Security update for chromium SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:0030-1 Final 1 1 2022-02-07T09:29:40Z current 2022-02-07T09:29:40Z 2022-02-07T09:29:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for chromium This update for chromium fixes the following issues: Chromium 98.0.4758.80 (boo#1195420) * CVE-2022-0452: Use after free in Safe Browsing * CVE-2022-0453: Use after free in Reader Mode * CVE-2022-0454: Heap buffer overflow in ANGLE * CVE-2022-0455: Inappropriate implementation in Full Screen Mode * CVE-2022-0456: Use after free in Web Search * CVE-2022-0457: Type Confusion in V8 * CVE-2022-0459: Use after free in Screen Capture * CVE-2022-0460: Use after free in Window Dialog * CVE-2022-0461: Policy bypass in COOP * CVE-2022-0462: Inappropriate implementation in Scroll * CVE-2022-0463: Use after free in Accessibility * CVE-2022-0464: Use after free in Accessibility * CVE-2022-0465: Use after free in Extensions * CVE-2022-0466: Inappropriate implementation in Extensions Platform * CVE-2022-0467: Inappropriate implementation in Pointer Lock * CVE-2022-0468: Use after free in Payments * CVE-2022-0469: Use after free in Cast * CVE-2022-0470: Out of bounds memory access in V8 * Various fixes from internal audits, fuzzing and other initiatives The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2022-30 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ E-Mail link for openSUSE-SU-2022:0030-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1195420 SUSE Bug 1195420 https://www.suse.com/security/cve/CVE-2022-0452/ SUSE CVE CVE-2022-0452 page https://www.suse.com/security/cve/CVE-2022-0453/ SUSE CVE CVE-2022-0453 page https://www.suse.com/security/cve/CVE-2022-0454/ SUSE CVE CVE-2022-0454 page https://www.suse.com/security/cve/CVE-2022-0455/ SUSE CVE CVE-2022-0455 page https://www.suse.com/security/cve/CVE-2022-0456/ SUSE CVE CVE-2022-0456 page https://www.suse.com/security/cve/CVE-2022-0457/ SUSE CVE CVE-2022-0457 page https://www.suse.com/security/cve/CVE-2022-0459/ SUSE CVE CVE-2022-0459 page https://www.suse.com/security/cve/CVE-2022-0460/ SUSE CVE CVE-2022-0460 page https://www.suse.com/security/cve/CVE-2022-0461/ SUSE CVE CVE-2022-0461 page https://www.suse.com/security/cve/CVE-2022-0462/ SUSE CVE CVE-2022-0462 page https://www.suse.com/security/cve/CVE-2022-0463/ SUSE CVE CVE-2022-0463 page https://www.suse.com/security/cve/CVE-2022-0464/ SUSE CVE CVE-2022-0464 page https://www.suse.com/security/cve/CVE-2022-0465/ SUSE CVE CVE-2022-0465 page https://www.suse.com/security/cve/CVE-2022-0466/ SUSE CVE CVE-2022-0466 page https://www.suse.com/security/cve/CVE-2022-0467/ SUSE CVE CVE-2022-0467 page https://www.suse.com/security/cve/CVE-2022-0468/ SUSE CVE CVE-2022-0468 page https://www.suse.com/security/cve/CVE-2022-0469/ SUSE CVE CVE-2022-0469 page https://www.suse.com/security/cve/CVE-2022-0470/ SUSE CVE CVE-2022-0470 page SUSE Package Hub 15 SP3 openSUSE Leap 15.3 chromedriver-98.0.4758.80-bp153.2.60.1 chromium-98.0.4758.80-bp153.2.60.1 chromedriver-98.0.4758.80-bp153.2.60.1 as a component of SUSE Package Hub 15 SP3 chromium-98.0.4758.80-bp153.2.60.1 as a component of SUSE Package Hub 15 SP3 chromedriver-98.0.4758.80-bp153.2.60.1 as a component of openSUSE Leap 15.3 chromium-98.0.4758.80-bp153.2.60.1 as a component of openSUSE Leap 15.3 Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CVE-2022-0452 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0452.html CVE-2022-0452 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0453 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0453.html CVE-2022-0453 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0454 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0454.html CVE-2022-0454 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. CVE-2022-0455 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0455.html CVE-2022-0455 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction. CVE-2022-0456 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0456.html CVE-2022-0456 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0457 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0457.html CVE-2022-0457 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0459 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0459.html CVE-2022-0459 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0460 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0460.html CVE-2022-0460 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page. CVE-2022-0461 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0461.html CVE-2022-0461 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2022-0462 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0462.html CVE-2022-0462 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. CVE-2022-0463 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0463.html CVE-2022-0463 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. CVE-2022-0464 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0464.html CVE-2022-0464 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction. CVE-2022-0465 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0465.html CVE-2022-0465 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page. CVE-2022-0466 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0466.html CVE-2022-0466 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Inappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98.0.4758.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. CVE-2022-0467 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0467.html CVE-2022-0467 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0468 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0468.html CVE-2022-0468 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0469 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0469.html CVE-2022-0469 https://bugzilla.suse.com/1195420 SUSE Bug 1195420 Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0470 SUSE Package Hub 15 SP3:chromedriver-98.0.4758.80-bp153.2.60.1 SUSE Package Hub 15 SP3:chromium-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromedriver-98.0.4758.80-bp153.2.60.1 openSUSE Leap 15.3:chromium-98.0.4758.80-bp153.2.60.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6WMUXRUC6NZA77FM7TELOXJIMWMOJRMA/ https://www.suse.com/security/cve/CVE-2022-0470.html CVE-2022-0470 https://bugzilla.suse.com/1195420 SUSE Bug 1195420