GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2026:10487-1

Vulnerability from csaf_opensuse - Published: 2026-04-04 00:00 - Updated: 2026-09-17 17:00
Summary
chromedriver-146.0.7680.177-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: chromedriver-146.0.7680.177-1.1 on GA media
Description of the patch: These are all security issues fixed in the chromedriver-146.0.7680.177-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10487
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-5272
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2026-5273
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5274
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5275
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5276
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5277
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5278
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5279
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5280
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5281
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5282
8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5283
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5284
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5285
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5286
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5287
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5288
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5289
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5290
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5291
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
CVE-2026-5292
Affected products
Recommended 8 products, the same list as for CVE-2026-5272
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2026-5272/ self
https://www.suse.com/security/cve/CVE-2026-5273/ self
https://www.suse.com/security/cve/CVE-2026-5274/ self
https://www.suse.com/security/cve/CVE-2026-5275/ self
https://www.suse.com/security/cve/CVE-2026-5276/ self
https://www.suse.com/security/cve/CVE-2026-5277/ self
https://www.suse.com/security/cve/CVE-2026-5278/ self
https://www.suse.com/security/cve/CVE-2026-5279/ self
https://www.suse.com/security/cve/CVE-2026-5280/ self
https://www.suse.com/security/cve/CVE-2026-5281/ self
https://www.suse.com/security/cve/CVE-2026-5282/ self
https://www.suse.com/security/cve/CVE-2026-5283/ self
https://www.suse.com/security/cve/CVE-2026-5284/ self
https://www.suse.com/security/cve/CVE-2026-5285/ self
https://www.suse.com/security/cve/CVE-2026-5286/ self
https://www.suse.com/security/cve/CVE-2026-5287/ self
https://www.suse.com/security/cve/CVE-2026-5288/ self
https://www.suse.com/security/cve/CVE-2026-5289/ self
https://www.suse.com/security/cve/CVE-2026-5290/ self
https://www.suse.com/security/cve/CVE-2026-5291/ self
https://www.suse.com/security/cve/CVE-2026-5292/ self
https://www.suse.com/security/cve/CVE-2026-5272 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5273 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5274 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5275 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5276 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5277 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5278 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5279 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5280 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5281 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5282 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5283 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5284 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5285 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5286 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5287 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5288 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5289 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5290 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5291 external
https://bugzilla.suse.com/1261249 external
https://www.suse.com/security/cve/CVE-2026-5292 external
https://bugzilla.suse.com/1261249 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "chromedriver-146.0.7680.177-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the chromedriver-146.0.7680.177-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10487",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10487-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5272 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5272/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5273 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5273/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5274 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5274/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5275 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5276 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5276/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5277 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5277/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5278 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5278/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5279 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5279/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5280 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5280/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5281 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5281/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5282 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5282/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5283 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5284 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5284/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5285 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5285/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5286 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5286/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5287 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5287/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5288 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5288/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5289 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5289/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5290 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5290/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5291 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5291/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5292 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5292/"
      }
    ],
    "title": "chromedriver-146.0.7680.177-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-17T17:00:00Z",
      "generator": {
        "date": "2026-04-04T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10487-1",
      "initial_release_date": "2026-04-04T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-04-04T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:05:10Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:06:24Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:00:00Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-0:146.0.7680.177-1.1.aarch64",
                "product": {
                  "name": "chromedriver-0:146.0.7680.177-1.1.aarch64",
                  "product_id": "chromedriver-0:146.0.7680.177-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/chromedriver@146.0.7680.177-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-0:146.0.7680.177-1.1.aarch64",
                "product": {
                  "name": "chromium-0:146.0.7680.177-1.1.aarch64",
                  "product_id": "chromium-0:146.0.7680.177-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:chromium:chromium:146.0.7680.177:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/chromium@146.0.7680.177-1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-0:146.0.7680.177-1.1.ppc64le",
                "product": {
                  "name": "chromedriver-0:146.0.7680.177-1.1.ppc64le",
                  "product_id": "chromedriver-0:146.0.7680.177-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/chromedriver@146.0.7680.177-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-0:146.0.7680.177-1.1.ppc64le",
                "product": {
                  "name": "chromium-0:146.0.7680.177-1.1.ppc64le",
                  "product_id": "chromium-0:146.0.7680.177-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:chromium:chromium:146.0.7680.177:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/chromium@146.0.7680.177-1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-0:146.0.7680.177-1.1.s390x",
                "product": {
                  "name": "chromedriver-0:146.0.7680.177-1.1.s390x",
                  "product_id": "chromedriver-0:146.0.7680.177-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/chromedriver@146.0.7680.177-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-0:146.0.7680.177-1.1.s390x",
                "product": {
                  "name": "chromium-0:146.0.7680.177-1.1.s390x",
                  "product_id": "chromium-0:146.0.7680.177-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:chromium:chromium:146.0.7680.177:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/chromium@146.0.7680.177-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-0:146.0.7680.177-1.1.x86_64",
                "product": {
                  "name": "chromedriver-0:146.0.7680.177-1.1.x86_64",
                  "product_id": "chromedriver-0:146.0.7680.177-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/chromedriver@146.0.7680.177-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-0:146.0.7680.177-1.1.x86_64",
                "product": {
                  "name": "chromium-0:146.0.7680.177-1.1.x86_64",
                  "product_id": "chromium-0:146.0.7680.177-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:chromium:chromium:146.0.7680.177:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/chromium@146.0.7680.177-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-0:146.0.7680.177-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64"
        },
        "product_reference": "chromedriver-0:146.0.7680.177-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-0:146.0.7680.177-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le"
        },
        "product_reference": "chromedriver-0:146.0.7680.177-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-0:146.0.7680.177-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x"
        },
        "product_reference": "chromedriver-0:146.0.7680.177-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-0:146.0.7680.177-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64"
        },
        "product_reference": "chromedriver-0:146.0.7680.177-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-0:146.0.7680.177-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64"
        },
        "product_reference": "chromium-0:146.0.7680.177-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-0:146.0.7680.177-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le"
        },
        "product_reference": "chromium-0:146.0.7680.177-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-0:146.0.7680.177-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x"
        },
        "product_reference": "chromium-0:146.0.7680.177-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-0:146.0.7680.177-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        },
        "product_reference": "chromium-0:146.0.7680.177-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-5272",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5272"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5272",
          "url": "https://www.suse.com/security/cve/CVE-2026-5272"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5272",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5272"
    },
    {
      "cve": "CVE-2026-5273",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5273"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5273",
          "url": "https://www.suse.com/security/cve/CVE-2026-5273"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5273",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5273"
    },
    {
      "cve": "CVE-2026-5274",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5274"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5274",
          "url": "https://www.suse.com/security/cve/CVE-2026-5274"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5274",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5274"
    },
    {
      "cve": "CVE-2026-5275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5275",
          "url": "https://www.suse.com/security/cve/CVE-2026-5275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5275",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5275"
    },
    {
      "cve": "CVE-2026-5276",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5276"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5276",
          "url": "https://www.suse.com/security/cve/CVE-2026-5276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5276",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5276"
    },
    {
      "cve": "CVE-2026-5277",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5277"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5277",
          "url": "https://www.suse.com/security/cve/CVE-2026-5277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5277",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5277"
    },
    {
      "cve": "CVE-2026-5278",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5278"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5278",
          "url": "https://www.suse.com/security/cve/CVE-2026-5278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5278",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5278"
    },
    {
      "cve": "CVE-2026-5279",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5279"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5279",
          "url": "https://www.suse.com/security/cve/CVE-2026-5279"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5279",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5279"
    },
    {
      "cve": "CVE-2026-5280",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5280"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5280",
          "url": "https://www.suse.com/security/cve/CVE-2026-5280"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5280",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5280"
    },
    {
      "cve": "CVE-2026-5281",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5281"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5281",
          "url": "https://www.suse.com/security/cve/CVE-2026-5281"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5281",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5281"
    },
    {
      "cve": "CVE-2026-5282",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5282"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5282",
          "url": "https://www.suse.com/security/cve/CVE-2026-5282"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5282",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5282"
    },
    {
      "cve": "CVE-2026-5283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5283",
          "url": "https://www.suse.com/security/cve/CVE-2026-5283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5283",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5283"
    },
    {
      "cve": "CVE-2026-5284",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5284"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5284",
          "url": "https://www.suse.com/security/cve/CVE-2026-5284"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5284",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5284"
    },
    {
      "cve": "CVE-2026-5285",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5285"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5285",
          "url": "https://www.suse.com/security/cve/CVE-2026-5285"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5285",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5285"
    },
    {
      "cve": "CVE-2026-5286",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5286"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5286",
          "url": "https://www.suse.com/security/cve/CVE-2026-5286"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5286",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5286"
    },
    {
      "cve": "CVE-2026-5287",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5287"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5287",
          "url": "https://www.suse.com/security/cve/CVE-2026-5287"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5287",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5287"
    },
    {
      "cve": "CVE-2026-5288",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5288"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5288",
          "url": "https://www.suse.com/security/cve/CVE-2026-5288"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5288",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5288"
    },
    {
      "cve": "CVE-2026-5289",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5289"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5289",
          "url": "https://www.suse.com/security/cve/CVE-2026-5289"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5289",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5289"
    },
    {
      "cve": "CVE-2026-5290",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5290"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5290",
          "url": "https://www.suse.com/security/cve/CVE-2026-5290"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5290",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5290"
    },
    {
      "cve": "CVE-2026-5291",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5291"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5291",
          "url": "https://www.suse.com/security/cve/CVE-2026-5291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5291",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5291"
    },
    {
      "cve": "CVE-2026-5292",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5292"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
          "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5292",
          "url": "https://www.suse.com/security/cve/CVE-2026-5292"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261249 for CVE-2026-5292",
          "url": "https://bugzilla.suse.com/1261249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromedriver-0:146.0.7680.177-1.1.x86_64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.aarch64",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.ppc64le",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.s390x",
            "openSUSE Tumbleweed:chromium-0:146.0.7680.177-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-5292"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.