Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d6fc6be6c advisory.

     Update to 156.0.8078.73, include 52 security fixes

      * CVE-2026-118304: Improper input validation in SVG
      * CVE-2026-118305: Memory corruption in Turbolev
      * CVE-2026-118306: Memory corruption in FileSystem
      * CVE-2026-118307: Use after free in Paint
      * CVE-2026-118308: Use after free in SVG
      * CVE-2026-118309: Improper input validation in UI
      * CVE-2026-118310: Improper input validation in Views
      * CVE-2026-118311: Memory corruption in Media
      * CVE-2026-118312: Memory corruption in Paint
      * CVE-2026-118313: Use after free in Video
      * CVE-2026-118314: Improper input validation in UI
      * CVE-2026-118315: Improper input validation in SVG
      * CVE-2026-118316: Improper input validation in V8
      * CVE-2026-118317: Memory corruption in HTML
      * CVE-2026-118318: Improper access control in V8
      * CVE-2026-118319: Memory corruption in Skia
      * CVE-2026-118320: Memory corruption in V8
      * CVE-2026-118321: Improper input validation in Core
      * CVE-2026-118322: Memory corruption in ANGLE
      * CVE-2026-118327: Memory corruption in Media
      * CVE-2026-118328: Improper input validation in WebRTC
      * CVE-2026-118329: Improper input validation in ANGLE
      * CVE-2026-118330: Use after free in Browser
      * CVE-2026-118331: Improper input validation in FileAPI
      * CVE-2026-118332: Improper input validation in Compositing
      * CVE-2026-118333: Missing authorization in Video
      * CVE-2026-118334: Use after free in ImageCapture
      * CVE-2026-118335: Improper input validation in Metrics
      * CVE-2026-118336: Improper input validation in Headless
      * CVE-2026-118337: Improper access control in Forms
      * CVE-2026-118338: Use after free in Animation
      * CVE-2026-118339: Use after free in Animation
      * CVE-2026-118340: Memory corruption in Skia
      * CVE-2026-118341: Use after free in Modularization
      * CVE-2026-118342: Out of bounds write in Editing
      * CVE-2026-118343: Improper input validation in ReadingList
      * CVE-2026-118344: Use after free in Layout
      * CVE-2026-118345: Use after free in PDFium
      * CVE-2026-118346: Use after free in Compositing
      * CVE-2026-118347: Use after free in FileSystem
      * CVE-2026-118348: Improper input validation in Skia
      * CVE-2026-118349: Memory corruption in Payments
      * CVE-2026-118350: Use after free in Turbolev
      * CVE-2026-118351: Memory corruption in Skia
      * CVE-2026-118352: Memory corruption in Cache
      * CVE-2026-118353: Use after free in Paint
      * CVE-2026-118354: Improper input validation in Skia
      * CVE-2026-118355: Improper input validation in Command
      * CVE-2026-118356: Use after free in WTF
      * CVE-2026-118357: Use after free in FileSystem
      * CVE-2026-118358: Memory corruption in WebAudio
      * CVE-2026-118359: Memory corruption in V8


    ----

    Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344


    ----

    Update to 155.0.8059.84, includes 10 security fixes

      * CVE-2026-110913: Memory corruption in DOM
      * CVE-2026-110914: Memory corruption in Workers
      * CVE-2026-110915: Use after free in Compositing
      * CVE-2026-110916: Improper input validation in Desktop
      * CVE-2026-110917: Memory corruption in SVG
      * CVE-2026-110918: Memory corruption in Core
      * CVE-2026-110919: Use after free in V8
      * CVE-2026-110920: Memory corruption in V8
      * CVE-2026-110921: Use after free in V8
      * CVE-2026-110922: Use after free in Prerender


    ----

    Update to 155.0.8059.39, includes 37 security fixes

      * CVE-2026-110136: Use after free in PDF
      * CVE-2026-110137: Use after free in WebRTC
      * CVE-2026-110138: Use after free in ShapeDetection
      * CVE-2026-110139: Use after free in Media
      * CVE-2026-110140: Type confusion in V8
      * CVE-2026-110141: Observable discrepancy in Media
      * CVE-2026-110142: Use after free in FileSystem
      * CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
      * CVE-2026-110144: Incorrect authorization in Mojo
      * CVE-2026-110145: Use after free in Passwords
      * CVE-2026-110146: Information leak in Passwords
      * CVE-2026-110147: Use after free in PDF
      * CVE-2026-110148: Use after free in SVG
      * CVE-2026-110149: Use after free in Browser
      * CVE-2026-110150: Privilege elevation in Installer
      * CVE-2026-110151: Use after free in Media
      * CVE-2026-110152: Buffer overflow in ANGLE
      * CVE-2026-110153: Use after free in Media
      * CVE-2026-110154: Use after free in Canvas
      * CVE-2026-110155: Buffer overflow in PDFium
      * CVE-2026-110156: Incorrect reference resolution in Extensions
      * CVE-2026-110157: Use after free in SVG
      * CVE-2026-110158: Use after free in Passwords
      * CVE-2026-110159: Incorrect authorization in Updater
      * CVE-2026-110160: Missing authorization in ReadingMode
      * CVE-2026-110161: Use after free in Network
      * CVE-2026-110162: Use after free in Desktop
      * CVE-2026-110163: Use after free in DOM
      * CVE-2026-110164: Use after free in DOM
      * CVE-2026-110165: Use after free in Core
      * CVE-2026-110166: Buffer overflow in Animation
      * CVE-2026-110167: Use after free in Media
      * CVE-2026-110168: Use after free in V8
      * CVE-2026-110169: Use after free in V8
      * CVE-2026-110170: Use after free in Bindings
      * CVE-2026-110171: Use after free in Media
      * CVE-2026-110172: Use after free in Media

    ----

    Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e61285733f advisory.

    Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to
    potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security
    severity: Medium) (CVE-2026-110916)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ccc7071380 advisory.

    Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4853 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4853-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     October 23, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : chromium     Version        : 156.0.8078.47-1~deb12u1     CVE ID         : CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916                      CVE-2026-110917 CVE-2026-110918 CVE-2026-110919 CVE-2026-110920                      CVE-2026-110921 CVE-2026-110922 CVE-2026-112992 CVE-2026-112993                      CVE-2026-112994 CVE-2026-112995 CVE-2026-112996 CVE-2026-112997                      CVE-2026-112998 CVE-2026-112999 CVE-2026-113000 CVE-2026-113001                      CVE-2026-113002 CVE-2026-113003 CVE-2026-113004 CVE-2026-113005                      CVE-2026-113006 CVE-2026-113007 CVE-2026-113008 CVE-2026-113009                      CVE-2026-113010 CVE-2026-113011 CVE-2026-113012 CVE-2026-113013                      CVE-2026-113014 CVE-2026-113015 CVE-2026-113016 CVE-2026-113017                      CVE-2026-113018 CVE-2026-113019 CVE-2026-113020 CVE-2026-113021                      CVE-2026-113022 CVE-2026-113023 CVE-2026-113024 CVE-2026-113025                      CVE-2026-113026 CVE-2026-113027 CVE-2026-113028 CVE-2026-113029                      CVE-2026-113030 CVE-2026-113031 CVE-2026-113032 CVE-2026-113033                      CVE-2026-113034 CVE-2026-113035 CVE-2026-113036 CVE-2026-113037                      CVE-2026-113038 CVE-2026-113039 CVE-2026-113040 CVE-2026-113041                      CVE-2026-113042 CVE-2026-113043 CVE-2026-113044 CVE-2026-113045                      CVE-2026-113046 CVE-2026-113047 CVE-2026-113048 CVE-2026-113049                      CVE-2026-113050 CVE-2026-113051 CVE-2026-113052 CVE-2026-113053                      CVE-2026-113054 CVE-2026-113055 CVE-2026-113056 CVE-2026-113057                      CVE-2026-113058 CVE-2026-113059 CVE-2026-113060 CVE-2026-113061                      CVE-2026-113062 CVE-2026-113063 CVE-2026-113064 CVE-2026-113065                      CVE-2026-113066 CVE-2026-113067 CVE-2026-113068 CVE-2026-113069                      CVE-2026-113070 CVE-2026-113071 CVE-2026-113072 CVE-2026-113073                      CVE-2026-113074 CVE-2026-113075 CVE-2026-113076 CVE-2026-113077                      CVE-2026-113078 CVE-2026-113079 CVE-2026-113080 CVE-2026-113081                      CVE-2026-113082 CVE-2026-113083 CVE-2026-113084 CVE-2026-113085                      CVE-2026-113086 CVE-2026-113087 CVE-2026-113088 CVE-2026-113089                      CVE-2026-113090 CVE-2026-113091 CVE-2026-113092 CVE-2026-113093                      CVE-2026-113094 CVE-2026-113095 CVE-2026-113096 CVE-2026-113097                      CVE-2026-113098 CVE-2026-113099 CVE-2026-113100 CVE-2026-113101                      CVE-2026-113102 CVE-2026-113103 CVE-2026-113104 CVE-2026-113105                      CVE-2026-113106 CVE-2026-113107 CVE-2026-113108 CVE-2026-113109                      CVE-2026-113110 CVE-2026-113111 CVE-2026-113112 CVE-2026-113113                      CVE-2026-113114 CVE-2026-113115 CVE-2026-113116 CVE-2026-113117                      CVE-2026-113118 CVE-2026-113119 CVE-2026-113120 CVE-2026-113121                      CVE-2026-113122 CVE-2026-113123 CVE-2026-113124 CVE-2026-113125                      CVE-2026-113126 CVE-2026-113127 CVE-2026-113128 CVE-2026-113129                      CVE-2026-113130 CVE-2026-113131 CVE-2026-113132 CVE-2026-113133                      CVE-2026-113134 CVE-2026-113135 CVE-2026-113136 CVE-2026-113137                      CVE-2026-113138 CVE-2026-113139 CVE-2026-113140 CVE-2026-113141                      CVE-2026-113142 CVE-2026-113143 CVE-2026-113144 CVE-2026-113145                      CVE-2026-113146 CVE-2026-113147 CVE-2026-113148 CVE-2026-113149                      CVE-2026-113150 CVE-2026-113151 CVE-2026-113152 CVE-2026-113153                      CVE-2026-113154 CVE-2026-113155 CVE-2026-113156 CVE-2026-113157                      CVE-2026-113158 CVE-2026-113159 CVE-2026-113160 CVE-2026-113161                      CVE-2026-113162 CVE-2026-113163 CVE-2026-113164 CVE-2026-113165                      CVE-2026-113166 CVE-2026-113167 CVE-2026-113168 CVE-2026-113169                      CVE-2026-113170 CVE-2026-113171 CVE-2026-113172 CVE-2026-113173                      CVE-2026-113174 CVE-2026-113175 CVE-2026-113176 CVE-2026-113177                      CVE-2026-113178 CVE-2026-113179 CVE-2026-113180 CVE-2026-113181                      CVE-2026-113182 CVE-2026-113183 CVE-2026-113184 CVE-2026-113185                      CVE-2026-113186 CVE-2026-113187 CVE-2026-113188 CVE-2026-113189                      CVE-2026-113190 CVE-2026-113191 CVE-2026-113192 CVE-2026-113193                      CVE-2026-113194 CVE-2026-113195 CVE-2026-113196 CVE-2026-113197                      CVE-2026-113198 CVE-2026-113199 CVE-2026-113200 CVE-2026-113201                      CVE-2026-113202 CVE-2026-113203 CVE-2026-113204 CVE-2026-113205                      CVE-2026-113206 CVE-2026-113207 CVE-2026-113208 CVE-2026-113209                      CVE-2026-113210 CVE-2026-113211 CVE-2026-113212 CVE-2026-113213                      CVE-2026-113214 CVE-2026-113215 CVE-2026-113216 CVE-2026-113217                      CVE-2026-113218 CVE-2026-113219 CVE-2026-113220 CVE-2026-113221                      CVE-2026-113222 CVE-2026-113223 CVE-2026-113224 CVE-2026-113225                      CVE-2026-113226 CVE-2026-113227 CVE-2026-113228 CVE-2026-113229                      CVE-2026-113230 CVE-2026-113231 CVE-2026-113232 CVE-2026-113233                      CVE-2026-113234 CVE-2026-113235 CVE-2026-113236 CVE-2026-113237                      CVE-2026-113238 CVE-2026-113239 CVE-2026-113240 CVE-2026-113241                      CVE-2026-113242 CVE-2026-113243 CVE-2026-113244 CVE-2026-113245                      CVE-2026-113246 CVE-2026-113247 CVE-2026-113248 CVE-2026-113249                      CVE-2026-113250 CVE-2026-113251 CVE-2026-113252 CVE-2026-113253                      CVE-2026-113254 CVE-2026-113255 CVE-2026-113256 CVE-2026-113257                      CVE-2026-113258 CVE-2026-113259 CVE-2026-113260 CVE-2026-113261                      CVE-2026-113262 CVE-2026-113263 CVE-2026-113264 CVE-2026-113265                      CVE-2026-113266 CVE-2026-113267 CVE-2026-113268 CVE-2026-113269                      CVE-2026-113270 CVE-2026-113271 CVE-2026-113272 CVE-2026-113273                      CVE-2026-113274 CVE-2026-113275 CVE-2026-113276 CVE-2026-113277                      CVE-2026-113278 CVE-2026-113279 CVE-2026-113280 CVE-2026-113281                      CVE-2026-113282 CVE-2026-113283 CVE-2026-113284 CVE-2026-113285                      CVE-2026-113286 CVE-2026-113287 CVE-2026-113288 CVE-2026-113289                      CVE-2026-113290 CVE-2026-113291 CVE-2026-113292 CVE-2026-113293                      CVE-2026-113294 CVE-2026-113295 CVE-2026-113296 CVE-2026-113297                      CVE-2026-113298 CVE-2026-113299 CVE-2026-113300 CVE-2026-113301                      CVE-2026-113302 CVE-2026-113303 CVE-2026-113304 CVE-2026-113305                      CVE-2026-113306 CVE-2026-113307 CVE-2026-113308 CVE-2026-113309                      CVE-2026-113310 CVE-2026-113311 CVE-2026-113312 CVE-2026-113313                      CVE-2026-113314 CVE-2026-113315 CVE-2026-113316 CVE-2026-113317                      CVE-2026-113318 CVE-2026-113319 CVE-2026-113320 CVE-2026-113321                      CVE-2026-113322 CVE-2026-113323 CVE-2026-113324 CVE-2026-113325                      CVE-2026-113326 CVE-2026-113327 CVE-2026-113328 CVE-2026-113329                      CVE-2026-113330 CVE-2026-113331 CVE-2026-113332 CVE-2026-113333                      CVE-2026-113334 CVE-2026-113335 CVE-2026-113336 CVE-2026-113337                      CVE-2026-113338 CVE-2026-113339 CVE-2026-113340 CVE-2026-113341                      CVE-2026-113342 CVE-2026-113343 CVE-2026-113344

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For Debian 12 bookworm, these problems have been fixed in version     156.0.8078.47-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 156.0.4314.42. It is, therefore, affected by multiple vulnerabilities as referenced in the October 26, 2026 advisory.

  - Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-113016, CVE-2026-113231, CVE-2026-113264)

  - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-102299, CVE-2026-102321, CVE-2026-102323, CVE-2026-102326, CVE-2026-102328)

  - Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to     obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-102300)

  - Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had     compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted     HTML page. (Chromium security severity: High) (CVE-2026-102301)

  - Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-102302)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6577 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6577-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     October 22, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916                      CVE-2026-110917 CVE-2026-110918 CVE-2026-110919 CVE-2026-110920                      CVE-2026-110921 CVE-2026-110922 CVE-2026-112992 CVE-2026-112993                      CVE-2026-112994 CVE-2026-112995 CVE-2026-112996 CVE-2026-112997                      CVE-2026-112998 CVE-2026-112999 CVE-2026-113000 CVE-2026-113001                      CVE-2026-113002 CVE-2026-113003 CVE-2026-113004 CVE-2026-113005                      CVE-2026-113006 CVE-2026-113007 CVE-2026-113008 CVE-2026-113009                      CVE-2026-113010 CVE-2026-113011 CVE-2026-113012 CVE-2026-113013                      CVE-2026-113014 CVE-2026-113015 CVE-2026-113016 CVE-2026-113017                      CVE-2026-113018 CVE-2026-113019 CVE-2026-113020 CVE-2026-113021                      CVE-2026-113022 CVE-2026-113023 CVE-2026-113024 CVE-2026-113025                      CVE-2026-113026 CVE-2026-113027 CVE-2026-113028 CVE-2026-113029                      CVE-2026-113030 CVE-2026-113031 CVE-2026-113032 CVE-2026-113033                      CVE-2026-113034 CVE-2026-113035 CVE-2026-113036 CVE-2026-113037                      CVE-2026-113038 CVE-2026-113039 CVE-2026-113040 CVE-2026-113041                      CVE-2026-113042 CVE-2026-113043 CVE-2026-113044 CVE-2026-113045                      CVE-2026-113046 CVE-2026-113047 CVE-2026-113048 CVE-2026-113049                      CVE-2026-113050 CVE-2026-113051 CVE-2026-113052 CVE-2026-113053                      CVE-2026-113054 CVE-2026-113055 CVE-2026-113056 CVE-2026-113057                      CVE-2026-113058 CVE-2026-113059 CVE-2026-113060 CVE-2026-113061                      CVE-2026-113062 CVE-2026-113063 CVE-2026-113064 CVE-2026-113065                      CVE-2026-113066 CVE-2026-113067 CVE-2026-113068 CVE-2026-113069                      CVE-2026-113070 CVE-2026-113071 CVE-2026-113072 CVE-2026-113073                      CVE-2026-113074 CVE-2026-113075 CVE-2026-113076 CVE-2026-113077                      CVE-2026-113078 CVE-2026-113079 CVE-2026-113080 CVE-2026-113081                      CVE-2026-113082 CVE-2026-113083 CVE-2026-113084 CVE-2026-113085                      CVE-2026-113086 CVE-2026-113087 CVE-2026-113088 CVE-2026-113089                      CVE-2026-113090 CVE-2026-113091 CVE-2026-113092 CVE-2026-113093                      CVE-2026-113094 CVE-2026-113095 CVE-2026-113096 CVE-2026-113097                      CVE-2026-113098 CVE-2026-113099 CVE-2026-113100 CVE-2026-113101                      CVE-2026-113102 CVE-2026-113103 CVE-2026-113104 CVE-2026-113105                      CVE-2026-113106 CVE-2026-113107 CVE-2026-113108 CVE-2026-113109                      CVE-2026-113110 CVE-2026-113111 CVE-2026-113112 CVE-2026-113113                      CVE-2026-113114 CVE-2026-113115 CVE-2026-113116 CVE-2026-113117                      CVE-2026-113118 CVE-2026-113119 CVE-2026-113120 CVE-2026-113121                      CVE-2026-113122 CVE-2026-113123 CVE-2026-113124 CVE-2026-113125                      CVE-2026-113126 CVE-2026-113127 CVE-2026-113128 CVE-2026-113129                      CVE-2026-113130 CVE-2026-113131 CVE-2026-113132 CVE-2026-113133                      CVE-2026-113134 CVE-2026-113135 CVE-2026-113136 CVE-2026-113137                      CVE-2026-113138 CVE-2026-113139 CVE-2026-113140 CVE-2026-113141                      CVE-2026-113142 CVE-2026-113143 CVE-2026-113144 CVE-2026-113145                      CVE-2026-113146 CVE-2026-113147 CVE-2026-113148 CVE-2026-113149                      CVE-2026-113150 CVE-2026-113151 CVE-2026-113152 CVE-2026-113153                      CVE-2026-113154 CVE-2026-113155 CVE-2026-113156 CVE-2026-113157                      CVE-2026-113158 CVE-2026-113159 CVE-2026-113160 CVE-2026-113161                      CVE-2026-113162 CVE-2026-113163 CVE-2026-113164 CVE-2026-113165                      CVE-2026-113166 CVE-2026-113167 CVE-2026-113168 CVE-2026-113169                      CVE-2026-113170 CVE-2026-113171 CVE-2026-113172 CVE-2026-113173                      CVE-2026-113174 CVE-2026-113175 CVE-2026-113176 CVE-2026-113177                      CVE-2026-113178 CVE-2026-113179 CVE-2026-113180 CVE-2026-113181                      CVE-2026-113182 CVE-2026-113183 CVE-2026-113184 CVE-2026-113185                      CVE-2026-113186 CVE-2026-113187 CVE-2026-113188 CVE-2026-113189                      CVE-2026-113190 CVE-2026-113191 CVE-2026-113192 CVE-2026-113193                      CVE-2026-113194 CVE-2026-113195 CVE-2026-113196 CVE-2026-113197                      CVE-2026-113198 CVE-2026-113199 CVE-2026-113200 CVE-2026-113201                      CVE-2026-113202 CVE-2026-113203 CVE-2026-113204 CVE-2026-113205                      CVE-2026-113206 CVE-2026-113207 CVE-2026-113208 CVE-2026-113209                      CVE-2026-113210 CVE-2026-113211 CVE-2026-113212 CVE-2026-113213                      CVE-2026-113214 CVE-2026-113215 CVE-2026-113216 CVE-2026-113217                      CVE-2026-113218 CVE-2026-113219 CVE-2026-113220 CVE-2026-113221                      CVE-2026-113222 CVE-2026-113223 CVE-2026-113224 CVE-2026-113225                      CVE-2026-113226 CVE-2026-113227 CVE-2026-113228 CVE-2026-113229                      CVE-2026-113230 CVE-2026-113231 CVE-2026-113232 CVE-2026-113233                      CVE-2026-113234 CVE-2026-113235 CVE-2026-113236 CVE-2026-113237                      CVE-2026-113238 CVE-2026-113239 CVE-2026-113240 CVE-2026-113241                      CVE-2026-113242 CVE-2026-113243 CVE-2026-113244 CVE-2026-113245                      CVE-2026-113246 CVE-2026-113247 CVE-2026-113248 CVE-2026-113249                      CVE-2026-113250 CVE-2026-113251 CVE-2026-113252 CVE-2026-113253                      CVE-2026-113254 CVE-2026-113255 CVE-2026-113256 CVE-2026-113257                      CVE-2026-113258 CVE-2026-113259 CVE-2026-113260 CVE-2026-113261                      CVE-2026-113262 CVE-2026-113263 CVE-2026-113264 CVE-2026-113265                      CVE-2026-113266 CVE-2026-113267 CVE-2026-113268 CVE-2026-113269                      CVE-2026-113270 CVE-2026-113271 CVE-2026-113272 CVE-2026-113273                      CVE-2026-113274 CVE-2026-113275 CVE-2026-113276 CVE-2026-113277                      CVE-2026-113278 CVE-2026-113279 CVE-2026-113280 CVE-2026-113281                      CVE-2026-113282 CVE-2026-113283 CVE-2026-113284 CVE-2026-113285                      CVE-2026-113286 CVE-2026-113287 CVE-2026-113288 CVE-2026-113289                      CVE-2026-113290 CVE-2026-113291 CVE-2026-113292 CVE-2026-113293                      CVE-2026-113294 CVE-2026-113295 CVE-2026-113296 CVE-2026-113297                      CVE-2026-113298 CVE-2026-113299 CVE-2026-113300 CVE-2026-113301                      CVE-2026-113302 CVE-2026-113303 CVE-2026-113304 CVE-2026-113305                      CVE-2026-113306 CVE-2026-113307 CVE-2026-113308 CVE-2026-113309                      CVE-2026-113310 CVE-2026-113311 CVE-2026-113312 CVE-2026-113313                      CVE-2026-113314 CVE-2026-113315 CVE-2026-113316 CVE-2026-113317                      CVE-2026-113318 CVE-2026-113319 CVE-2026-113320 CVE-2026-113321                      CVE-2026-113322 CVE-2026-113323 CVE-2026-113324 CVE-2026-113325                      CVE-2026-113326 CVE-2026-113327 CVE-2026-113328 CVE-2026-113329                      CVE-2026-113330 CVE-2026-113331 CVE-2026-113332 CVE-2026-113333                      CVE-2026-113334 CVE-2026-113335 CVE-2026-113336 CVE-2026-113337                      CVE-2026-113338 CVE-2026-113339 CVE-2026-113340 CVE-2026-113341                      CVE-2026-113342 CVE-2026-113343 CVE-2026-113344

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 156.0.8078.47-1~deb13u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5a871d2ca7 advisory.

    Update to 155.0.8059.84, includes 10 security fixes

      * CVE-2026-110913: Memory corruption in DOM
      * CVE-2026-110914: Memory corruption in Workers
      * CVE-2026-110915: Use after free in Compositing
      * CVE-2026-110916: Improper input validation in Desktop
      * CVE-2026-110917: Memory corruption in SVG
      * CVE-2026-110918: Memory corruption in Core
      * CVE-2026-110919: Use after free in V8
      * CVE-2026-110920: Memory corruption in V8
      * CVE-2026-110921: Use after free in V8
      * CVE-2026-110922: Use after free in Prerender


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aab47c4e08 advisory.

    Update to 155.0.8059.84, includes 10 security fixes

      * CVE-2026-110913: Memory corruption in DOM
      * CVE-2026-110914: Memory corruption in Workers
      * CVE-2026-110915: Use after free in Compositing
      * CVE-2026-110916: Improper input validation in Desktop
      * CVE-2026-110917: Memory corruption in SVG
      * CVE-2026-110918: Memory corruption in Core
      * CVE-2026-110919: Use after free in V8
      * CVE-2026-110920: Memory corruption in V8
      * CVE-2026-110921: Use after free in V8
      * CVE-2026-110922: Use after free in Prerender


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22124-1 advisory.

    Changes in chromium:

    - Chromium 155.0.8059.84 (boo#1285733):
      * CVE-2026-110922: Use after free in Prerender
      * CVE-2026-110913: Memory corruption in DOM
      * CVE-2026-110919: Use after free in V8
      * CVE-2026-110918: Memory corruption in Core
      * CVE-2026-110917: Memory corruption in SVG
      * CVE-2026-110921: Use after free in V8
      * CVE-2026-110920: Memory corruption in V8
      * CVE-2026-110916: Improper input validation in Desktop
      * CVE-2026-110915: Use after free in Compositing
      * CVE-2026-110914: Memory corruption in Workers

    - Chromium 155.0.8059.79 (boo#1285401):
      * CVE-2026-110152: Buffer overflow in ANGLE
      * CVE-2026-110149: Use after free in Browser
      * CVE-2026-110136: Use after free in PDF
      * CVE-2026-110161: Use after free in Network
      * CVE-2026-110165: Use after free in Core
      * CVE-2026-110148: Use after free in SVG
      * CVE-2026-110151: Use after free in Media
      * CVE-2026-110162: Use after free in Desktop
      * CVE-2026-110170: Use after free in Bindings
      * CVE-2026-110160: Missing authorization in ReadingMode
      * CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
      * CVE-2026-110146: Information leak in Passwords
      * CVE-2026-110150: Privilege elevation in Installer
      * CVE-2026-110156: Incorrect reference resolution in Extensions
      * CVE-2026-110137: Use after free in WebRTC
      * CVE-2026-110140: Type confusion in V8
      * CVE-2026-110158: Use after free in Passwords
      * CVE-2026-110145: Use after free in Passwords
      * CVE-2026-110159: Incorrect authorization in Updater
      * CVE-2026-110144: Incorrect authorization in Mojo
      * CVE-2026-110153: Use after free in Media
      * CVE-2026-110166: Buffer overflow in Animation
      * CVE-2026-110169: Use after free in V8
      * CVE-2026-110168: Use after free in V8
      * CVE-2026-110139: Use after free in Media
      * CVE-2026-110172: Use after free in Media
      * CVE-2026-110164: Use after free in DOM
      * CVE-2026-110163: Use after free in DOM
      * CVE-2026-110141: Observable discrepancy in Media
      * CVE-2026-110138: Use after free in ShapeDetection
      * CVE-2026-110157: Use after free in SVG
      * CVE-2026-110147: Use after free in PDF
      * CVE-2026-110154: Use after free in Canvas
      * CVE-2026-110155: Buffer overflow in PDFium
      * CVE-2026-110167: Use after free in Media
      * CVE-2026-110171: Use after free in Media
      * CVE-2026-110142: Use after free in FileSystem

    - Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354):
      * CVE-2026-106382: Use after free in Chromecast
      * CVE-2026-106197: Use after free in Browser
      * CVE-2026-106358: Use after free in Navigation
      * CVE-2026-106347: Use after free in Track
      * CVE-2026-106245: Uninitialized resource in ANGLE
      * CVE-2026-106327: Incorrect authorization in Core
      * CVE-2026-106366: Incomplete cleanup in CustomTabs
      * CVE-2026-106258: Uninitialized resource in ANGLE
      * CVE-2026-106376: Uninitialized resource in ANGLE
      * CVE-2026-106308: Incorrect reference resolution in Autofill
      * CVE-2026-106215: Uninitialized resource in ANGLE
      * CVE-2026-106369: Missing authorization in Translate
      * CVE-2026-106293: Type confusion in ANGLE
      * CVE-2026-106377: Race condition in Fonts
      * CVE-2026-106412: Race condition in Core
      * CVE-2026-106243: Incomplete cleanup in Proxy Auth
      * CVE-2026-106214: Information leak in Proxy
      * CVE-2026-106364: Incorrect authorization in Omnibox
      * CVE-2026-106239: Integer overflow in WebGL
      * CVE-2026-106426: Race condition in Fonts
      * CVE-2026-106419: Use after free in ANGLE
      * CVE-2026-106396: Improper input validation in Omnibox
      * CVE-2026-106323: Missing authorization in Chrome for iOS
      * CVE-2026-106231: Uninitialized resource in Dawn
      * CVE-2026-106202: Uninitialized resource in ANGLE
      * CVE-2026-106273: Uninitialized resource in Video
      * CVE-2026-106203: Incomplete cleanup in Autofill
      * CVE-2026-106332: Integer overflow in Compositing
      * CVE-2026-106281: Use after free in Tint
      * CVE-2026-106298: Use after free in Chrome Tabs
      * CVE-2026-106193: Use after free in Parser
      * CVE-2026-106255: Race condition in V8
      * CVE-2026-106393: Use after free in Storage
      * CVE-2026-106227: Use after free in Core
      * CVE-2026-106379: Uninitialized resource in Skia
      * CVE-2026-106211: Use after free in TabStrip
      * CVE-2026-106329: Incorrect authorization in FileSystem
      * CVE-2026-106248: Use after free in Bindings
      * CVE-2026-106235: Use after free in WebAudio
      * CVE-2026-106257: Use after free in HTML
      * CVE-2026-106268: Use after free in WebRTC
      * CVE-2026-106278: Use after free in Select
      * CVE-2026-106233: Use after free in Metrics
      * CVE-2026-106318: Use after free in Media
      * CVE-2026-106411: Use after free in Parser
      * CVE-2026-106423: Use after free in Media
      * CVE-2026-106346: Improper state validation in DevTools
      * CVE-2026-106190: Use after free in Media
      * CVE-2026-106357: Use after free in WebRTC
      * CVE-2026-106240: Type confusion in V8
      * CVE-2026-106184: Uninitialized resource in Media
      * CVE-2026-106383: Use after free in Media
      * CVE-2026-106349: Use after free in V8
      * CVE-2026-106421: Use after free in PDF
      * CVE-2026-106204: Use after free in PDF
      * CVE-2026-106200: Use after free in Track
      * CVE-2026-106265: UI misrepresentation in File
      * CVE-2026-106238: Race condition in Fonts
      * CVE-2026-106324: Incorrect authorization in WebAppInstalls
      * CVE-2026-106420: Incorrect calculation in API
      * CVE-2026-106222: Incorrect authorization in Sync
      * CVE-2026-106208: Missing authorization in API
      * CVE-2026-106286: Confused deputy in Omnibox
      * CVE-2026-106181: Incorrect reference resolution in DevTools
      * CVE-2026-106315: Use after free in Modularization
      * CVE-2026-106274: Incorrect reference resolution in Browser
      * CVE-2026-106365: Missing authorization in Animation
      * CVE-2026-106267: Missing authorization in Network
      * CVE-2026-106194: Missing authorization in WebAppInstalls
      * CVE-2026-106313: Incorrect authorization in Browser
      * CVE-2026-106283: Use after free in Streaming
      * CVE-2026-106291: Use after free in GarbageCollection
      * CVE-2026-106300: Race condition in CacheStorage
      * CVE-2026-106314: Incorrect authorization in Bluetooth
      * CVE-2026-106223: Uninitialized resource in GPU
      * CVE-2026-106242: Information leak in Omnibox
      * CVE-2026-106241: Incorrect authorization in Search
      * CVE-2026-106381: Incorrect authorization in Passwords
      * CVE-2026-106217: Missing authorization in Google Lens
      * CVE-2026-106425: Missing authorization in BrowserTag
      * CVE-2026-106225: Missing authorization in Autofill
      * CVE-2026-106363: Missing authorization in FullScreen
      * CVE-2026-106266: Confused deputy in Contextual Tasks
      * CVE-2026-106189: Code injection in ReaderMode
      * CVE-2026-106335: Use after free in Media
      * CVE-2026-106415: Information leak in Enterprise
      * CVE-2026-106224: Missing authorization in Google Lens
      * CVE-2026-106185: Improper input validation in Viz
      * CVE-2026-106244: Incorrect authorization in Permissions
      * CVE-2026-106407: Incorrect authorization in GetUserMedia
      * CVE-2026-106389: Incorrect authorization in USB
      * CVE-2026-106397: Incorrect authorization in Mobile
      * CVE-2026-106196: Missing authorization in Navigation
      * CVE-2026-106414: Improper input validation in Mobile
      * CVE-2026-106408: Protection mechanism failure in Mobile
      * CVE-2026-106261: Uninitialized resource in Video
      * CVE-2026-106406: Missing authorization in Mobile
      * CVE-2026-106290: Uninitialized resource in GPU
      * CVE-2026-106378: Privilege elevation in Sandbox
      * CVE-2026-106198: Missing authorization in FileSystem
      * CVE-2026-106326: Confused deputy in UI
      * CVE-2026-106354: Improper resource exposure in Extensions
      * CVE-2026-106342: Information leak in Autofill
      * CVE-2026-106424: Information leak in Audio
      * CVE-2026-106253: Incorrect authorization in Extensions
      * CVE-2026-106279: Incorrect reference resolution in Passwords
      * CVE-2026-106361: Incorrect provision of specified functionality in Mobile
      * CVE-2026-106402: Incorrect authorization in Extensions
      * CVE-2026-106311: Clickjacking in PermissionElement
      * CVE-2026-106246: Incorrect authorization in Browser
      * CVE-2026-106302: UI misrepresentation in PermissionElement
      * CVE-2026-106416: Code injection in Extensions
      * CVE-2026-106182: UI misrepresentation in Paint
      * CVE-2026-106282: UI misrepresentation in WebOTP
      * CVE-2026-106392: Information leak in WebAudio
      * CVE-2026-106188: Confused deputy in SignIn
      * CVE-2026-106370: Uninitialized resource in GPU
      * CVE-2026-106356: Clickjacking in EVP
      * CVE-2026-106405: Race condition in CustomTabs
      * CVE-2026-106322: Open redirect in AppManifest
      * CVE-2026-106280: Incorrect authorization in PermissionElement
      * CVE-2026-106206: Improper input validation in Mobile
      * CVE-2026-106180: Observable discrepancy in Animation
      * CVE-2026-106303: Observable discrepancy in Autofill AI
      * CVE-2026-106201: Race condition in V8
      * CVE-2026-106333: Incorrect authorization in Input
      * CVE-2026-106228: Confused deputy in Google Lens
      * CVE-2026-106289: Missing authorization in FedCM
      * CVE-2026-106277: Information leak in Animation
      * CVE-2026-106410: Missing authorization in Permissions
      * CVE-2026-106284: Out of bounds read in Printing
      * CVE-2026-106209: UI misrepresentation in Mobile
      * CVE-2026-106216: Cross-site request forgery in ReadingList
      * CVE-2026-106328: Incorrect authorization in PDF
      * CVE-2026-106387: Missing authorization in Mobile
      * CVE-2026-106400: Clickjacking in Messages
      * CVE-2026-106205: Missing authorization in Passwords
      * CVE-2026-106213: Race condition in WebAudio
      * CVE-2026-106230: Incorrect reference resolution in Offline
      * CVE-2026-106367: Missing authorization in Mobile
      * CVE-2026-106226: Improper input validation in Compositing
      * CVE-2026-106229: UI misrepresentation in FileSystem
      * CVE-2026-106232: UI misrepresentation in Browser
      * CVE-2026-106391: Incorrect authorization in WebShare
      * CVE-2026-106336: Observable discrepancy in Paint
      * CVE-2026-106403: Incorrect authorization in Accessibility
      * CVE-2026-106373: Use after free in Fonts
      * CVE-2026-106301: Confused deputy in Contextual Tasks
      * CVE-2026-106292: Buffer overflow in Fonts
      * CVE-2026-106262: Incomplete cleanup in GetUserMedia
      * CVE-2026-106360: Information leak in Payments
      * CVE-2026-106375: Incomplete cleanup in Dawn
      * CVE-2026-106348: Information leak in Animation
      * CVE-2026-106307: Incorrect authorization in Network
      * CVE-2026-106212: Incorrect authorization in Autofill
      * CVE-2026-106398: Incorrect authorization in Media
      * CVE-2026-106388: Missing authorization in DataTransfer
      * CVE-2026-106271: Missing authorization in Workers
      * CVE-2026-106395: Uninitialized resource in Dawn
      * CVE-2026-106304: Out of bounds read in ANGLE
      * CVE-2026-106401: Out of bounds write in Media
      * CVE-2026-106330: Information leak in Paint
      * CVE-2026-106295: Incorrect authorization in Unbounded Element
      * CVE-2026-106352: Incorrect authorization in WebProtect
      * CVE-2026-106337: UI misrepresentation in UI
      * CVE-2026-106263: Improper input validation in SignIn
      * CVE-2026-106404: Incorrect authorization in FontAccess
      * CVE-2026-106183: Missing authorization in Chromoting
      * CVE-2026-106386: Uninitialized resource in WebAudio
      * CVE-2026-106351: Observable discrepancy in Safebrowsing
      * CVE-2026-106384: Missing authorization in SiteIsolation
      * CVE-2026-106207: Race condition in V8
      * CVE-2026-106321: Information leak in Editing
      * CVE-2026-106210: Observable discrepancy in Scroll
      * CVE-2026-106254: Information leak in Mobile
      * CVE-2026-106372: Incorrect authorization in UI
      * CVE-2026-106341: Type confusion in V8
      * CVE-2026-106409: Incorrect reference resolution in WebAppInstalls
      * CVE-2026-106340: Missing authorization in CredentialProvider
      * CVE-2026-106276: UI misrepresentation in Payments
      * CVE-2026-106338: UI misrepresentation in PictureInPicture
      * CVE-2026-106317: UI misrepresentation in FullScreen
      * CVE-2026-106344: Missing authorization in Permissions
      * CVE-2026-106359: Confused deputy in DeviceBoundSessionCredentials
      * CVE-2026-106353: Improper input validation in Mobile
      * CVE-2026-106312: Missing authorization in SignIn
      * CVE-2026-106191: Missing authorization in Actor
      * CVE-2026-106250: Missing authorization in Actor
      * CVE-2026-106309: Incorrect authorization in Selection
      * CVE-2026-106187: Missing authorization in Permissions
      * CVE-2026-106394: Incomplete cleanup in Glic
      * CVE-2026-106306: Incorrect authorization in DevTools
      * CVE-2026-106427: Confused deputy in Mobile
      * CVE-2026-106252: Incorrect comparison in Fonts
      * CVE-2026-106287: Information loss in CORS
      * CVE-2026-106297: Incorrect authorization in Scheduling
      * CVE-2026-106260: Incorrect authorization in DevTools
      * CVE-2026-106362: Missing authorization in DevTools
      * CVE-2026-106275: Uninitialized resource in GPU
      * CVE-2026-106199: Incorrect authorization in Actor
      * CVE-2026-106299: Improper input validation in WebAudio
      * CVE-2026-106422: Incorrect authorization in API
      * CVE-2026-106186: Uncontrolled search path element in CredentialProvider
      * CVE-2026-106247: Buffer overflow in ANGLE
      * CVE-2026-106192: Information leak in Mobile
      * CVE-2026-106399: Out of bounds read in Skia
      * CVE-2026-106264: Missing authorization in Web Authentication (Passkeys & Security Keys)
      * CVE-2026-106285: UI misrepresentation in WebAppInstalls
      * CVE-2026-106220: Information leak in Passwords
      * CVE-2026-106417: Integer overflow in Media
      * CVE-2026-106221: Confused deputy in WebAPKs
      * CVE-2026-106259: Incorrect authorization in PermissionElement
      * CVE-2026-106296: Improper privilege management in UI
      * CVE-2026-106249: Incorrect authorization in Autofill
      * CVE-2026-106374: Type confusion in V8
      * CVE-2026-106380: UI misrepresentation in UI
      * CVE-2026-106179: UI misrepresentation in WebAppInstalls
      * CVE-2026-106368: UI misrepresentation in UI
      * CVE-2026-106237: Information leak in Permissions
      * CVE-2026-106331: Improper input validation in Extensions
      * CVE-2026-106270: Incorrect authorization in WebAppInstalls
      * CVE-2026-106350: Incorrect authorization in Browser
      * CVE-2026-106288: Missing authorization in Browser
      * CVE-2026-106305: UI misrepresentation in Mobile
      * CVE-2026-106418: Missing authorization in Network
      * CVE-2026-106343: Improper state validation in Autofill AI
      * CVE-2026-106371: Incorrect authorization in Transactions Platform
      * CVE-2026-106256: Information leak in Passwords
      * CVE-2026-106413: Race condition in Browser
      * CVE-2026-106339: Use of released resource in Core
      * CVE-2026-106320: Use of released resource in UI
      * CVE-2026-106195: Incorrect authorization in Chromoting
      * CVE-2026-106316: UI misrepresentation in Chromoting
      * CVE-2026-106385: Race condition in Chromoting
      * CVE-2026-106325: Incorrect reference resolution in Core
      * CVE-2026-106390: Incorrect provision of specified functionality in SanitizerAPI
      * CVE-2026-106294: Incomplete cleanup in Chromoting
      * CVE-2026-106334: Information leak in Payments
      * CVE-2026-106236: UI misrepresentation in Chromoting
      * CVE-2026-106251: UI misrepresentation in Chromoting
      * CVE-2026-106310: Use of released resource in FontAccess
      * CVE-2026-106345: Use of released resource in Session
      * CVE-2026-106272: UI misrepresentation in Chromoting
      * CVE-2026-106355: Missing authorization in Media
      * CVE-2026-106234: Use after free in Network
      * CVE-2026-106269: Use after free in CSS

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 155.0.8059.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_01886704284 advisory.

  - Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-110922)

  - Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110913)

  - Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to     potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-110914)

  - Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-110915)

  - Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to     potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-110916)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 155.0.8059.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_01886704284 advisory.

  - Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-110922)

  - Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110913)

  - Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to     potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-110914)

  - Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-110915)

  - Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to     potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-110916)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
374604	Fedora 45 : chromium (2026-9d6fc6be6c)	Nessus	Fedora Local Security Checks	Local	critical
372889	Fedora 43 : chromium (2026-e61285733f)	Nessus	Fedora Local Security Checks	Local	critical
477333	Echo: chromium: security update to 156.0.8078.47-1~deb12u1	Tenable Cloud Security	Echo Local Security Checks	Local	critical
477333	Echo: chromium: security update to 156.0.8078.47-1~deb12u1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
371746	Fedora 44 : chromium (2026-ccc7071380)	Nessus	Fedora Local Security Checks	Local	critical
371253	Debian dla-4853 : chromium - security update	Nessus	Debian Local Security Checks	Local	high
370895	Microsoft Edge (Chromium) < 156.0.4314.42 Multiple Vulnerabilities	Nessus	Windows	Local	high
370505	Debian dsa-6577 : chromium - security update	Nessus	Debian Local Security Checks	Local	high
367724	Fedora 43 : chromium (2026-5a871d2ca7)	Nessus	Fedora Local Security Checks	Local	critical
367247	Fedora 44 : chromium (2026-aab47c4e08)	Nessus	Fedora Local Security Checks	Local	critical
367236	openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22124-1)	Nessus	SuSE Local Security Checks	Local	critical
366326	Google Chrome < 155.0.8059.84 Multiple Vulnerabilities	Nessus	Windows	Local	critical
366325	Google Chrome < 155.0.8059.84 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-110916

critical

Tenable Plugins

critical

critical

critical

critical

critical

high

high

high

critical

critical

critical

critical

critical