Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 143.0.7499.192 (boo#1256067): * CVE-2026-0628: Insufficient policy enforcement in WebView tag - Chromium 143.0.7499.169 (stable released 2025-12-18) * no cve listed yet Chromium 143.0.7499.146 (boo#1255115): * CVE-2025-14765: Use after free in WebGPU * CVE-2025-14766: Out of bounds read and write in V8 * CVE-2025-14174: Out of bounds memory access in ANGLE - Chromium 143.0.7499.109 (boo#1254776): * CVE-2025-14372: Use after free in Password Manager * CVE-2025-14373: Inappropriate implementation in Toolbar * third issue with an exploit is known to exist in the wild Chromium 143.0.7499.40 (boo#1254429): * CVE-2025-13630: Type Confusion in V8 * CVE-2025-13631: Inappropriate implementation in Google Updater * CVE-2025-13632: Inappropriate implementation in DevTools * CVE-2025-13633: Use after free in Digital Credentials * CVE-2025-13634: Inappropriate implementation in Downloads * CVE-2025-13720: Bad cast in Loader * CVE-2025-13721: Race in v8 * CVE-2025-13635: Inappropriate implementation in Downloads * CVE-2025-13636: Inappropriate implementation in Split View * CVE-2025-13637: Inappropriate implementation in Downloads * CVE-2025-13638: Use after free in Media Stream * CVE-2025-13639: Inappropriate implementation in WebRTC * CVE-2025-13640: Inappropriate implementation in Passwords
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for chromium fixes the following issues: Changes in chromium: - Chromium 143.0.7499.192 (boo#1256067): * CVE-2026-0628: Insufficient policy enforcement in WebView tag - Chromium 143.0.7499.169 (stable released 2025-12-18) * no cve listed yet Chromium 143.0.7499.146 (boo#1255115): * CVE-2025-14765: Use after free in WebGPU * CVE-2025-14766: Out of bounds read and write in V8 * CVE-2025-14174: Out of bounds memory access in ANGLE - Chromium 143.0.7499.109 (boo#1254776): * CVE-2025-14372: Use after free in Password Manager * CVE-2025-14373: Inappropriate implementation in Toolbar * third issue with an exploit is known to exist in the wild Chromium 143.0.7499.40 (boo#1254429): * CVE-2025-13630: Type Confusion in V8 * CVE-2025-13631: Inappropriate implementation in Google Updater * CVE-2025-13632: Inappropriate implementation in DevTools * CVE-2025-13633: Use after free in Digital Credentials * CVE-2025-13634: Inappropriate implementation in Downloads * CVE-2025-13720: Bad cast in Loader * CVE-2025-13721: Race in v8 * CVE-2025-13635: Inappropriate implementation in Downloads * CVE-2025-13636: Inappropriate implementation in Split View * CVE-2025-13637: Inappropriate implementation in Downloads * CVE-2025-13638: Use after free in Media Stream * CVE-2025-13639: Inappropriate implementation in WebRTC * CVE-2025-13640: Inappropriate implementation in Passwords
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1254429
- https://bugzilla.suse.com/1254776
- https://bugzilla.suse.com/1255115
- https://bugzilla.suse.com/1256067
- https://www.suse.com/security/cve/CVE-2025-13630
- https://www.suse.com/security/cve/CVE-2025-13631
- https://www.suse.com/security/cve/CVE-2025-13632
- https://www.suse.com/security/cve/CVE-2025-13633
- https://www.suse.com/security/cve/CVE-2025-13634
- https://www.suse.com/security/cve/CVE-2025-13635
- https://www.suse.com/security/cve/CVE-2025-13636
- https://www.suse.com/security/cve/CVE-2025-13637
- https://www.suse.com/security/cve/CVE-2025-13638
- https://www.suse.com/security/cve/CVE-2025-13639
- https://www.suse.com/security/cve/CVE-2025-13640
- https://www.suse.com/security/cve/CVE-2025-13720
- https://www.suse.com/security/cve/CVE-2025-13721
- https://www.suse.com/security/cve/CVE-2025-14174
- https://www.suse.com/security/cve/CVE-2025-14372
- https://www.suse.com/security/cve/CVE-2025-14373
- https://www.suse.com/security/cve/CVE-2025-14765
- https://www.suse.com/security/cve/CVE-2025-14766
- https://www.suse.com/security/cve/CVE-2026-0628