Security update for opera SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:0047-1 Final 1 1 2022-02-20T17:01:21Z current 2022-02-20T17:01:21Z 2022-02-20T17:01:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for opera This update for opera fixes the following issues: Update to 83.0.4254.27 - CHR-8737 Update chromium on desktop-stable-97-4254 to 97.0.4692.99 - DNA-96336 [Mac] Translate new network installer slogan - DNA-96678 Add battery level monitoring capability to powerSavePrivate - DNA-96939 Crash at opera::ExternalVideoService::MarkAsManuallyClosed() - DNA-97276 Enable #static-tab-audio-indicator on all streams - The update to chromium 97.0.4692.99 fixes following issues: CVE-2022-0289, CVE-2022-0290, CVE-2022-0291, CVE-2022-0292, CVE-2022-0293, CVE-2022-0294, CVE-2022-0295, CVE-2022-0296, CVE-2022-0297, CVE-2022-0298, CVE-2022-0300, CVE-2022-0301, CVE-2022-0302, CVE-2022-0304, CVE-2022-0305, CVE-2022-0306, CVE-2022-0307, CVE-2022-0308, CVE-2022-0309, CVE-2022-0310, CVE-2022-0311 Update to 83.0.4254.19 - DNA-96079 Turn on #automatic-video-popout on developer - DNA-97070 Opera 83 translations - DNA-97119 [LastCard] Stop showing used burner cards - DNA-97131 Enable automatic-video-popout on all streams from O84 on - DNA-97257 Crash at views::ImageButton::SetMinimumImageSize(gfx::Size const&) - DNA-97259 Promote O83 to stable - Complete Opera 83.0 changelog at: https://blogs.opera.com/desktop/changelog-for-83/ - Update to 83.0.4254.16 - DNA-96968 Fix alignment of the 'Advanced' button in Settings - Update to 83.0.4254.14 - CHR-8701 Update chromium on desktop-stable-97-4254 to 97.0.4692.45 - CHR-8713 Update chromium on desktop-stable-97-4254 to 97.0.4692.56 - CHR-8723 Update chromium on desktop-stable-97-4254 to 97.0.4692.71 - DNA-96780 Crash at ui::NativeTheme::RemoveObserver(ui::NativeThemeObserver*) - DNA-96822 Tab close resize behavior change - DNA-96861 Create Loomi Options menu - DNA-96904 Support Win11 snap layout popup - DNA-96951 Tab close animation broken - DNA-96991 Tab X button doesn’t work correctly - DNA-97027 Incorrect tab size after tab close - The update to chromium 97.0.4692.71 fixes following issues: CVE-2022-0096, CVE-2022-0097, CVE-2022-0098, CVE-2022-0099, CVE-2022-0100, CVE-2022-0101, CVE-2022-0102, CVE-2022-0103, CVE-2022-0104, CVE-2022-0105, CVE-2022-0105, CVE-2022-0106, CVE-2022-0107, CVE-2022-0108, CVE-2022-0109, CVE-2022-0110, CVE-2022-0111, CVE-2022-0111, CVE-2022-0112, CVE-2022-0113, CVE-2022-0114, CVE-2022-0115, CVE-2022-0116, CVE-2022-0117, CVE-2022-0118, CVE-2022-0120 - Update to version 82.0.4227.58 - DNA-96780 Crash at ui::NativeTheme::RemoveObserver(ui::NativeThemeObserver*) - DNA-96890 Settings default browser not working for current user on Windows 7 - Update to version 82.0.4227.43 - CHR-8705 Update chromium on desktop-stable-96-4227 to 96.0.4664.110 - DNA-93284 Unstable obj/opera/desktop/common/installer_rc_generated/installer.res - DNA-95908 Interstitial/internal pages shown as NOT SECURE after visiting http site - DNA-96404 Opera doesn’t show on main screen when second screen is abruptly disconnected - The update to chromium 96.0.4664.110 fixes following issues: CVE-2021-4098, CVE-2021-4099, CVE-2021-4100, CVE-2021-4101, CVE-2021-4102 - Update to version 82.0.4227.33 - CHR-8689 Update chromium on desktop-stable-96-4227 to 96.0.4664.93 - DNA-96559 Tooltip popup looks bad in dark theme - DNA-96570 [Player] Tidal logging in via PLAY doesn’t work - DNA-96594 Unnecessary extra space in fullscreen mode on M1 Pro MacBooks - DNA-96649 Update Meme button - DNA-96676 Add Icon in the Sidebar Setup - DNA-96677 Add default URL - The update to chromium 96.0.4664.93 fixes following issues: CVE-2021-4052, CVE-2021-4053, CVE-2021-4079, CVE-2021-4054, CVE-2021-4078, CVE-2021-4055, CVE-2021-4056, CVE-2021-4057, CVE-2021-4058, CVE-2021-4059, CVE-2021-4061, CVE-2021-4062, CVE-2021-4063, CVE-2021-4064, CVE-2021-4065, CVE-2021-4066, CVE-2021-4067, CVE-2021-4068 - Update to version 82.0.4227.23 - DNA-95632 With new au-logic UUID is set with delay and may be not set for pb-builds (when closing fast) - DNA-96349 Laggy tooltip animation - DNA-96483 [Snap][Linux] Video not working / wrong ffmpeg snap version for Opera 82 - DNA-96493 Create 'small' enticement in credit card autofill - DNA-96533 Opera 82 translations - DNA-96535 Make the URL configurable - DNA-96553 Add switch to whitelist test pages - DNA-96557 Links not opened from panel - DNA-96558 AdBlock bloks some trackers inside the panel - DNA-96568 [Player] Tidal in sidebar Player opens wrong site when logging in - DNA-96659 Siteprefs not applied after network service crash - DNA-96593 Promote O82 to stable - Complete Opera 82.0 changelog at: https://blogs.opera.com/desktop/changelog-for-82/ - Update to version 82.0.4227.13 - CHR-8668 Update chromium on desktop-stable-96-4227 to 96.0.4664.45 - DNA-76987 [Mac] Update desktop EULA with geolocation split - DNA-93388 Problem with symlinks on windows when creating file list - DNA-95734 Discarded Recently Closed items get revived after restart - DNA-96134 'Your profile has been updated' does not disappear - DNA-96190 Opera freezes when trying to drag expanded bookmark folder with nested subfolders - DNA-96223 Easy Files not working in Full Screen - DNA-96274 Checkout autofill shouldn't show used burner card - DNA-96275 Change the notification message for pausing multi-use cards - DNA-96295 'Video pop out' setting doesn't sync - DNA-96316 Highlight text wrong colour on dark mode - DNA-96326 Wrong translation Private Mode > Turkish - DNA-96351 macOS window controls are missing in full screen - DNA-96440 Update video URL - DNA-96448 add option to pin extension via rich hints - DNA-96453 Register user-chosen option on client-side, read on hint side - DNA-96454 Choosing an option from the settings menu should close the popup - DNA-96484 Enable AB test for a new autoupdater logic (for 50%) - DNA-96500 Add 'don't show me again' prefs to allowed whitelist - DNA-96538 Inline audiocomplete for www.mediaexpert.pl incorrectly suggested - The update to chromium 96.0.4664.45 fixes following issues: CVE-2021-38005, CVE-2021-38006, CVE-2021-38007, CVE-2021-38008, CVE-2021-38009, CVE-2021-38010, CVE-2021-38011, CVE-2021-38012, CVE-2021-38013, CVE-2021-38014, CVE-2021-38015, CVE-2021-38016, CVE-2021-38017, CVE-2021-38019, CVE-2021-38020, CVE-2021-38021, CVE-2021-38022 - Update to version 81.0.4196.54 - CHR-8644 Update chromium on desktop-stable-95-4196 to 95.0.4638.69 - DNA-95773 ExtensionWebRequestApiTest crashes on mac - DNA-96062 Opera 81 translations - DNA-96134 “Your profile has been updated’ does not disappear - DNA-96274 Checkout autofill shouldn’t show used burner card - DNA-96275 Change the notification message for pausing multi-use cards - DNA-96440 Update video URL - The update to chromium 95.0.4638.69 fixes following issues: CVE-2021-37997, CVE-2021-37998, CVE-2021-37999, CVE-2021-37980, CVE-2021-38001, CVE-2021-38002, CVE-2021-38003, CVE-2021-38004 - Update to version 81.0.4196.37 - DNA-96008 Crash at content::WebContentsImpl::OpenURL(content::OpenURLParams const&) - DNA-96032 Closing the videoconference pop-up force leaving the meeting - DNA-96092 Crash at void opera::ModalDialogViews::OnWidgetClosing(opera::ModalDialog::Result) - DNA-96142 [Yat] Emoji icon cut off in URL for Yat The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2022-47 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ E-Mail link for openSUSE-SU-2022:0047-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2021-37980/ SUSE CVE CVE-2021-37980 page https://www.suse.com/security/cve/CVE-2021-37997/ SUSE CVE CVE-2021-37997 page https://www.suse.com/security/cve/CVE-2021-37998/ SUSE CVE CVE-2021-37998 page https://www.suse.com/security/cve/CVE-2021-37999/ SUSE CVE CVE-2021-37999 page https://www.suse.com/security/cve/CVE-2021-38001/ SUSE CVE CVE-2021-38001 page https://www.suse.com/security/cve/CVE-2021-38002/ SUSE CVE CVE-2021-38002 page https://www.suse.com/security/cve/CVE-2021-38003/ SUSE CVE CVE-2021-38003 page https://www.suse.com/security/cve/CVE-2021-38004/ SUSE CVE CVE-2021-38004 page https://www.suse.com/security/cve/CVE-2021-38005/ SUSE CVE CVE-2021-38005 page https://www.suse.com/security/cve/CVE-2021-38006/ SUSE CVE CVE-2021-38006 page https://www.suse.com/security/cve/CVE-2021-38007/ SUSE CVE CVE-2021-38007 page https://www.suse.com/security/cve/CVE-2021-38008/ SUSE CVE CVE-2021-38008 page https://www.suse.com/security/cve/CVE-2021-38009/ SUSE CVE CVE-2021-38009 page https://www.suse.com/security/cve/CVE-2021-38010/ SUSE CVE CVE-2021-38010 page https://www.suse.com/security/cve/CVE-2021-38011/ SUSE CVE CVE-2021-38011 page https://www.suse.com/security/cve/CVE-2021-38012/ SUSE CVE CVE-2021-38012 page https://www.suse.com/security/cve/CVE-2021-38013/ SUSE CVE CVE-2021-38013 page https://www.suse.com/security/cve/CVE-2021-38014/ SUSE CVE CVE-2021-38014 page https://www.suse.com/security/cve/CVE-2021-38015/ SUSE CVE CVE-2021-38015 page https://www.suse.com/security/cve/CVE-2021-38016/ SUSE CVE CVE-2021-38016 page https://www.suse.com/security/cve/CVE-2021-38017/ SUSE CVE CVE-2021-38017 page https://www.suse.com/security/cve/CVE-2021-38019/ SUSE CVE CVE-2021-38019 page https://www.suse.com/security/cve/CVE-2021-38020/ SUSE CVE CVE-2021-38020 page https://www.suse.com/security/cve/CVE-2021-38021/ SUSE CVE CVE-2021-38021 page https://www.suse.com/security/cve/CVE-2021-38022/ SUSE CVE CVE-2021-38022 page https://www.suse.com/security/cve/CVE-2021-4052/ SUSE CVE CVE-2021-4052 page https://www.suse.com/security/cve/CVE-2021-4053/ SUSE CVE CVE-2021-4053 page https://www.suse.com/security/cve/CVE-2021-4054/ SUSE CVE CVE-2021-4054 page https://www.suse.com/security/cve/CVE-2021-4055/ SUSE CVE CVE-2021-4055 page https://www.suse.com/security/cve/CVE-2021-4056/ SUSE CVE CVE-2021-4056 page https://www.suse.com/security/cve/CVE-2021-4057/ SUSE CVE CVE-2021-4057 page https://www.suse.com/security/cve/CVE-2021-4058/ SUSE CVE CVE-2021-4058 page https://www.suse.com/security/cve/CVE-2021-4059/ SUSE CVE CVE-2021-4059 page https://www.suse.com/security/cve/CVE-2021-4061/ SUSE CVE CVE-2021-4061 page https://www.suse.com/security/cve/CVE-2021-4062/ SUSE CVE CVE-2021-4062 page https://www.suse.com/security/cve/CVE-2021-4063/ SUSE CVE CVE-2021-4063 page https://www.suse.com/security/cve/CVE-2021-4064/ SUSE CVE CVE-2021-4064 page https://www.suse.com/security/cve/CVE-2021-4065/ SUSE CVE CVE-2021-4065 page https://www.suse.com/security/cve/CVE-2021-4066/ SUSE CVE CVE-2021-4066 page https://www.suse.com/security/cve/CVE-2021-4067/ SUSE CVE CVE-2021-4067 page https://www.suse.com/security/cve/CVE-2021-4068/ SUSE CVE CVE-2021-4068 page https://www.suse.com/security/cve/CVE-2021-4078/ SUSE CVE CVE-2021-4078 page https://www.suse.com/security/cve/CVE-2021-4079/ SUSE CVE CVE-2021-4079 page https://www.suse.com/security/cve/CVE-2021-4098/ SUSE CVE CVE-2021-4098 page https://www.suse.com/security/cve/CVE-2021-4099/ SUSE CVE CVE-2021-4099 page https://www.suse.com/security/cve/CVE-2021-4100/ SUSE CVE CVE-2021-4100 page https://www.suse.com/security/cve/CVE-2021-4101/ SUSE CVE CVE-2021-4101 page https://www.suse.com/security/cve/CVE-2021-4102/ SUSE CVE CVE-2021-4102 page https://www.suse.com/security/cve/CVE-2022-0096/ SUSE CVE CVE-2022-0096 page https://www.suse.com/security/cve/CVE-2022-0097/ SUSE CVE CVE-2022-0097 page https://www.suse.com/security/cve/CVE-2022-0098/ SUSE CVE CVE-2022-0098 page https://www.suse.com/security/cve/CVE-2022-0099/ SUSE CVE CVE-2022-0099 page https://www.suse.com/security/cve/CVE-2022-0100/ SUSE CVE CVE-2022-0100 page https://www.suse.com/security/cve/CVE-2022-0101/ SUSE CVE CVE-2022-0101 page https://www.suse.com/security/cve/CVE-2022-0102/ SUSE CVE CVE-2022-0102 page https://www.suse.com/security/cve/CVE-2022-0103/ SUSE CVE CVE-2022-0103 page https://www.suse.com/security/cve/CVE-2022-0104/ SUSE CVE CVE-2022-0104 page https://www.suse.com/security/cve/CVE-2022-0105/ SUSE CVE CVE-2022-0105 page https://www.suse.com/security/cve/CVE-2022-0106/ SUSE CVE CVE-2022-0106 page https://www.suse.com/security/cve/CVE-2022-0107/ SUSE CVE CVE-2022-0107 page https://www.suse.com/security/cve/CVE-2022-0108/ SUSE CVE CVE-2022-0108 page https://www.suse.com/security/cve/CVE-2022-0109/ SUSE CVE CVE-2022-0109 page https://www.suse.com/security/cve/CVE-2022-0110/ SUSE CVE CVE-2022-0110 page https://www.suse.com/security/cve/CVE-2022-0111/ SUSE CVE CVE-2022-0111 page https://www.suse.com/security/cve/CVE-2022-0112/ SUSE CVE CVE-2022-0112 page https://www.suse.com/security/cve/CVE-2022-0113/ SUSE CVE CVE-2022-0113 page https://www.suse.com/security/cve/CVE-2022-0114/ SUSE CVE CVE-2022-0114 page https://www.suse.com/security/cve/CVE-2022-0115/ SUSE CVE CVE-2022-0115 page https://www.suse.com/security/cve/CVE-2022-0116/ SUSE CVE CVE-2022-0116 page https://www.suse.com/security/cve/CVE-2022-0117/ SUSE CVE CVE-2022-0117 page https://www.suse.com/security/cve/CVE-2022-0118/ SUSE CVE CVE-2022-0118 page https://www.suse.com/security/cve/CVE-2022-0120/ SUSE CVE CVE-2022-0120 page https://www.suse.com/security/cve/CVE-2022-0289/ SUSE CVE CVE-2022-0289 page https://www.suse.com/security/cve/CVE-2022-0290/ SUSE CVE CVE-2022-0290 page https://www.suse.com/security/cve/CVE-2022-0291/ SUSE CVE CVE-2022-0291 page https://www.suse.com/security/cve/CVE-2022-0292/ SUSE CVE CVE-2022-0292 page https://www.suse.com/security/cve/CVE-2022-0293/ SUSE CVE CVE-2022-0293 page https://www.suse.com/security/cve/CVE-2022-0294/ SUSE CVE CVE-2022-0294 page https://www.suse.com/security/cve/CVE-2022-0295/ SUSE CVE CVE-2022-0295 page https://www.suse.com/security/cve/CVE-2022-0296/ SUSE CVE CVE-2022-0296 page https://www.suse.com/security/cve/CVE-2022-0297/ SUSE CVE CVE-2022-0297 page https://www.suse.com/security/cve/CVE-2022-0298/ SUSE CVE CVE-2022-0298 page https://www.suse.com/security/cve/CVE-2022-0300/ SUSE CVE CVE-2022-0300 page https://www.suse.com/security/cve/CVE-2022-0301/ SUSE CVE CVE-2022-0301 page https://www.suse.com/security/cve/CVE-2022-0302/ SUSE CVE CVE-2022-0302 page https://www.suse.com/security/cve/CVE-2022-0304/ SUSE CVE CVE-2022-0304 page https://www.suse.com/security/cve/CVE-2022-0305/ SUSE CVE CVE-2022-0305 page https://www.suse.com/security/cve/CVE-2022-0306/ SUSE CVE CVE-2022-0306 page https://www.suse.com/security/cve/CVE-2022-0307/ SUSE CVE CVE-2022-0307 page https://www.suse.com/security/cve/CVE-2022-0308/ SUSE CVE CVE-2022-0308 page https://www.suse.com/security/cve/CVE-2022-0309/ SUSE CVE CVE-2022-0309 page https://www.suse.com/security/cve/CVE-2022-0310/ SUSE CVE CVE-2022-0310 page https://www.suse.com/security/cve/CVE-2022-0311/ SUSE CVE CVE-2022-0311 page openSUSE Leap 15.3 NonFree opera-83.0.4254.27-lp153.2.33.1 opera-83.0.4254.27-lp153.2.33.1 as a component of openSUSE Leap 15.3 NonFree Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows. CVE-2021-37980 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-37980.html CVE-2021-37980 https://bugzilla.suse.com/1191463 SUSE Bug 1191463 Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page. CVE-2021-37997 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-37997.html CVE-2021-37997 https://bugzilla.suse.com/1192184 SUSE Bug 1192184 Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-37998 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-37998.html CVE-2021-37998 https://bugzilla.suse.com/1192184 SUSE Bug 1192184 Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page. CVE-2021-37999 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-37999.html CVE-2021-37999 https://bugzilla.suse.com/1192184 SUSE Bug 1192184 Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38001 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38001.html CVE-2021-38001 https://bugzilla.suse.com/1192184 SUSE Bug 1192184 Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CVE-2021-38002 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38002.html CVE-2021-38002 https://bugzilla.suse.com/1192184 SUSE Bug 1192184 Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38003 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38003.html CVE-2021-38003 https://bugzilla.suse.com/1192184 SUSE Bug 1192184 Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2021-38004 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38004.html CVE-2021-38004 Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38005 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38005.html CVE-2021-38005 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38006 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38006.html CVE-2021-38006 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38007 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38007.html CVE-2021-38007 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38008 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38008.html CVE-2021-38008 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2021-38009 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38009.html CVE-2021-38009 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. CVE-2021-38010 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38010.html CVE-2021-38010 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38011 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38011.html CVE-2021-38011 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38012 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38012.html CVE-2021-38012 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page. CVE-2021-38013 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38013.html CVE-2021-38013 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-38014 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38014.html CVE-2021-38014 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. CVE-2021-38015 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38015.html CVE-2021-38015 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page. CVE-2021-38016 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38016.html CVE-2021-38016 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. CVE-2021-38017 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38017.html CVE-2021-38017 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2021-38019 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38019.html CVE-2021-38019 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. CVE-2021-38020 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38020.html CVE-2021-38020 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. CVE-2021-38021 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38021.html CVE-2021-38021 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2021-38022 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-38022.html CVE-2021-38022 https://bugzilla.suse.com/1192734 SUSE Bug 1192734 Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. CVE-2021-4052 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4052.html CVE-2021-4052 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4053 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4053.html CVE-2021-4053 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page. CVE-2021-4054 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4054.html CVE-2021-4054 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. CVE-2021-4055 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4055.html CVE-2021-4055 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4056 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4056.html CVE-2021-4056 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4057 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4057.html CVE-2021-4057 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4058 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4058.html CVE-2021-4058 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2021-4059 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4059.html CVE-2021-4059 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4061 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4061.html CVE-2021-4061 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4062 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4062.html CVE-2021-4062 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4063 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4063.html CVE-2021-4063 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4064 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4064.html CVE-2021-4064 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4065 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4065.html CVE-2021-4065 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4066 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4066.html CVE-2021-4066 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4067 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4067.html CVE-2021-4067 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2021-4068 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4068.html CVE-2021-4068 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4078 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4078.html CVE-2021-4078 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets. CVE-2021-4079 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4079.html CVE-2021-4079 https://bugzilla.suse.com/1193519 SUSE Bug 1193519 Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. CVE-2021-4098 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4098.html CVE-2021-4098 https://bugzilla.suse.com/1193713 SUSE Bug 1193713 Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4099 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4099.html CVE-2021-4099 https://bugzilla.suse.com/1193713 SUSE Bug 1193713 Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4100 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4100.html CVE-2021-4100 https://bugzilla.suse.com/1193713 SUSE Bug 1193713 Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4101 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4101.html CVE-2021-4101 https://bugzilla.suse.com/1193713 SUSE Bug 1193713 Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-4102 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2021-4102.html CVE-2021-4102 https://bugzilla.suse.com/1193713 SUSE Bug 1193713 Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0096 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0096.html CVE-2022-0096 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page. CVE-2022-0097 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0097.html CVE-2022-0097 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures. CVE-2022-0098 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0098.html CVE-2022-0098 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture. CVE-2022-0099 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0099.html CVE-2022-0099 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0100 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0100.html CVE-2022-0100 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture. CVE-2022-0101 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0101.html CVE-2022-0101 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0102 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0102.html CVE-2022-0102 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0103 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0103.html CVE-2022-0103 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0104 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0104.html CVE-2022-0104 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0105 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0105.html CVE-2022-0105 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0106 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0106.html CVE-2022-0106 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0107 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0107.html CVE-2022-0107 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2022-0108 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0108.html CVE-2022-0108 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1210731 SUSE Bug 1210731 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. CVE-2022-0109 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0109.html CVE-2022-0109 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. CVE-2022-0110 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0110.html CVE-2022-0110 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page. CVE-2022-0111 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0111.html CVE-2022-0111 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL. CVE-2022-0112 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0112.html CVE-2022-0112 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2022-0113 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0113.html CVE-2022-0113 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver. CVE-2022-0114 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0114.html CVE-2022-0114 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. CVE-2022-0115 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0115.html CVE-2022-0115 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. CVE-2022-0116 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0116.html CVE-2022-0116 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CVE-2022-0117 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0117.html CVE-2022-0117 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. CVE-2022-0118 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0118.html CVE-2022-0118 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website. CVE-2022-0120 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0120.html CVE-2022-0120 https://bugzilla.suse.com/1194331 SUSE Bug 1194331 https://bugzilla.suse.com/1213802 SUSE Bug 1213802 Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0289 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0289.html CVE-2022-0289 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CVE-2022-0290 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0290.html CVE-2022-0290 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. CVE-2022-0291 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0291.html CVE-2022-0291 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. CVE-2022-0292 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0292.html CVE-2022-0292 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0293 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0293.html CVE-2022-0293 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. CVE-2022-0294 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0294.html CVE-2022-0294 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0295 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0295.html CVE-2022-0295 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0296 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0296.html CVE-2022-0296 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0297 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0297.html CVE-2022-0297 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0298 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0298.html CVE-2022-0298 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0300 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0300.html CVE-2022-0300 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0301 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0301.html CVE-2022-0301 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0302 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0302.html CVE-2022-0302 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0304 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0304.html CVE-2022-0304 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. CVE-2022-0305 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0305.html CVE-2022-0305 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0306 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0306.html CVE-2022-0306 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0307 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0307.html CVE-2022-0307 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0308 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0308.html CVE-2022-0308 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. CVE-2022-0309 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0309.html CVE-2022-0309 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions. CVE-2022-0310 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0310.html CVE-2022-0310 https://bugzilla.suse.com/1194919 SUSE Bug 1194919 Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. CVE-2022-0311 openSUSE Leap 15.3 NonFree:opera-83.0.4254.27-lp153.2.33.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JVEGWNKSSGZPVVLVJKNT5ZEY54Z5RLV4/ https://www.suse.com/security/cve/CVE-2022-0311.html CVE-2022-0311 https://bugzilla.suse.com/1194919 SUSE Bug 1194919