Описание
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
- Chromium 149.0.7827.102 (boo#1267911):
- CVE-2026-11628: Use after free in Ozone
- CVE-2026-11629: Use after free in Ozone
- CVE-2026-11630: Use after free in File Input
- CVE-2026-11631: Use after free in Aura
- CVE-2026-11632: Use after free in TabStrip
- CVE-2026-11633: Use after free in Bluetooth
- CVE-2026-11634: Use after free in Gamepad
- CVE-2026-11635: Use after free in Bluetooth
- CVE-2026-11636: Use after free in Autofill
- CVE-2026-11637: Use after free in Views
- CVE-2026-11638: Use after free in Printing
- CVE-2026-11639: Use after free in Compositing
- CVE-2026-11640: Integer overflow in libyuv
- CVE-2026-11641: Use after free in Bluetooth
- CVE-2026-11642: Use after free in Web Apps
- CVE-2026-11643: Use after free in Proxy
- CVE-2026-11644: Use after free in Views
- CVE-2026-11645: Out of bounds memory access in V8
- CVE-2026-11646: Use after free in ViewTransitions
- CVE-2026-11647: Use after free in Printing
- CVE-2026-11648: Use after free in FullScreen
- CVE-2026-11649: Use after free in V8
- CVE-2026-11650: Use after free in V8
- CVE-2026-11651: Use after free in Network
- CVE-2026-11652: Use after free in Extensions
- CVE-2026-11653: Insufficient validation of untrusted input in Extensions
- CVE-2026-11654: Use after free in CameraCapture
- CVE-2026-11655: Integer overflow in Media
- CVE-2026-11656: Use after free in ServiceWorker
- CVE-2026-11657: Use after free in Payments
- CVE-2026-11658: Insufficient validation of untrusted input in Extensions
- CVE-2026-11659: Insufficient validation of untrusted input in UI
- CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
- CVE-2026-11661: Use after free in Views
- CVE-2026-11662: Type Confusion in Bindings
- CVE-2026-11663: Use after free in Skia
- CVE-2026-11664: Use after free in Payments
- CVE-2026-11665: Out of bounds read in Dawn
- CVE-2026-11666: Insufficient validation of untrusted input in Input
- CVE-2026-11667: Out of bounds read in WebRTC
- CVE-2026-11668: Uninitialized Use in Codecs
- CVE-2026-11669: Integer overflow in Media
- CVE-2026-11670: Use after free in PDF
- CVE-2026-11671: Use after free in Navigation
- CVE-2026-11672: Out of bounds write in GPU
- CVE-2026-11673: Use after free in InterestGroups
- CVE-2026-11674: Use after free in Guest View
- CVE-2026-11675: Insufficient validation of untrusted input in Skia
- CVE-2026-11676: Insufficient validation of untrusted input in Dawn
- CVE-2026-11677: Race in Network
- CVE-2026-11678: Integer overflow in libyuv
- CVE-2026-11679: Use after free in Codecs
- CVE-2026-11680: Use after free in Media
- CVE-2026-11681: Use after free in Ozone
- CVE-2026-11682: Insufficient validation of untrusted input in Views
- CVE-2026-11683: Use after free in WebCodecs
- CVE-2026-11684: Insufficient policy enforcement in Network
- CVE-2026-11685: Insufficient data validation in MediaCapture
- CVE-2026-11686: Insufficient validation of untrusted input in Dawn
- CVE-2026-11687: Use after free in Dawn
- CVE-2026-11688: Object lifecycle issue in SVG
- CVE-2026-11689: Insufficient validation of untrusted input in Passwords
- CVE-2026-11690: Out of bounds read and write in Media
- CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
- CVE-2026-11692: Use after free in Read Anything
- CVE-2026-11693: Inappropriate implementation in Plugins
- CVE-2026-11694: Use after free in ServiceWorker
- CVE-2026-11695: Inappropriate implementation in Passwords
- CVE-2026-11696: Uninitialized Use in Video
- CVE-2026-11697: Insufficient validation of untrusted input in UI
- CVE-2026-11698: Use after free in Bluetooth
- CVE-2026-11699: Use after free in Bluetooth
- CVE-2026-11700: Use after free in Tracing
- CVE-2026-11701: Insufficient validation of untrusted input in Guest View
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1267911
- SUSE CVE CVE-2026-11628 page
- SUSE CVE CVE-2026-11629 page
- SUSE CVE CVE-2026-11630 page
- SUSE CVE CVE-2026-11631 page
- SUSE CVE CVE-2026-11632 page
- SUSE CVE CVE-2026-11633 page
- SUSE CVE CVE-2026-11634 page
- SUSE CVE CVE-2026-11635 page
- SUSE CVE CVE-2026-11636 page
- SUSE CVE CVE-2026-11637 page
- SUSE CVE CVE-2026-11638 page
- SUSE CVE CVE-2026-11639 page
- SUSE CVE CVE-2026-11640 page
- SUSE CVE CVE-2026-11641 page
- SUSE CVE CVE-2026-11642 page
- SUSE CVE CVE-2026-11643 page
- SUSE CVE CVE-2026-11644 page
- SUSE CVE CVE-2026-11645 page
Описание
Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to potentially exploit heap corruption via physical access to the device. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11628
- SUSE Bug 1267911
Описание
Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11629
- SUSE Bug 1267911
Описание
Use after free in File Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11630
- SUSE Bug 1267911
Описание
Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11631
- SUSE Bug 1267911
Описание
Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11632
- SUSE Bug 1267911
Описание
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11633
- SUSE Bug 1267911
Описание
Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11634
- SUSE Bug 1267911
Описание
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11635
- SUSE Bug 1267911
Описание
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11636
- SUSE Bug 1267911
Описание
Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11637
- SUSE Bug 1267911
Описание
Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11638
- SUSE Bug 1267911
Описание
Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11639
- SUSE Bug 1267911
Описание
Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11640
- SUSE Bug 1267911
Описание
Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11641
- SUSE Bug 1267911
Описание
Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11642
- SUSE Bug 1267911
Описание
Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11643
- SUSE Bug 1267911
Описание
Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Critical)
Затронутые продукты
Ссылки
- CVE-2026-11644
- SUSE Bug 1267911
Описание
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11645
- SUSE Bug 1267911
Описание
Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11646
- SUSE Bug 1267911
Описание
Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11647
- SUSE Bug 1267911
Описание
Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11648
- SUSE Bug 1267911
Описание
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11649
- SUSE Bug 1267911
Описание
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11650
- SUSE Bug 1267911
Описание
Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11651
- SUSE Bug 1267911
Описание
Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11652
- SUSE Bug 1267911
Описание
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11653
- SUSE Bug 1267911
Описание
Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11654
- SUSE Bug 1267911
Описание
Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11655
- SUSE Bug 1267911
Описание
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11656
- SUSE Bug 1267911
Описание
Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11657
- SUSE Bug 1267911
Описание
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11658
- SUSE Bug 1267911
Описание
Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11659
- SUSE Bug 1267911
Описание
Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11660
- SUSE Bug 1267911
Описание
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11661
- SUSE Bug 1267911
Описание
Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11662
- SUSE Bug 1267911
Описание
Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11663
- SUSE Bug 1267911
Описание
Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11664
- SUSE Bug 1267911
Описание
Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11665
- SUSE Bug 1267911
Описание
Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11666
- SUSE Bug 1267911
Описание
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11667
- SUSE Bug 1267911
Описание
Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11668
- SUSE Bug 1267911
Описание
Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11669
- SUSE Bug 1267911
Описание
Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11670
- SUSE Bug 1267911
Описание
Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11671
- SUSE Bug 1267911
Описание
Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11672
- SUSE Bug 1267911
Описание
Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11673
- SUSE Bug 1267911
Описание
Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11674
- SUSE Bug 1267911
Описание
Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11675
- SUSE Bug 1267911
Описание
Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11676
- SUSE Bug 1267911
Описание
Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11677
- SUSE Bug 1267911
Описание
Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11678
- SUSE Bug 1267911
Описание
Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11679
- SUSE Bug 1267911
Описание
Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11680
- SUSE Bug 1267911
Описание
Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11681
- SUSE Bug 1267911
Описание
Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11682
- SUSE Bug 1267911
Описание
Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11683
- SUSE Bug 1267911
Описание
Insufficient policy enforcement in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the utility process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11684
- SUSE Bug 1267911
Описание
Inappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11685
- SUSE Bug 1267911
Описание
Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11686
- SUSE Bug 1267911
Описание
Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11687
- SUSE Bug 1267911
Описание
Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11688
- SUSE Bug 1267911
Описание
Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11689
- SUSE Bug 1267911
Описание
Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11690
- SUSE Bug 1267911
Описание
Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11691
- SUSE Bug 1267911
Описание
Use after free in Read Anything in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11692
- SUSE Bug 1267911
Описание
Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11693
- SUSE Bug 1267911
Описание
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11694
- SUSE Bug 1267911
Описание
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11695
- SUSE Bug 1267911
Описание
Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11696
- SUSE Bug 1267911
Описание
Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11697
- SUSE Bug 1267911
Описание
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11698
- SUSE Bug 1267911
Описание
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2026-11699
- SUSE Bug 1267911
Описание
Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2026-11700
- SUSE Bug 1267911
Описание
Inappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2026-11701
- SUSE Bug 1267911