8010.47-2","153.0.8010.47-2~deb12u1","153.0.8010.47-2~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.47-2~deb13u1"}]}],"versions":["138.0.7204.183-1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.101-1","147.0.7727.101-1~deb12u1","147.0.7727.101-1~deb13u1","147.0.7727.116-1","147.0.7727.116-1~deb12u1","147.0.7727.116-1~deb13u1","147.0.7727.137-1","147.0.7727.137-1~deb12u1","147.0.7727.137-1~deb13u1","147.0.7727.55-1","147.0.7727.55-1~deb12u1","147.0.7727.55-1~deb13u1","148.0.7778.167-1","148.0.7778.167-1~deb12u1","148.0.7778.167-1~deb13u1","148.0.7778.178-1","148.0.7778.178-1~deb12u1","148.0.7778.178-1~deb13u1","148.0.7778.215-1","148.0.7778.215-1~deb12u1","148.0.7778.215-1~deb13u1","148.0.7778.215-2","148.0.7778.96-1","148.0.7778.96-1~deb12u1","148.0.7778.96-1~deb13u1","148.0.7778.96-2","148.0.7778.96-3","149.0.7827.102-1","149.0.7827.102-1~deb12u1","149.0.7827.102-1~deb13u1","149.0.7827.114-1","149.0.7827.114-1~deb12u1","149.0.7827.114-1~deb13u1","149.0.7827.155-1","149.0.7827.155-1~deb12u1","149.0.7827.155-1~deb13u1","149.0.7827.196-1","149.0.7827.196-1~deb12u1","149.0.7827.196-1~deb13u1","149.0.7827.53-1","149.0.7827.53-1~deb12u1","149.0.7827.53-1~deb13u1","150.0.7871.100-1","150.0.7871.100-1~deb12u1","150.0.7871.100-1~deb13u1","150.0.7871.114-1","150.0.7871.114-1~deb12u1","150.0.7871.114-1~deb13u1","150.0.7871.124-1","150.0.7871.124-1~deb12u1","150.0.7871.124-1~deb13u1","150.0.7871.181-1","150.0.7871.181-1~deb12u1","150.0.7871.181-1~deb13u1","150.0.7871.46-1","150.0.7871.46-1~deb12u1","150.0.7871.46-1~deb13u1","151.0.7922.108-1","151.0.7922.108-1~deb12u1","151.0.7922.108-1~deb13u1","151.0.7922.108-2","151.0.7922.137-1","151.0.7922.137-1~deb12u1","151.0.7922.137-1~deb13u1","151.0.7922.137-2","151.0.7922.169-1","151.0.7922.169-1~deb12u1","151.0.7922.169-1~deb13u1","151.0.7922.173-1","151.0.7922.173-1~deb12u1","151.0.7922.173-1~deb13u1","151.0.7922.47-1","151.0.7922.71-1","151.0.7922.71-1~deb12u1","151.0.7922.71-1~deb13u1","152.0.7977.64-1","152.0.7977.75-1","152.0.7977.75-1~deb12u1","152.0.7977.75-1~deb13u1","152.0.7977.82-1","152.0.7977.82-1~deb12u1","152.0.7977.82-1~deb13u1","153.0.8010.47-1","153.0.8010.47-2~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.47-1"}]}],"versions":["138.0.7204.183-1","139.0.7258.127-1","139.0.7258.127-1~deb12u1","139.0.7258.127-1~deb13u1","139.0.7258.127-2","139.0.7258.138-1","139.0.7258.138-1~deb12u1","139.0.7258.138-1~deb13u1","139.0.7258.154-1","139.0.7258.154-1~deb12u1","139.0.7258.154-1~deb13u1","139.0.7258.66-1","139.0.7258.66-1~deb12u1","140.0.7339.127-1","140.0.7339.127-1~deb12u1","140.0.7339.127-1~deb13u1","140.0.7339.185-1","140.0.7339.185-1~deb12u1","140.0.7339.185-1~deb13u1","140.0.7339.207-1","140.0.7339.207-1~deb12u1","140.0.7339.207-1~deb13u1","140.0.7339.80-1","140.0.7339.80-1~deb12u1","140.0.7339.80-1~deb13u1","141.0.7390.107-1","141.0.7390.107-1~deb12u1","141.0.7390.107-1~deb13u1","141.0.7390.122-1","141.0.7390.122-1~deb12u1","141.0.7390.122-1~deb13u1","141.0.7390.54-1","141.0.7390.54-1~deb12u1","141.0.7390.54-1~deb13u1","141.0.7390.65-1","141.0.7390.65-1~deb12u1","141.0.7390.65-1~deb13u1","142.0.7444.134-1","142.0.7444.134-1~deb12u1","142.0.7444.134-1~deb13u1","142.0.7444.162-1","142.0.7444.162-1~deb12u1","142.0.7444.162-1~deb13u1","142.0.7444.175-1","142.0.7444.175-1~deb12u1","142.0.7444.175-1~deb13u1","142.0.7444.59-1","142.0.7444.59-1~deb12u1","142.0.7444.59-1~deb13u1","143.0.7499.109-1","143.0.7499.109-1~deb12u1","143.0.7499.109-1~deb13u1","143.0.7499.169-1","143.0.7499.169-1~deb12u1","143.0.7499.169-1~deb13u1","143.0.7499.192-1","143.0.7499.192-1~deb12u1","143.0.7499.192-1~deb13u1","143.0.7499.40-1","143.0.7499.40-1~deb12u1","143.0.7499.40-1~deb13u1","144.0.7559.109-1","144.0.7559.109-1~deb12u1","144.0.7559.109-1~deb13u1","144.0.7559.109-2","144.0.7559.109-2~deb12u1","144.0.7559.109-2~deb13u1","144.0.7559.59-1","144.0.7559.59-1~deb12u1","144.0.7559.59-1~deb13u1","144.0.7559.96-1","144.0.7559.96-1~deb12u1","144.0.7559.96-1~deb13u1","145.0.7632.109-1","145.0.7632.109-1~deb12u3","145.0.7632.109-1~deb13u3","145.0.7632.116-1","145.0.7632.116-1~deb12u1","145.0.7632.116-1~deb13u1","145.0.7632.159-1","145.0.7632.159-1~deb12u1","145.0.7632.159-1~deb13u1","145.0.7632.45-1","145.0.7632.75-1","145.0.7632.75-1~deb12u1","145.0.7632.75-1~deb13u1","146.0.7680.153-1","146.0.7680.153-1~deb12u1","146.0.7680.153-1~deb13u1","146.0.7680.164-1","146.0.7680.164-1~deb12u1","146.0.7680.164-1~deb13u1","146.0.7680.177-1","146.0.7680.177-1~deb12u1","146.0.7680.177-1~deb13u1","146.0.7680.71-1","146.0.7680.71-1~deb12u1","146.0.7680.71-1~deb13u1","146.0.7680.80-1","146.0.7680.80-1~deb12u1","146.0.7680.80-1~deb13u1","147.0.7727.101-1","147.0.7727.101-1~deb12u1","147.0.7727.101-1~deb13u1","147.0.7727.116-1","147.0.7727.116-1~deb12u1","147.0.7727.116-1~deb13u1","147.0.7727.137-1","147.0.7727.137-1~deb12u1","147.0.7727.137-1~deb13u1","147.0.7727.55-1","147.0.7727.55-1~deb12u1","147.0.7727.55-1~deb13u1","148.0.7778.167-1","148.0.7778.167-1~deb12u1","148.0.7778.167-1~deb13u1","148.0.7778.178-1","148.0.7778.178-1~deb12u1","148.0.7778.178-1~deb13u1","148.0.7778.215-1","148.0.7778.215-1~deb12u1","148.0.7778.215-1~deb13u1","148.0.7778.215-2","148.0.7778.96-1","148.0.7778.96-1~deb12u1","148.0.7778.96-1~deb13u1","148.0.7778.96-2","148.0.7778.96-3","149.0.7827.102-1","149.0.7827.102-1~deb12u1","149.0.7827.102-1~deb13u1","149.0.7827.114-1","149.0.7827.114-1~deb12u1","149.0.7827.114-1~deb13u1","149.0.7827.155-1","149.0.7827.155-1~deb12u1","149.0.7827.155-1~deb13u1","149.0.7827.196-1","149.0.7827.196-1~deb12u1","149.0.7827.196-1~deb13u1","149.0.7827.53-1","149.0.7827.53-1~deb12u1","149.0.7827.53-1~deb13u1","150.0.7871.100-1","150.0.7871.100-1~deb12u1","150.0.7871.100-1~deb13u1","150.0.7871.114-1","150.0.7871.114-1~deb12u1","150.0.7871.114-1~deb13u1","150.0.7871.124-1","150.0.7871.124-1~deb12u1","150.0.7871.124-1~deb13u1","150.0.7871.181-1","150.0.7871.181-1~deb12u1","150.0.7871.181-1~deb13u1","150.0.7871.46-1","150.0.7871.46-1~deb12u1","150.0.7871.46-1~deb13u1","151.0.7922.108-1","151.0.7922.108-1~deb12u1","151.0.7922.108-1~deb13u1","151.0.7922.108-2","151.0.7922.137-1","151.0.7922.137-1~deb12u1","151.0.7922.137-1~deb13u1","151.0.7922.137-2","151.0.7922.169-1","151.0.7922.169-1~deb12u1","151.0.7922.169-1~deb13u1","151.0.7922.173-1","151.0.7922.173-1~deb12u1","151.0.7922.173-1~deb13u1","151.0.7922.47-1","151.0.7922.71-1","151.0.7922.71-1~deb12u1","151.0.7922.71-1~deb13u1","152.0.7977.64-1","152.0.7977.75-1","152.0.7977.75-1~deb12u1","152.0.7977.75-1~deb13u1","152.0.7977.82-1","152.0.7977.82-1~deb12u1","152.0.7977.82-1~deb13u1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.36-1.1"}]}],"bundled":230},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.52-bp160.1.1"}]}],"bundled":288}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://issues.chromium.org/issues/513245072","tags":["Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87656"},{"url":"https://github.com/advisories/GHSA-4xh2-7jp7-gcp9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-87656","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87658","tags":["web"]},{"url":"https://bugzilla.suse.com/1279840","tags":["report"]},{"url":"https://bugzilla.suse.com/1280687","tags":["report"]},{"url":"https://bugzilla.suse.com/1281123","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93387","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-87656","description":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","status":"published","published":"2026-09-09T00:10:01.633Z","modified":"2026-09-14T12:33:51.006Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T13:37:58.613221Z"}],"euvd":[{"id":"EUVD-2026-74443","description":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","status":"published","published":"2026-09-09T00:10:01Z","modified":"2026-09-14T12:33:51Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T17:28:20.757989Z"}],"ghsa":[{"id":"GHSA-4xh2-7jp7-gcp9","title":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a...","description":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","status":"published","published":"2026-09-09T03:30:46Z","modified":"2026-09-10T15:34:14Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T15:11:42.086801Z"}],"nvd":[{"id":"CVE-2026-87656","description":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","status":"published","published":"2026-09-09T01:17:24.167Z","modified":"2026-09-14T13:18:59.723Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:12:45.612639Z"}],"osv":[{"id":"DEBIAN-CVE-2026-87656","description":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","status":"published","published":"2026-09-09T01:17:24.167Z","modified":"2026-10-01T03:03:52.090831132Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:46:05.506112Z"},{"id":"openSUSE-SU-2026:11750-1","title":"chromedriver-153.0.8010.36-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-153.0.8010.36-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-11T00:00:00Z","modified":"2026-09-12T10:30:05.327768086Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21858-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\nChromium 153.0.8010.36 (boo#1279840):\n\n  * CVE-2026-87464: Use after free in WebGL\n  * CVE-2026-87488: Use after free in WebGL\n  * CVE-2026-87438: Out of bounds write in WebGL\n  * CVE-2026-87527: Buffer overflow in WebGL\n  * CVE-2026-87628: Use after free in Cast\n  * CVE-2026-87512: Use after free in ANGLE\n  * CVE-2026-87585: Double free in PDFium\n  * CVE-2026-87444: Memory corruption in Codecs\n  * CVE-2026-87447: Incorrect authorization in Network\n  * CVE-2026-87440: Out of bounds read in Media\n  * CVE-2026-87633: Use after free in Views\n  * CVE-2026-87525: Out of bounds read in Chromoting\n  * CVE-2026-87578: Use after free in Receiver\n  * CVE-2026-87517: Race condition in Mobile\n  * CVE-2026-87524: Use after free in Core\n  * CVE-2026-87569: Missing authorization in Views\n  * CVE-2026-87554: Race condition in Chromoting\n  * CVE-2026-87467: Race condition in Updater\n  * CVE-2026-87492: Incorrect authorization in DevTools\n  * CVE-2026-87520: Use after free in Dawn\n  * CVE-2026-87514: Use after free in Views\n  * CVE-2026-87650: Out of bounds read in WebGL\n  * CVE-2026-87596: Out of bounds read in ANGLE\n  * CVE-2026-87654: Buffer overflow in ANGLE\n  * CVE-2026-87604: Out of bounds read in ANGLE\n  * CVE-2026-87621: Out of bounds write in ANGLE\n  * CVE-2026-87647: Uninitialized resource in GPU\n  * CVE-2026-87646: Use after free in Web Authentication\n  * CVE-2026-87500: Improper validation of array index in ANGLE\n  * CVE-2026-87572: Injection in DevTools\n  * CVE-2026-87460: Use after free in Platform\n  * CVE-2026-87542: Use after free in Input\n  * CVE-2026-87639: Use after free in WebPackaging\n  * CVE-2026-87552: Missing authorization in TrustedWebActivities\n  * CVE-2026-87651: Incorrect authorization in Paint\n  * CVE-2026-87587: Use after free in V8\n  * CVE-2026-87564: Type confusion in V8\n  * CVE-2026-87498: Missing authorization in WebUI\n  * CVE-2026-87499: Incorrect authorization in Network\n  * CVE-2026-87607: Use after free in Device\n  * CVE-2026-87558: Use after free in Payments\n  * CVE-2026-87581: Use after free in Payments\n  * CVE-2026-87480: Use after free in Printing\n  * CVE-2026-87612: Type confusion in V8\n  * CVE-2026-87536: Use after free in V8\n  * CVE-2026-87474: Use after free in Payments\n  * CVE-2026-87504: Use after free in Core\n  * CVE-2026-87640: Out of bounds read in WebView\n  * CVE-2026-87491: Out of bounds write in V8\n  * CVE-2026-87478: Observable discrepancy in Autofill\n  * CVE-2026-87446: Incomplete cleanup in Extensions\n  * CVE-2026-87657: Use after free in V8\n  * CVE-2026-87434: Missing authorization in CORS\n  * CVE-2026-87487: Missing authorization in FileSystem\n  * CVE-2026-87453: Confused deputy in BackgroundFetch\n  * CVE-2026-87588: Use after free in Chromecast\n  * CVE-2026-87636: Type confusion in XML\n  * CVE-2026-87611: Missing authorization in FileSystem\n  * CVE-2026-87606: Missing authorization in SiteIsolation\n  * CVE-2026-87456: Uninitialized resource in Media\n  * CVE-2026-87553: Improper input validation in SiteIsolation\n  * CVE-2026-87658: Information leak in Extensions\n  * CVE-2026-87465: Incorrect authorization in Downloads\n  * CVE-2026-87515: Incorrect authorization in FileAPI\n  * CVE-2026-87547: Incorrect reference resolution in FileSystem\n  * CVE-2026-87442: Confused deputy in Prerender\n  * CVE-2026-87506: Privilege elevation in WebUI\n  * CVE-2026-87433: Race condition in FileAPI\n  * CVE-2026-87557: Missing authorization in LocalNetworkAccess\n  * CVE-2026-87457: Race condition in Updater\n  * CVE-2026-87503: Inappropriate implementation in Downloads\n  * CVE-2026-87481: Incorrect authorization in WebView\n  * CVE-2026-87537: Missing authorization in Extensions\n  * CVE-2026-87471: Incorrect authorization in ServiceWorker\n  * CVE-2026-87485: Incorrect authorization in CORS\n  * CVE-2026-87652: Incorrect authorization in PushAPI\n  * CVE-2026-87582: Confused deputy in DataTransfer\n  * CVE-2026-87466: Incorrect authorization in Workers\n  * CVE-2026-87603: Missing authorization in FileSystem\n  * CVE-2026-87615: Race condition in Payments\n  * CVE-2026-87642: Uninitialized resource in WebGL\n  * CVE-2026-87577: Incorrect authorization in Isolated\n  * CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials\n  * CVE-2026-87613: Incorrect reference resolution in Extensions\n  * CVE-2026-87645: Improper state validation in Safebrowsing\n  * CVE-2026-87443: Missing authorization in Actor\n  * CVE-2026-87630: Integer overflow in WebRTC\n  * CVE-2026-87590: Improper input validation in Passwords\n  * CVE-2026-87580: Incorrect authorization in WebAppInstalls\n  * CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades\n  * CVE-2026-87497: Uninitialized resource in Codecs\n  * CVE-2026-87579: Buffer overflow in WebRTC\n  * CVE-2026-87576: Uninitialized resource in GPU\n  * CVE-2026-87476: Incorrect authorization in Loader\n  * CVE-2026-87475: Missing authorization in Omnibox\n  * CVE-2026-87436: Incomplete cleanup in Browser\n  * CVE-2026-87479: Insufficient policy enforcement in Extensions\n  * CVE-2026-87513: Missing authorization in ControlledFrame\n  * CVE-2026-87432: Incorrect authorization in Navigation\n  * CVE-2026-87560: Missing authorization in Browser\n  * CVE-2026-87521: Information leak in WebMCP\n  * CVE-2026-87539: Observable discrepancy in Network\n  * CVE-2026-87648: Use after free in ANGLE\n  * CVE-2026-87534: Missing authorization in WebView\n  * CVE-2026-87562: Incorrect reference resolution in Accessibility\n  * CVE-2026-87556: Missing authorization in Browser\n  * CVE-2026-87508: Incorrect authorization in Loader\n  * CVE-2026-87643: Integer overflow in GPU\n  * CVE-2026-87573: Improper input validation in Network\n  * CVE-2026-87548: Improper state validation in Installer\n  * CVE-2026-87501: UI misrepresentation in Passwords\n  * CVE-2026-87452: Incorrect authorization in GPU\n  * CVE-2026-87516: Observable discrepancy in Navigation\n  * CVE-2026-87599: Improper input validation in Interstitials\n  * CVE-2026-87507: UI misrepresentation in Downloads\n  * CVE-2026-87559: UI misrepresentation in UI\n  * CVE-2026-87472: Improper input validation in FedCM\n  * CVE-2026-87486: Clickjacking in TrustedWebActivities\n  * CVE-2026-87655: Clickjacking in Downloads\n  * CVE-2026-87462: UI misrepresentation in FedCM\n  * CVE-2026-87649: UI misrepresentation in Downloads\n  * CVE-2026-87445: UI misrepresentation in Session\n  * CVE-2026-87567: UI misrepresentation in UrlFormatting\n  * CVE-2026-87496: UI misrepresentation in Browser\n  * CVE-2026-87441: Missing authorization in Downloads\n  * CVE-2026-87549: Incomplete cleanup in Downloads\n  * CVE-2026-87458: UI misrepresentation in Geometry\n  * CVE-2026-87574: Information leak in ServiceWorker\n  * CVE-2026-87495: Information leak in Scroll\n  * CVE-2026-87541: Information leak in Navigation\n  * CVE-2026-87451: Information leak in Downloads\n  * CVE-2026-87570: Incorrect authorization in SiteIsolation\n  * CVE-2026-87555: Uninitialized resource in GPU\n  * CVE-2026-87600: Improper input validation in Safebrowsing\n  * CVE-2026-87532: Improper state validation in Safebrowsing\n  * CVE-2026-87439: Information leak in ServiceWorker\n  * CVE-2026-87450: Incorrect authorization in Permissions\n  * CVE-2026-87505: Incorrect authorization in FileSystem\n  * CVE-2026-87622: Missing authorization in FedCM\n  * CVE-2026-87540: Incorrect authorization in Isolated\n  * CVE-2026-87594: Incorrect authorization in DataTransfer\n  * CVE-2026-87518: Observable discrepancy in Safebrowsing\n  * CVE-2026-87589: Incorrect authorization in SiteIsolation\n  * CVE-2026-87484: UI misrepresentation in Geometry\n  * CVE-2026-87530: Uncontrolled search path element in CredentialProvider\n  * CVE-2026-87550: Improper encoding or escaping of output in CSS\n  * CVE-2026-87494: Use after free in Browser\n  * CVE-2026-87483: Incorrect authorization in Browser\n  * CVE-2026-87454: Information leak in Enterprise\n  * CVE-2026-87616: Improper initialization in Views\n  * CVE-2026-87535: Information loss or omission in Safebrowsing\n  * CVE-2026-87644: Incorrect authorization in Views\n  * CVE-2026-87533: Use after free in DevTools\n  * CVE-2026-87635: UI misrepresentation in Payments\n  * CVE-2026-87641: Race condition in Browser\n  * CVE-2026-87431: Missing authorization in Extensions\n  * CVE-2026-87493: Missing authorization in FileSystem\n  * CVE-2026-87625: Use after free in V8\n  * CVE-2026-87468: Incorrect authorization in Isolated\n  * CVE-2026-87563: Origin validation error in Paint\n  * CVE-2026-87510: Improper input validation in FileAPI\n  * CVE-2026-87435: Information leak in ControlledFrame\n  * CVE-2026-87531: Information leak in CORS\n  * CVE-2026-87637: Use after free in Extensions\n  * CVE-2026-87529: Numeric truncation error in Media\n  * CVE-2026-87470: Improper quantity validation in Tint\n  * CVE-2026-87586: Out of bounds read in ANGLE\n  * CVE-2026-87584: Incorrect authorization in WebUI\n  * CVE-2026-87632: Cross-site scripting in SanitizerAPI\n  * CVE-2026-87528: Type confusion in Rust\n  * CVE-2026-87623: Observable discrepancy in DOM\n  * CVE-2026-87566: Observable discrepancy in Layout\n  * CVE-2026-87638: Out of bounds write in Media\n  * CVE-2026-87455: Use after free in Aura\n  * CVE-2026-87591: Incorrect authorization in Extensions\n  * CVE-2026-87526: Use after free in Passwords\n  * CVE-2026-87609: Use after free in Sharing\n  * CVE-2026-87610: Incorrect authorization in Omnibox\n  * CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials\n  * CVE-2026-87629: Incorrect authorization in Sources\n  * CVE-2026-87653: UI misrepresentation in FullScreen\n  * CVE-2026-87634: Use after free in WebPackaging\n  * CVE-2026-87429: Missing authorization in ServiceWorker\n  * CVE-2026-87618: Incorrect reference resolution in Storage\n  * CVE-2026-87614: Incorrect authorization in ServiceWorker\n  * CVE-2026-87619: Observable discrepancy in Prefetch\n  * CVE-2026-87561: Incorrect authorization in Web Authentication\n  * CVE-2026-87598: Incorrect authorization in ServiceWorker\n  * CVE-2026-87519: Incorrect authorization in Safebrowsing\n  * CVE-2026-87543: Missing authorization in Core\n  * CVE-2026-87522: Missing authorization in WebView\n  * CVE-2026-87568: Improper input validation in Chromium\n  * CVE-2026-87656: Improper state validation in Safebrowsing\n  * CVE-2026-87511: Missing authorization in DevTools\n  * CVE-2026-87627: Interpretation conflict in Safebrowsing\n  * CVE-2026-87595: Server-side request forgery in Mobile\n  * CVE-2026-87592: Out of bounds read in Tint\n  * CVE-2026-87620: Observable discrepancy in SVG\n  * CVE-2026-87502: Confused deputy in Fullscreen\n  * CVE-2026-87448: Use after free in DevTools\n  * CVE-2026-87459: Observable discrepancy in Select\n  * CVE-2026-87463: Incorrect authorization in Certificate\n  * CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing\n  * CVE-2026-87538: Clickjacking in Input\n  * CVE-2026-87545: Information leak in Mobile\n  * CVE-2026-87617: Use after free in DevTools\n  * CVE-2026-87523: Race condition in DataTransfer\n  * CVE-2026-87565: Information leak in Passwords\n  * CVE-2026-87597: UI misrepresentation in CustomTabs\n  * CVE-2026-87624: UI misrepresentation in Passwords\n  * CVE-2026-87605: Missing authorization in Contacts\n  * CVE-2026-87490: Information leak in Transactions Platform\n  * CVE-2026-87583: UI misrepresentation in Passwords\n  * CVE-2026-87509: Incorrect authorization in Updater\n  * CVE-2026-87473: Incorrect authorization in FileHandling\n  * CVE-2026-87461: Information leak in Core\n  * CVE-2026-87631: Missing authorization in DOM\n  * CVE-2026-87469: Improper input validation in Extensions\n  * CVE-2026-87489: Memory corruption in V8\n  * CVE-2026-87575: Incorrect authorization in Loader\n  * CVE-2026-87571: Improper certificate validation in Loader\n  * CVE-2026-87477: Information leak in Core\n  * CVE-2026-87551: Improper certificate validation in CORS\n  * CVE-2026-87608: Improper certificate validation in FedCM\n  * CVE-2026-87437: Information leak in Frames\n  * CVE-2026-87602: Out of bounds read in ANGLE\n  * CVE-2026-87601: Race condition in V8\n  * CVE-2026-87544: Incorrect authorization in Extensions\n  * CVE-2026-87430: Buffer overflow in WebRTC\n  * CVE-2026-87593: Information leak in Editing\n","status":"withdrawn","published":"2026-09-16T08:15:10Z","modified":"2026-10-31T19:00:08.282030675Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"openSUSE-SU-2026:21921-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 153.0.8010.52 (boo#1281123):\n  * CVE-2026-93374: Use after free in Dawn\n  * CVE-2026-93372: Buffer overflow in WebGL\n  * CVE-2026-93375: Incorrect reference resolution in Tracing\n  * CVE-2026-93382: Use after free in PDFium\n  * CVE-2026-93387: Improper state validation in Skia\n  * CVE-2026-93373: Use after free in Extensions\n  * CVE-2026-93381: Buffer overflow in PDFium\n  * CVE-2026-93379: Incorrect authorization in ORB\n  * CVE-2026-93377: Type confusion in V8\n  * CVE-2026-93380: Race condition in FileSystem\n  * CVE-2026-93384: Server-side request forgery in Omnibox\n  * CVE-2026-93383: Information leak in Permissions\n  * CVE-2026-93376: Out of bounds read in DataTransfer\n  * CVE-2026-93378: Missing authorization in Storage\n  * CVE-2026-93385: Information leak in Paint\n  * CVE-2026-93386: UI misrepresentation in WebAppInstalls\n\n- Chromium 153.0.8010.47 (boo#1280687):\n  * CVE-2026-91726: Out of bounds read in WebGL\n  * CVE-2026-91721: Use after free in Internals\n  * CVE-2026-91749: Use after free in Workers\n  * CVE-2026-91724: Use after free in Input\n  * CVE-2026-91728: Integer overflow in V8\n  * CVE-2026-91734: Incorrect authorization in Core\n  * CVE-2026-91727: Incorrect reference resolution in Extensions\n  * CVE-2026-91743: Race condition in Core\n  * CVE-2026-91744: Race condition in PlatformIntegration\n  * CVE-2026-91712: Race condition in Extensions\n  * CVE-2026-91748: Race condition in Extensions\n  * CVE-2026-91720: Uninitialized resource in ANGLE\n  * CVE-2026-91731: Type confusion in Compositing\n  * CVE-2026-91747: Use after free in Skia\n  * CVE-2026-91733: Improper state validation in Skia\n  * CVE-2026-91741: Type confusion in CacheStorage\n  * CVE-2026-91709: Type confusion in ServiceWorker\n  * CVE-2026-91717: Missing authorization in Android\n  * CVE-2026-91735: Incorrect authorization in WebUI\n  * CVE-2026-91708: Race condition in Network\n  * CVE-2026-91736: Use after free in DOM\n  * CVE-2026-91740: Uninitialized resource in Skia\n  * CVE-2026-91710: Use after free in WebAppInstalls\n  * CVE-2026-91718: Use after free in Core\n  * CVE-2026-91716: Use after free in Auth\n  * CVE-2026-91746: Integer overflow in Compositing\n  * CVE-2026-91729: Use after free in DigitalCredentials\n  * CVE-2026-91737: Use after free in PDF\n  * CVE-2026-91711: Out of bounds write in ServiceWorker\n  * CVE-2026-91715: Type confusion in ServiceWorker\n  * CVE-2026-91745: Use after free in V8\n  * CVE-2026-91723: Race condition in WebAppInstalls\n  * CVE-2026-91732: Missing authorization in AppManifest\n  * CVE-2026-91742: Confused deputy in PriceTracking\n  * CVE-2026-91714: Observable discrepancy in Fonts\n  * CVE-2026-91725: Observable discrepancy in CSS\n  * CVE-2026-91739: Missing authorization in Transactions Platform\n  * CVE-2026-91713: Missing authorization in Browser\n  * CVE-2026-91738: Improper input validation in ANGLE\n  * CVE-2026-91730: Incomplete cleanup in GetUserMedia\n  * CVE-2026-91722: Use after free in Input\n  * CVE-2026-91719: Code injection in XML\n\n- Chromium 153.0.8010.36 (boo#1279840):\n  * CVE-2026-87464: Use after free in WebGL\n  * CVE-2026-87488: Use after free in WebGL\n  * CVE-2026-87438: Out of bounds write in WebGL\n  * CVE-2026-87527: Buffer overflow in WebGL\n  * CVE-2026-87628: Use after free in Cast\n  * CVE-2026-87512: Use after free in ANGLE\n  * CVE-2026-87585: Double free in PDFium\n  * CVE-2026-87444: Memory corruption in Codecs\n  * CVE-2026-87447: Incorrect authorization in Network\n  * CVE-2026-87440: Out of bounds read in Media\n  * CVE-2026-87633: Use after free in Views\n  * CVE-2026-87525: Out of bounds read in Chromoting\n  * CVE-2026-87578: Use after free in Receiver\n  * CVE-2026-87517: Race condition in Mobile\n  * CVE-2026-87524: Use after free in Core\n  * CVE-2026-87569: Missing authorization in Views\n  * CVE-2026-87554: Race condition in Chromoting\n  * CVE-2026-87467: Race condition in Updater\n  * CVE-2026-87492: Incorrect authorization in DevTools\n  * CVE-2026-87520: Use after free in Dawn\n  * CVE-2026-87514: Use after free in Views\n  * CVE-2026-87650: Out of bounds read in WebGL\n  * CVE-2026-87596: Out of bounds read in ANGLE\n  * CVE-2026-87654: Buffer overflow in ANGLE\n  * CVE-2026-87604: Out of bounds read in ANGLE\n  * CVE-2026-87621: Out of bounds write in ANGLE\n  * CVE-2026-87647: Uninitialized resource in GPU\n  * CVE-2026-87646: Use after free in Web Authentication\n  * CVE-2026-87500: Improper validation of array index in ANGLE\n  * CVE-2026-87572: Injection in DevTools\n  * CVE-2026-87460: Use after free in Platform\n  * CVE-2026-87542: Use after free in Input\n  * CVE-2026-87639: Use after free in WebPackaging\n  * CVE-2026-87552: Missing authorization in TrustedWebActivities\n  * CVE-2026-87651: Incorrect authorization in Paint\n  * CVE-2026-87587: Use after free in V8\n  * CVE-2026-87564: Type confusion in V8\n  * CVE-2026-87498: Missing authorization in WebUI\n  * CVE-2026-87499: Incorrect authorization in Network\n  * CVE-2026-87607: Use after free in Device\n  * CVE-2026-87558: Use after free in Payments\n  * CVE-2026-87581: Use after free in Payments\n  * CVE-2026-87480: Use after free in Printing\n  * CVE-2026-87612: Type confusion in V8\n  * CVE-2026-87536: Use after free in V8\n  * CVE-2026-87474: Use after free in Payments\n  * CVE-2026-87504: Use after free in Core\n  * CVE-2026-87640: Out of bounds read in WebView\n  * CVE-2026-87491: Out of bounds write in V8\n  * CVE-2026-87478: Observable discrepancy in Autofill\n  * CVE-2026-87446: Incomplete cleanup in Extensions\n  * CVE-2026-87657: Use after free in V8\n  * CVE-2026-87434: Missing authorization in CORS\n  * CVE-2026-87487: Missing authorization in FileSystem\n  * CVE-2026-87453: Confused deputy in BackgroundFetch\n  * CVE-2026-87588: Use after free in Chromecast\n  * CVE-2026-87636: Type confusion in XML\n  * CVE-2026-87611: Missing authorization in FileSystem\n  * CVE-2026-87606: Missing authorization in SiteIsolation\n  * CVE-2026-87456: Uninitialized resource in Media\n  * CVE-2026-87553: Improper input validation in SiteIsolation\n  * CVE-2026-87658: Information leak in Extensions\n  * CVE-2026-87465: Incorrect authorization in Downloads\n  * CVE-2026-87515: Incorrect authorization in FileAPI\n  * CVE-2026-87547: Incorrect reference resolution in FileSystem\n  * CVE-2026-87442: Confused deputy in Prerender\n  * CVE-2026-87506: Privilege elevation in WebUI\n  * CVE-2026-87433: Race condition in FileAPI\n  * CVE-2026-87557: Missing authorization in LocalNetworkAccess\n  * CVE-2026-87457: Race condition in Updater\n  * CVE-2026-87503: Inappropriate implementation in Downloads\n  * CVE-2026-87481: Incorrect authorization in WebView\n  * CVE-2026-87537: Missing authorization in Extensions\n  * CVE-2026-87471: Incorrect authorization in ServiceWorker\n  * CVE-2026-87485: Incorrect authorization in CORS\n  * CVE-2026-87652: Incorrect authorization in PushAPI\n  * CVE-2026-87582: Confused deputy in DataTransfer\n  * CVE-2026-87466: Incorrect authorization in Workers\n  * CVE-2026-87603: Missing authorization in FileSystem\n  * CVE-2026-87615: Race condition in Payments\n  * CVE-2026-87642: Uninitialized resource in WebGL\n  * CVE-2026-87577: Incorrect authorization in Isolated\n  * CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials\n  * CVE-2026-87613: Incorrect reference resolution in Extensions\n  * CVE-2026-87645: Improper state validation in Safebrowsing\n  * CVE-2026-87443: Missing authorization in Actor\n  * CVE-2026-87630: Integer overflow in WebRTC\n  * CVE-2026-87590: Improper input validation in Passwords\n  * CVE-2026-87580: Incorrect authorization in WebAppInstalls\n  * CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades\n  * CVE-2026-87497: Uninitialized resource in Codecs\n  * CVE-2026-87579: Buffer overflow in WebRTC\n  * CVE-2026-87576: Uninitialized resource in GPU\n  * CVE-2026-87476: Incorrect authorization in Loader\n  * CVE-2026-87475: Missing authorization in Omnibox\n  * CVE-2026-87436: Incomplete cleanup in Browser\n  * CVE-2026-87479: Insufficient policy enforcement in Extensions\n  * CVE-2026-87513: Missing authorization in ControlledFrame\n  * CVE-2026-87432: Incorrect authorization in Navigation\n  * CVE-2026-87560: Missing authorization in Browser\n  * CVE-2026-87521: Information leak in WebMCP\n  * CVE-2026-87539: Observable discrepancy in Network\n  * CVE-2026-87648: Use after free in ANGLE\n  * CVE-2026-87534: Missing authorization in WebView\n  * CVE-2026-87562: Incorrect reference resolution in Accessibility\n  * CVE-2026-87556: Missing authorization in Browser\n  * CVE-2026-87508: Incorrect authorization in Loader\n  * CVE-2026-87643: Integer overflow in GPU\n  * CVE-2026-87573: Improper input validation in Network\n  * CVE-2026-87548: Improper state validation in Installer\n  * CVE-2026-87501: UI misrepresentation in Passwords\n  * CVE-2026-87452: Incorrect authorization in GPU\n  * CVE-2026-87516: Observable discrepancy in Navigation\n  * CVE-2026-87599: Improper input validation in Interstitials\n  * CVE-2026-87507: UI misrepresentation in Downloads\n  * CVE-2026-87559: UI misrepresentation in UI\n  * CVE-2026-87472: Improper input validation in FedCM\n  * CVE-2026-87486: Clickjacking in TrustedWebActivities\n  * CVE-2026-87655: Clickjacking in Downloads\n  * CVE-2026-87462: UI misrepresentation in FedCM\n  * CVE-2026-87649: UI misrepresentation in Downloads\n  * CVE-2026-87445: UI misrepresentation in Session\n  * CVE-2026-87567: UI misrepresentation in UrlFormatting\n  * CVE-2026-87496: UI misrepresentation in Browser\n  * CVE-2026-87441: Missing authorization in Downloads\n  * CVE-2026-87549: Incomplete cleanup in Downloads\n  * CVE-2026-87458: UI misrepresentation in Geometry\n  * CVE-2026-87574: Information leak in ServiceWorker\n  * CVE-2026-87495: Information leak in Scroll\n  * CVE-2026-87541: Information leak in Navigation\n  * CVE-2026-87451: Information leak in Downloads\n  * CVE-2026-87570: Incorrect authorization in SiteIsolation\n  * CVE-2026-87555: Uninitialized resource in GPU\n  * CVE-2026-87600: Improper input validation in Safebrowsing\n  * CVE-2026-87532: Improper state validation in Safebrowsing\n  * CVE-2026-87439: Information leak in ServiceWorker\n  * CVE-2026-87450: Incorrect authorization in Permissions\n  * CVE-2026-87505: Incorrect authorization in FileSystem\n  * CVE-2026-87622: Missing authorization in FedCM\n  * CVE-2026-87540: Incorrect authorization in Isolated\n  * CVE-2026-87594: Incorrect authorization in DataTransfer\n  * CVE-2026-87518: Observable discrepancy in Safebrowsing\n  * CVE-2026-87589: Incorrect authorization in SiteIsolation\n  * CVE-2026-87484: UI misrepresentation in Geometry\n  * CVE-2026-87530: Uncontrolled search path element in CredentialProvider\n  * CVE-2026-87550: Improper encoding or escaping of output in CSS\n  * CVE-2026-87494: Use after free in Browser\n  * CVE-2026-87483: Incorrect authorization in Browser\n  * CVE-2026-87454: Information leak in Enterprise\n  * CVE-2026-87616: Improper initialization in Views\n  * CVE-2026-87535: Information loss or omission in Safebrowsing\n  * CVE-2026-87644: Incorrect authorization in Views\n  * CVE-2026-87533: Use after free in DevTools\n  * CVE-2026-87635: UI misrepresentation in Payments\n  * CVE-2026-87641: Race condition in Browser\n  * CVE-2026-87431: Missing authorization in Extensions\n  * CVE-2026-87493: Missing authorization in FileSystem\n  * CVE-2026-87625: Use after free in V8\n  * CVE-2026-87468: Incorrect authorization in Isolated\n  * CVE-2026-87563: Origin validation error in Paint\n  * CVE-2026-87510: Improper input validation in FileAPI\n  * CVE-2026-87435: Information leak in ControlledFrame\n  * CVE-2026-87531: Information leak in CORS\n  * CVE-2026-87637: Use after free in Extensions\n  * CVE-2026-87529: Numeric truncation error in Media\n  * CVE-2026-87470: Improper quantity validation in Tint\n  * CVE-2026-87586: Out of bounds read in ANGLE\n  * CVE-2026-87584: Incorrect authorization in WebUI\n  * CVE-2026-87632: Cross-site scripting in SanitizerAPI\n  * CVE-2026-87528: Type confusion in Rust\n  * CVE-2026-87623: Observable discrepancy in DOM\n  * CVE-2026-87566: Observable discrepancy in Layout\n  * CVE-2026-87638: Out of bounds write in Media\n  * CVE-2026-87455: Use after free in Aura\n  * CVE-2026-87591: Incorrect authorization in Extensions\n  * CVE-2026-87526: Use after free in Passwords\n  * CVE-2026-87609: Use after free in Sharing\n  * CVE-2026-87610: Incorrect authorization in Omnibox\n  * CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials\n  * CVE-2026-87629: Incorrect authorization in Sources\n  * CVE-2026-87653: UI misrepresentation in FullScreen\n  * CVE-2026-87634: Use after free in WebPackaging\n  * CVE-2026-87429: Missing authorization in ServiceWorker\n  * CVE-2026-87618: Incorrect reference resolution in Storage\n  * CVE-2026-87614: Incorrect authorization in ServiceWorker\n  * CVE-2026-87619: Observable discrepancy in Prefetch\n  * CVE-2026-87561: Incorrect authorization in Web Authentication\n  * CVE-2026-87598: Incorrect authorization in ServiceWorker\n  * CVE-2026-87519: Incorrect authorization in Safebrowsing\n  * CVE-2026-87543: Missing authorization in Core\n  * CVE-2026-87522: Missing authorization in WebView\n  * CVE-2026-87568: Improper input validation in Chromium\n  * CVE-2026-87656: Improper state validation in Safebrowsing\n  * CVE-2026-87511: Missing authorization in DevTools\n  * CVE-2026-87627: Interpretation conflict in Safebrowsing\n  * CVE-2026-87595: Server-side request forgery in Mobile\n  * CVE-2026-87592: Out of bounds read in Tint\n  * CVE-2026-87620: Observable discrepancy in SVG\n  * CVE-2026-87502: Confused deputy in Fullscreen\n  * CVE-2026-87448: Use after free in DevTools\n  * CVE-2026-87459: Observable discrepancy in Select\n  * CVE-2026-87463: Incorrect authorization in Certificate\n  * CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing\n  * CVE-2026-87538: Clickjacking in Input\n  * CVE-2026-87545: Information leak in Mobile\n  * CVE-2026-87617: Use after free in DevTools\n  * CVE-2026-87523: Race condition in DataTransfer\n  * CVE-2026-87565: Information leak in Passwords\n  * CVE-2026-87597: UI misrepresentation in CustomTabs\n  * CVE-2026-87624: UI misrepresentation in Passwords\n  * CVE-2026-87605: Missing authorization in Contacts\n  * CVE-2026-87490: Information leak in Transactions Platform\n  * CVE-2026-87583: UI misrepresentation in Passwords\n  * CVE-2026-87509: Incorrect authorization in Updater\n  * CVE-2026-87473: Incorrect authorization in FileHandling\n  * CVE-2026-87461: Information leak in Core\n  * CVE-2026-87631: Missing authorization in DOM\n  * CVE-2026-87469: Improper input validation in Extensions\n  * CVE-2026-87489: Memory corruption in V8\n  * CVE-2026-87575: Incorrect authorization in Loader\n  * CVE-2026-87571: Improper certificate validation in Loader\n  * CVE-2026-87477: Information leak in Core\n  * CVE-2026-87551: Improper certificate validation in CORS\n  * CVE-2026-87608: Improper certificate validation in FedCM\n  * CVE-2026-87437: Information leak in Frames\n  * CVE-2026-87602: Out of bounds read in ANGLE\n  * CVE-2026-87601: Race condition in V8\n  * CVE-2026-87544: Incorrect authorization in Extensions\n  * CVE-2026-87430: Buffer overflow in WebRTC\n  * CVE-2026-87593: Information leak in Editing\n","status":"published","published":"2026-10-28T07:48:31Z","modified":"2026-11-01T17:28:13.039133441Z","updated_at":"2026-11-02T16:58:42.426393Z"}]}}