Upstream information

CVE-2026-6308 at MITRE

Description

Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entry: 1262174 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
openSUSE Leap 16.0
  • chromedriver >= 147.0.7727.101-bp160.1.1
  • chromium >= 147.0.7727.101-bp160.1.1
 Patchnames:
openSUSE-Leap-16.0-packagehub-206
openSUSE Tumbleweed
  • chromedriver >= 147.0.7727.101-1.1
  • chromium >= 147.0.7727.101-1.1
 Patchnames:
openSUSE-Tumbleweed-2026-10572

SUSE Timeline for this CVE

CVE page created: Thu Apr 16 00:30:12 2026
CVE page last modified: Fri May 8 11:29:40 2026