OPENSUSE-SU-2026:21363-1

Vulnerability from csaf_opensuse - Published: 2026-07-16 21:56 - Updated: 2026-07-16 21:56
Summary
Security update for chromium
Severity
Critical
Notes
Title of the patch: Security update for chromium
Description of the patch: This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.124 (boo#1271415): * CVE-2026-15764: Use after free in Ozone * CVE-2026-15765: Use after free in Ozone * CVE-2026-15766: Uninitialized Use in Skia * CVE-2026-15767: Heap buffer overflow in libyuv * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming * CVE-2026-15770: Uninitialized Use in V8 * CVE-2026-15771: Insufficient validation of untrusted input in Media * CVE-2026-15772: Use after free in GPU * CVE-2026-15773: Use after free in Core * CVE-2026-15774: Use after free in Skia * CVE-2026-15775: Insufficient policy enforcement in V8 * CVE-2026-15776: Type Confusion in V8 * CVE-2026-15777: Use after free in UI * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
Patchnames: openSUSE-Leap-16.0-packagehub-424
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-15764
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2026-15765
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15766
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15767
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15768
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15769
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15770
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15771
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15772
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15773
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15774
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15775
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15776
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15777
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
CVE-2026-15778
Affected products
Recommended 6 products, the same list as for CVE-2026-15764
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1271415 self
https://www.suse.com/security/cve/CVE-2026-15764/ self
https://www.suse.com/security/cve/CVE-2026-15765/ self
https://www.suse.com/security/cve/CVE-2026-15766/ self
https://www.suse.com/security/cve/CVE-2026-15767/ self
https://www.suse.com/security/cve/CVE-2026-15768/ self
https://www.suse.com/security/cve/CVE-2026-15769/ self
https://www.suse.com/security/cve/CVE-2026-15770/ self
https://www.suse.com/security/cve/CVE-2026-15771/ self
https://www.suse.com/security/cve/CVE-2026-15772/ self
https://www.suse.com/security/cve/CVE-2026-15773/ self
https://www.suse.com/security/cve/CVE-2026-15774/ self
https://www.suse.com/security/cve/CVE-2026-15775/ self
https://www.suse.com/security/cve/CVE-2026-15776/ self
https://www.suse.com/security/cve/CVE-2026-15777/ self
https://www.suse.com/security/cve/CVE-2026-15778/ self
https://www.suse.com/security/cve/CVE-2026-15764 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15765 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15766 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15767 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15768 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15769 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15770 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15771 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15772 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15773 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15774 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15775 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15776 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15777 external
https://bugzilla.suse.com/1271415 external
https://www.suse.com/security/cve/CVE-2026-15778 external
https://bugzilla.suse.com/1271415 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for chromium",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 150.0.7871.124 (boo#1271415):\n  * CVE-2026-15764: Use after free in Ozone\n  * CVE-2026-15765: Use after free in Ozone\n  * CVE-2026-15766: Uninitialized Use in Skia\n  * CVE-2026-15767: Heap buffer overflow in libyuv\n  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas\n  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming\n  * CVE-2026-15770: Uninitialized Use in V8\n  * CVE-2026-15771: Insufficient validation of untrusted input in Media\n  * CVE-2026-15772: Use after free in GPU\n  * CVE-2026-15773: Use after free in Core\n  * CVE-2026-15774: Use after free in Skia\n  * CVE-2026-15775: Insufficient policy enforcement in V8\n  * CVE-2026-15776: Type Confusion in V8\n  * CVE-2026-15777: Use after free in UI\n  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-424",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21363-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271415",
        "url": "https://bugzilla.suse.com/1271415"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15764 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15764/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15765 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15765/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15766 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15766/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15767 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15767/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15768 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15768/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15769 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15769/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15770 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15770/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15771 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15771/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15772 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15772/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15773 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15773/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15774 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15774/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15775 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15777 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15778/"
      }
    ],
    "title": "Security update for chromium",
    "tracking": {
      "current_release_date": "2026-07-16T21:56:42Z",
      "generator": {
        "date": "2026-07-16T21:56:42Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21363-1",
      "initial_release_date": "2026-07-16T21:56:42Z",
      "revision_history": [
        {
          "date": "2026-07-16T21:56:42Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-150.0.7871.124-bp160.1.1.aarch64",
                "product": {
                  "name": "chromedriver-150.0.7871.124-bp160.1.1.aarch64",
                  "product_id": "chromedriver-150.0.7871.124-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-150.0.7871.124-bp160.1.1.aarch64",
                "product": {
                  "name": "chromium-150.0.7871.124-bp160.1.1.aarch64",
                  "product_id": "chromium-150.0.7871.124-bp160.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
                "product": {
                  "name": "chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
                  "product_id": "chromedriver-150.0.7871.124-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-150.0.7871.124-bp160.1.1.ppc64le",
                "product": {
                  "name": "chromium-150.0.7871.124-bp160.1.1.ppc64le",
                  "product_id": "chromium-150.0.7871.124-bp160.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-150.0.7871.124-bp160.1.1.x86_64",
                "product": {
                  "name": "chromedriver-150.0.7871.124-bp160.1.1.x86_64",
                  "product_id": "chromedriver-150.0.7871.124-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-150.0.7871.124-bp160.1.1.x86_64",
                "product": {
                  "name": "chromium-150.0.7871.124-bp160.1.1.x86_64",
                  "product_id": "chromium-150.0.7871.124-bp160.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-150.0.7871.124-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64"
        },
        "product_reference": "chromedriver-150.0.7871.124-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-150.0.7871.124-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le"
        },
        "product_reference": "chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-150.0.7871.124-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64"
        },
        "product_reference": "chromedriver-150.0.7871.124-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-150.0.7871.124-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64"
        },
        "product_reference": "chromium-150.0.7871.124-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-150.0.7871.124-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le"
        },
        "product_reference": "chromium-150.0.7871.124-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-150.0.7871.124-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        },
        "product_reference": "chromium-150.0.7871.124-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15764",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15764"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15764",
          "url": "https://www.suse.com/security/cve/CVE-2026-15764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15764",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15764"
    },
    {
      "cve": "CVE-2026-15765",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15765"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15765",
          "url": "https://www.suse.com/security/cve/CVE-2026-15765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15765",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15765"
    },
    {
      "cve": "CVE-2026-15766",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15766"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15766",
          "url": "https://www.suse.com/security/cve/CVE-2026-15766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15766",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15766"
    },
    {
      "cve": "CVE-2026-15767",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15767"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15767",
          "url": "https://www.suse.com/security/cve/CVE-2026-15767"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15767",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15767"
    },
    {
      "cve": "CVE-2026-15768",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15768"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15768",
          "url": "https://www.suse.com/security/cve/CVE-2026-15768"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15768",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15768"
    },
    {
      "cve": "CVE-2026-15769",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15769"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15769",
          "url": "https://www.suse.com/security/cve/CVE-2026-15769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15769",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15769"
    },
    {
      "cve": "CVE-2026-15770",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15770"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15770",
          "url": "https://www.suse.com/security/cve/CVE-2026-15770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15770",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15770"
    },
    {
      "cve": "CVE-2026-15771",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15771"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15771",
          "url": "https://www.suse.com/security/cve/CVE-2026-15771"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15771",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15771"
    },
    {
      "cve": "CVE-2026-15772",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15772"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15772",
          "url": "https://www.suse.com/security/cve/CVE-2026-15772"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15772",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15772"
    },
    {
      "cve": "CVE-2026-15773",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15773"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15773",
          "url": "https://www.suse.com/security/cve/CVE-2026-15773"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15773",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15773"
    },
    {
      "cve": "CVE-2026-15774",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15774"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15774",
          "url": "https://www.suse.com/security/cve/CVE-2026-15774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15774",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15774"
    },
    {
      "cve": "CVE-2026-15775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15775",
          "url": "https://www.suse.com/security/cve/CVE-2026-15775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15775",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15775"
    },
    {
      "cve": "CVE-2026-15776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15776",
          "url": "https://www.suse.com/security/cve/CVE-2026-15776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15776",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15776"
    },
    {
      "cve": "CVE-2026-15777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15777",
          "url": "https://www.suse.com/security/cve/CVE-2026-15777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15777",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15777"
    },
    {
      "cve": "CVE-2026-15778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15778",
          "url": "https://www.suse.com/security/cve/CVE-2026-15778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271415 for CVE-2026-15778",
          "url": "https://bugzilla.suse.com/1271415"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-150.0.7871.124-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-150.0.7871.124-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-16T21:56:42Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-15778"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.