OPENSUSE-SU-2026:21913-1

Vulnerability from csaf_opensuse - Published: 2026-09-18 03:24 - Updated: 2026-09-24 17:48
Summary
Security update for chromium
Severity
Critical
Notes
Title of the patch: Security update for chromium
Description of the patch: This update for chromium fixes the following issues: Changes in chromium: - Chromium 153.0.8010.47 (boo#1280687): * CVE-2026-91726: Out of bounds read in WebGL * CVE-2026-91721: Use after free in Internals * CVE-2026-91749: Use after free in Workers * CVE-2026-91724: Use after free in Input * CVE-2026-91728: Integer overflow in V8 * CVE-2026-91734: Incorrect authorization in Core * CVE-2026-91727: Incorrect reference resolution in Extensions * CVE-2026-91743: Race condition in Core * CVE-2026-91744: Race condition in PlatformIntegration * CVE-2026-91712: Race condition in Extensions * CVE-2026-91748: Race condition in Extensions * CVE-2026-91720: Uninitialized resource in ANGLE * CVE-2026-91731: Type confusion in Compositing * CVE-2026-91747: Use after free in Skia * CVE-2026-91733: Improper state validation in Skia * CVE-2026-91741: Type confusion in CacheStorage * CVE-2026-91709: Type confusion in ServiceWorker * CVE-2026-91717: Missing authorization in Android * CVE-2026-91735: Incorrect authorization in WebUI * CVE-2026-91708: Race condition in Network * CVE-2026-91736: Use after free in DOM * CVE-2026-91740: Uninitialized resource in Skia * CVE-2026-91710: Use after free in WebAppInstalls * CVE-2026-91718: Use after free in Core * CVE-2026-91716: Use after free in Auth * CVE-2026-91746: Integer overflow in Compositing * CVE-2026-91729: Use after free in DigitalCredentials * CVE-2026-91737: Use after free in PDF * CVE-2026-91711: Out of bounds write in ServiceWorker * CVE-2026-91715: Type confusion in ServiceWorker * CVE-2026-91745: Use after free in V8 * CVE-2026-91723: Race condition in WebAppInstalls * CVE-2026-91732: Missing authorization in AppManifest * CVE-2026-91742: Confused deputy in PriceTracking * CVE-2026-91714: Observable discrepancy in Fonts * CVE-2026-91725: Observable discrepancy in CSS * CVE-2026-91739: Missing authorization in Transactions Platform * CVE-2026-91713: Missing authorization in Browser * CVE-2026-91738: Improper input validation in ANGLE * CVE-2026-91730: Incomplete cleanup in GetUserMedia * CVE-2026-91722: Use after free in Input * CVE-2026-91719: Code injection in XML
Patchnames: openSUSE-Leap-16.0-packagehub-603
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64 —
Vendor Fix
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
Affected products
Recommended 6 products, the same list as for CVE-2026-91708
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1280687 self
https://www.suse.com/security/cve/CVE-2026-91708/ self
https://www.suse.com/security/cve/CVE-2026-91709/ self
https://www.suse.com/security/cve/CVE-2026-91710/ self
https://www.suse.com/security/cve/CVE-2026-91711/ self
https://www.suse.com/security/cve/CVE-2026-91712/ self
https://www.suse.com/security/cve/CVE-2026-91713/ self
https://www.suse.com/security/cve/CVE-2026-91714/ self
https://www.suse.com/security/cve/CVE-2026-91715/ self
https://www.suse.com/security/cve/CVE-2026-91716/ self
https://www.suse.com/security/cve/CVE-2026-91717/ self
https://www.suse.com/security/cve/CVE-2026-91718/ self
https://www.suse.com/security/cve/CVE-2026-91719/ self
https://www.suse.com/security/cve/CVE-2026-91720/ self
https://www.suse.com/security/cve/CVE-2026-91721/ self
https://www.suse.com/security/cve/CVE-2026-91722/ self
https://www.suse.com/security/cve/CVE-2026-91723/ self
https://www.suse.com/security/cve/CVE-2026-91724/ self
https://www.suse.com/security/cve/CVE-2026-91725/ self
https://www.suse.com/security/cve/CVE-2026-91726/ self
https://www.suse.com/security/cve/CVE-2026-91727/ self
https://www.suse.com/security/cve/CVE-2026-91728/ self
https://www.suse.com/security/cve/CVE-2026-91729/ self
https://www.suse.com/security/cve/CVE-2026-91730/ self
https://www.suse.com/security/cve/CVE-2026-91731/ self
https://www.suse.com/security/cve/CVE-2026-91732/ self
https://www.suse.com/security/cve/CVE-2026-91733/ self
https://www.suse.com/security/cve/CVE-2026-91734/ self
https://www.suse.com/security/cve/CVE-2026-91735/ self
https://www.suse.com/security/cve/CVE-2026-91736/ self
https://www.suse.com/security/cve/CVE-2026-91737/ self
https://www.suse.com/security/cve/CVE-2026-91738/ self
https://www.suse.com/security/cve/CVE-2026-91739/ self
https://www.suse.com/security/cve/CVE-2026-91740/ self
https://www.suse.com/security/cve/CVE-2026-91741/ self
https://www.suse.com/security/cve/CVE-2026-91742/ self
https://www.suse.com/security/cve/CVE-2026-91743/ self
https://www.suse.com/security/cve/CVE-2026-91744/ self
https://www.suse.com/security/cve/CVE-2026-91745/ self
https://www.suse.com/security/cve/CVE-2026-91746/ self
https://www.suse.com/security/cve/CVE-2026-91747/ self
https://www.suse.com/security/cve/CVE-2026-91748/ self
https://www.suse.com/security/cve/CVE-2026-91749/ self
https://www.suse.com/security/cve/CVE-2026-91708 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91709 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91710 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91711 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91712 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91713 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91714 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91715 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91716 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91717 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91718 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91719 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91720 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91721 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91722 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91723 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91724 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91725 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91726 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91727 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91728 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91729 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91730 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91731 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91732 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91733 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91734 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91735 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91736 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91737 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91738 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91739 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91740 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91741 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91742 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91743 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91744 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91745 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91746 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91747 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91748 external
https://bugzilla.suse.com/1280687 external
https://www.suse.com/security/cve/CVE-2026-91749 external
https://bugzilla.suse.com/1280687 external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for chromium",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 153.0.8010.47 (boo#1280687):\n  * CVE-2026-91726: Out of bounds read in WebGL\n  * CVE-2026-91721: Use after free in Internals\n  * CVE-2026-91749: Use after free in Workers\n  * CVE-2026-91724: Use after free in Input\n  * CVE-2026-91728: Integer overflow in V8\n  * CVE-2026-91734: Incorrect authorization in Core\n  * CVE-2026-91727: Incorrect reference resolution in Extensions\n  * CVE-2026-91743: Race condition in Core\n  * CVE-2026-91744: Race condition in PlatformIntegration\n  * CVE-2026-91712: Race condition in Extensions\n  * CVE-2026-91748: Race condition in Extensions\n  * CVE-2026-91720: Uninitialized resource in ANGLE\n  * CVE-2026-91731: Type confusion in Compositing\n  * CVE-2026-91747: Use after free in Skia\n  * CVE-2026-91733: Improper state validation in Skia\n  * CVE-2026-91741: Type confusion in CacheStorage\n  * CVE-2026-91709: Type confusion in ServiceWorker\n  * CVE-2026-91717: Missing authorization in Android\n  * CVE-2026-91735: Incorrect authorization in WebUI\n  * CVE-2026-91708: Race condition in Network\n  * CVE-2026-91736: Use after free in DOM\n  * CVE-2026-91740: Uninitialized resource in Skia\n  * CVE-2026-91710: Use after free in WebAppInstalls\n  * CVE-2026-91718: Use after free in Core\n  * CVE-2026-91716: Use after free in Auth\n  * CVE-2026-91746: Integer overflow in Compositing\n  * CVE-2026-91729: Use after free in DigitalCredentials\n  * CVE-2026-91737: Use after free in PDF\n  * CVE-2026-91711: Out of bounds write in ServiceWorker\n  * CVE-2026-91715: Type confusion in ServiceWorker\n  * CVE-2026-91745: Use after free in V8\n  * CVE-2026-91723: Race condition in WebAppInstalls\n  * CVE-2026-91732: Missing authorization in AppManifest\n  * CVE-2026-91742: Confused deputy in PriceTracking\n  * CVE-2026-91714: Observable discrepancy in Fonts\n  * CVE-2026-91725: Observable discrepancy in CSS\n  * CVE-2026-91739: Missing authorization in Transactions Platform\n  * CVE-2026-91713: Missing authorization in Browser\n  * CVE-2026-91738: Improper input validation in ANGLE\n  * CVE-2026-91730: Incomplete cleanup in GetUserMedia\n  * CVE-2026-91722: Use after free in Input\n  * CVE-2026-91719: Code injection in XML\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-603",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21913-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280687",
        "url": "https://bugzilla.suse.com/1280687"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91708 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91709 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91710 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91711 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91712 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91712/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91713 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91714 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91714/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91715 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91716 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91717 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91718 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91719 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91720 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91721 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91721/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91722 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91722/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91723 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91723/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91724 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91724/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91725 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91725/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91726 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91726/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91727 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91727/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91728 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91728/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91729 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91729/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91730 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91730/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91731 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91731/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91732 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91733 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91734 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91734/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91735 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91735/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91736 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91736/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91737 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91738 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91738/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91739 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91739/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91740 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91740/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91741 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91741/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91742 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91742/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91743 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91743/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91744 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91744/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91745 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91745/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91746 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91746/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91747 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91747/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91748 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91748/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-91749 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-91749/"
      }
    ],
    "title": "Security update for chromium",
    "tracking": {
      "current_release_date": "2026-09-24T17:48:20Z",
      "generator": {
        "date": "2026-09-18T03:24:06Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21913-1",
      "initial_release_date": "2026-09-18T03:24:06Z",
      "revision_history": [
        {
          "date": "2026-09-18T03:24:06Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-24T17:48:20Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
                "product": {
                  "name": "chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
                  "product_id": "chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/chromedriver@153.0.8010.47-bp160.1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-0:153.0.8010.47-bp160.1.1.aarch64",
                "product": {
                  "name": "chromium-0:153.0.8010.47-bp160.1.1.aarch64",
                  "product_id": "chromium-0:153.0.8010.47-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:chromium:chromium:153.0.8010.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/chromium@153.0.8010.47-bp160.1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
                "product": {
                  "name": "chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
                  "product_id": "chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/chromedriver@153.0.8010.47-bp160.1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
                "product": {
                  "name": "chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
                  "product_id": "chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:chromium:chromium:153.0.8010.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/chromium@153.0.8010.47-bp160.1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
                "product": {
                  "name": "chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
                  "product_id": "chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/chromedriver@153.0.8010.47-bp160.1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-0:153.0.8010.47-bp160.1.1.x86_64",
                "product": {
                  "name": "chromium-0:153.0.8010.47-bp160.1.1.x86_64",
                  "product_id": "chromium-0:153.0.8010.47-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:chromium:chromium:153.0.8010.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/chromium@153.0.8010.47-bp160.1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-0:153.0.8010.47-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64"
        },
        "product_reference": "chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le"
        },
        "product_reference": "chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-0:153.0.8010.47-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64"
        },
        "product_reference": "chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-0:153.0.8010.47-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64"
        },
        "product_reference": "chromium-0:153.0.8010.47-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-0:153.0.8010.47-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le"
        },
        "product_reference": "chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-0:153.0.8010.47-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        },
        "product_reference": "chromium-0:153.0.8010.47-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-91708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91708",
          "url": "https://www.suse.com/security/cve/CVE-2026-91708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91708",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91708"
    },
    {
      "cve": "CVE-2026-91709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91709",
          "url": "https://www.suse.com/security/cve/CVE-2026-91709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91709",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91709"
    },
    {
      "cve": "CVE-2026-91710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91710",
          "url": "https://www.suse.com/security/cve/CVE-2026-91710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91710",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91710"
    },
    {
      "cve": "CVE-2026-91711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91711",
          "url": "https://www.suse.com/security/cve/CVE-2026-91711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91711",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91711"
    },
    {
      "cve": "CVE-2026-91712",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91712"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91712",
          "url": "https://www.suse.com/security/cve/CVE-2026-91712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91712",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91712"
    },
    {
      "cve": "CVE-2026-91713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91713",
          "url": "https://www.suse.com/security/cve/CVE-2026-91713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91713",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91713"
    },
    {
      "cve": "CVE-2026-91714",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91714"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91714",
          "url": "https://www.suse.com/security/cve/CVE-2026-91714"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91714",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91714"
    },
    {
      "cve": "CVE-2026-91715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91715",
          "url": "https://www.suse.com/security/cve/CVE-2026-91715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91715",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91715"
    },
    {
      "cve": "CVE-2026-91716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91716",
          "url": "https://www.suse.com/security/cve/CVE-2026-91716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91716",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91716"
    },
    {
      "cve": "CVE-2026-91717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91717",
          "url": "https://www.suse.com/security/cve/CVE-2026-91717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91717",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91717"
    },
    {
      "cve": "CVE-2026-91718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91718",
          "url": "https://www.suse.com/security/cve/CVE-2026-91718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91718",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91718"
    },
    {
      "cve": "CVE-2026-91719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91719",
          "url": "https://www.suse.com/security/cve/CVE-2026-91719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91719",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91719"
    },
    {
      "cve": "CVE-2026-91720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91720",
          "url": "https://www.suse.com/security/cve/CVE-2026-91720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91720",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91720"
    },
    {
      "cve": "CVE-2026-91721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91721",
          "url": "https://www.suse.com/security/cve/CVE-2026-91721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91721",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91721"
    },
    {
      "cve": "CVE-2026-91722",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91722"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91722",
          "url": "https://www.suse.com/security/cve/CVE-2026-91722"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91722",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91722"
    },
    {
      "cve": "CVE-2026-91723",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91723"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91723",
          "url": "https://www.suse.com/security/cve/CVE-2026-91723"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91723",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91723"
    },
    {
      "cve": "CVE-2026-91724",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91724"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91724",
          "url": "https://www.suse.com/security/cve/CVE-2026-91724"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91724",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91724"
    },
    {
      "cve": "CVE-2026-91725",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91725"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91725",
          "url": "https://www.suse.com/security/cve/CVE-2026-91725"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91725",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91725"
    },
    {
      "cve": "CVE-2026-91726",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91726"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91726",
          "url": "https://www.suse.com/security/cve/CVE-2026-91726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91726",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91726"
    },
    {
      "cve": "CVE-2026-91727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91727",
          "url": "https://www.suse.com/security/cve/CVE-2026-91727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91727",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91727"
    },
    {
      "cve": "CVE-2026-91728",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91728"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91728",
          "url": "https://www.suse.com/security/cve/CVE-2026-91728"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91728",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91728"
    },
    {
      "cve": "CVE-2026-91729",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91729"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91729",
          "url": "https://www.suse.com/security/cve/CVE-2026-91729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91729",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91729"
    },
    {
      "cve": "CVE-2026-91730",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91730"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91730",
          "url": "https://www.suse.com/security/cve/CVE-2026-91730"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91730",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91730"
    },
    {
      "cve": "CVE-2026-91731",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91731"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91731",
          "url": "https://www.suse.com/security/cve/CVE-2026-91731"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91731",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91731"
    },
    {
      "cve": "CVE-2026-91732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91732",
          "url": "https://www.suse.com/security/cve/CVE-2026-91732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91732",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91732"
    },
    {
      "cve": "CVE-2026-91733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91733",
          "url": "https://www.suse.com/security/cve/CVE-2026-91733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91733",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91733"
    },
    {
      "cve": "CVE-2026-91734",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91734"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91734",
          "url": "https://www.suse.com/security/cve/CVE-2026-91734"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91734",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91734"
    },
    {
      "cve": "CVE-2026-91735",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91735"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91735",
          "url": "https://www.suse.com/security/cve/CVE-2026-91735"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91735",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91735"
    },
    {
      "cve": "CVE-2026-91736",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91736"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91736",
          "url": "https://www.suse.com/security/cve/CVE-2026-91736"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91736",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91736"
    },
    {
      "cve": "CVE-2026-91737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91737",
          "url": "https://www.suse.com/security/cve/CVE-2026-91737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91737",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91737"
    },
    {
      "cve": "CVE-2026-91738",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91738"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91738",
          "url": "https://www.suse.com/security/cve/CVE-2026-91738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91738",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91738"
    },
    {
      "cve": "CVE-2026-91739",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91739"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91739",
          "url": "https://www.suse.com/security/cve/CVE-2026-91739"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91739",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91739"
    },
    {
      "cve": "CVE-2026-91740",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91740"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91740",
          "url": "https://www.suse.com/security/cve/CVE-2026-91740"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91740",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91740"
    },
    {
      "cve": "CVE-2026-91741",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91741"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91741",
          "url": "https://www.suse.com/security/cve/CVE-2026-91741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91741",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91741"
    },
    {
      "cve": "CVE-2026-91742",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91742"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91742",
          "url": "https://www.suse.com/security/cve/CVE-2026-91742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91742",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91742"
    },
    {
      "cve": "CVE-2026-91743",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91743"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91743",
          "url": "https://www.suse.com/security/cve/CVE-2026-91743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91743",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91743"
    },
    {
      "cve": "CVE-2026-91744",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91744"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91744",
          "url": "https://www.suse.com/security/cve/CVE-2026-91744"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91744",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91744"
    },
    {
      "cve": "CVE-2026-91745",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91745"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91745",
          "url": "https://www.suse.com/security/cve/CVE-2026-91745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91745",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91745"
    },
    {
      "cve": "CVE-2026-91746",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91746"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91746",
          "url": "https://www.suse.com/security/cve/CVE-2026-91746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91746",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91746"
    },
    {
      "cve": "CVE-2026-91747",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91747"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91747",
          "url": "https://www.suse.com/security/cve/CVE-2026-91747"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91747",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91747"
    },
    {
      "cve": "CVE-2026-91748",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91748"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91748",
          "url": "https://www.suse.com/security/cve/CVE-2026-91748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91748",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91748"
    },
    {
      "cve": "CVE-2026-91749",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-91749"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-91749",
          "url": "https://www.suse.com/security/cve/CVE-2026-91749"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280687 for CVE-2026-91749",
          "url": "https://bugzilla.suse.com/1280687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromedriver-0:153.0.8010.47-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:chromium-0:153.0.8010.47-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-18T03:24:06Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-91749"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…