Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22185-1 advisory.

    Changes in chromium:

    Chromium 156 (156.0.8078.47) promoted to stable (boo#1286350):

      * CVE-2026-113341: Memory corruption in Skia
      * CVE-2026-113279: Memory corruption in Accessibility
      * CVE-2026-113072: Memory corruption in CSS
      * CVE-2026-113280: Memory corruption in Paint
      * CVE-2026-113271: Use after free in Accessibility
      * CVE-2026-113303: Memory corruption in WebRTC
      * CVE-2026-113101: Use after free in SiteIsolation
      * CVE-2026-113097: Use after free in FileSystem
      * CVE-2026-113098: Memory corruption in CacheStorage
      * CVE-2026-113242: Memory corruption in ANGLE
      * CVE-2026-113058: Use after free in WebUI
      * CVE-2026-113082: Memory corruption in ANGLE
      * CVE-2026-113119: Use after free in Network
      * CVE-2026-113092: Use after free in Passwords
      * CVE-2026-113134: Memory corruption in ANGLE
      * CVE-2026-113339: Use after free in SVG
      * CVE-2026-113317: Memory corruption in Accessibility
      * CVE-2026-113193: Memory corruption in V8
      * CVE-2026-113117: Improper input validation in ANGLE
      * CVE-2026-113188: Memory corruption in GPU
      * CVE-2026-113104: Memory corruption in Frames
      * CVE-2026-113322: Memory corruption in Dawn
      * CVE-2026-113163: Use after free in WebGL
      * CVE-2026-113253: Use after free in Canvas
      * CVE-2026-113298: Use after free in Transactions Platform
      * CVE-2026-113315: Memory corruption in ANGLE
      * CVE-2026-113236: Use after free in Navigation
      * CVE-2026-113284: Memory corruption in XML
      * CVE-2026-113141: Use after free in Transactions Platform
      * CVE-2026-113316: Improper input validation in Views
      * CVE-2026-113234: Memory corruption in ANGLE
      * CVE-2026-113252: Improper input validation in ANGLE
      * CVE-2026-113305: Use after free in Privacy
      * CVE-2026-113044: Use after free in V8
      * CVE-2026-113135: Memory corruption in PictureInPicture
      * CVE-2026-113266: Memory corruption in ANGLE
      * CVE-2026-113273: Memory corruption in ANGLE
      * CVE-2026-113293: Use after free in ANGLE
      * CVE-2026-113225: Memory corruption in Browser
      * CVE-2026-113210: Use after free in ANGLE
      * CVE-2026-113285: Memory corruption in ANGLE
      * CVE-2026-113324: Use after free in GPU
      * CVE-2026-113334: Improper input validation in ANGLE
      * CVE-2026-113020: Improper input validation in Date
      * CVE-2026-113222: Use after free in V8
      * CVE-2026-113318: Memory corruption in ServiceWorker
      * CVE-2026-113310: Out of bounds read in Bluetooth
      * CVE-2026-113338: Use after free in Turbolev
      * CVE-2026-113093: Memory corruption in DisplayLocking
      * CVE-2026-113012: Improper input validation in GPU
      * CVE-2026-113175: Improper input validation in FileSystem
      * CVE-2026-113192: Memory corruption in V8
      * CVE-2026-113309: Out of bounds read in Media
      * CVE-2026-113295: Out of bounds read in ANGLE
      * CVE-2026-113217: Use after free in WebAppInstalls
      * CVE-2026-113040: Improper input validation in Proxy
      * CVE-2026-113161: Use after free in WebRTC
      * CVE-2026-113154: Memory corruption in Canvas
      * CVE-2026-113336: Memory corruption in Compositing
      * CVE-2026-113181: Use after free in Navigation
      * CVE-2026-113019: Use after free in Turbolev
      * CVE-2026-113095: Out of bounds read in Focus
      * CVE-2026-113160: Use after free in Turbolev
      * CVE-2026-113212: Memory corruption in PDF
      * CVE-2026-113000: Memory corruption in Paint
      * CVE-2026-113179: Use after free in Paint
      * CVE-2026-112993: Use after free in Input
      * CVE-2026-113055: Type confusion in FullScreen
      * CVE-2026-113068: Use after free in Input
      * CVE-2026-113320: Memory corruption in Navigation
      * CVE-2026-113231: Improper input validation in Extensions
      * CVE-2026-113174: Use after free in Extensions
      * CVE-2026-113022: Memory corruption in PDFium
      * CVE-2026-113079: Use after free in SiteIsolation
      * CVE-2026-113191: Use after free in Internals
      * CVE-2026-113250: Use after free in ANGLE
      * CVE-2026-113109: Memory corruption in API
      * CVE-2026-113113: Use after free in Extensions
      * CVE-2026-113069: Memory corruption in Compositing
      * CVE-2026-113006: Out of bounds read in Navigation
      * CVE-2026-113263: Use after free in Core
      * CVE-2026-113018: Memory corruption in IME
      * CVE-2026-113301: Memory corruption in WebAppInstalls
      * CVE-2026-113034: Memory corruption in FileSystem
      * CVE-2026-113094: Memory corruption in API
      * CVE-2026-113240: Use after free in Chromecast
      * CVE-2026-113102: Out of bounds read in FileSystem
      * CVE-2026-113142: Memory corruption in Extensions
      * CVE-2026-113281: Memory corruption in SiteIsolation
      * CVE-2026-113035: Out of bounds read in API
      * CVE-2026-113211: Memory corruption in ServiceWorker
      * CVE-2026-113011: Use after free in CredentialProvider
      * CVE-2026-113198: Use after free in Extensions
      * CVE-2026-113257: Memory corruption in Media
      * CVE-2026-113070: Out of bounds read in GetUserMedia
      * CVE-2026-113176: Memory corruption in Omnibox
      * CVE-2026-113150: Memory corruption in Bindings
      * CVE-2026-113311: Use after free in ServiceWorker
      * CVE-2026-113078: Improper input validation in Compositing
      * CVE-2026-113033: Use after free in Streaming
      * CVE-2026-113026: Memory corruption in PDF
      * CVE-2026-113302: Use after free in Extensions
      * CVE-2026-113164: Memory corruption in Voice
      * CVE-2026-113239: Range error in SiteIsolation
      * CVE-2026-113131: Memory corruption in Bluetooth
      * CVE-2026-113333: Memory corruption in Extensions
      * CVE-2026-113147: Improper input validation in WebShare
      * CVE-2026-113337: Memory corruption in Scroll
      * CVE-2026-113127: Memory corruption in Browser
      * CVE-2026-113129: Improper access control in Extensions
      * CVE-2026-113264: Improper input validation in Extensions
      * CVE-2026-113105: Use after free in Extensions
      * CVE-2026-113220: Memory corruption in Extensions
      * CVE-2026-113275: Use after free in API
      * CVE-2026-113283: Memory corruption in CredentialProvider
      * CVE-2026-113014: Use after free in PerformanceAPIs
      * CVE-2026-113108: Use after free in Script
      * CVE-2026-113343: Memory corruption in Sandbox
      * CVE-2026-113319: Use after free in Accessibility
      * CVE-2026-113057: Improper access control in ComputePressure
      * CVE-2026-113219: Memory corruption in Contacts
      * CVE-2026-113005: Memory corruption in Bluetooth
      * CVE-2026-113209: Memory corruption in Navigation
      * CVE-2026-113166: Memory corruption in History
      * CVE-2026-113051: Memory corruption in CSS
      * CVE-2026-113196: Improper access control in Mobile
      * CVE-2026-113003: Memory corruption in HID
      * CVE-2026-113155: Use after free in Glic
      * CVE-2026-113290: Use after free in Input
      * CVE-2026-113183: Memory corruption in FedCM
      * CVE-2026-113289: Improper input validation in PerformanceAPIs
      * CVE-2026-113146: Memory corruption in PerformanceAPIs
      * CVE-2026-113207: Use after free in SiteIsolation
      * CVE-2026-113205: Use after free in Variations
      * CVE-2026-113162: Improper input validation in Actor
      * CVE-2026-113118: Memory corruption in Extensions
      * CVE-2026-113232: Memory corruption in Search
      * CVE-2026-113327: Use after free in Chromecast
      * CVE-2026-112999: Use after free in API
      * CVE-2026-113249: Improper input validation in Mobile
      * CVE-2026-113272: Memory corruption in Extensions
      * CVE-2026-113112: Use after free in Extensions
      * CVE-2026-113321: Use after free in Extensions
      * CVE-2026-113059: Memory corruption in Sensor
      * CVE-2026-113137: Memory corruption in Extensions
      * CVE-2026-113208: Use after free in ContextualSearch
      * CVE-2026-113238: Memory corruption in CustomTabs
      * CVE-2026-113194: Memory corruption in Core
      * CVE-2026-113189: Use after free in Core
      * CVE-2026-113060: Improper input validation in Bluetooth
      * CVE-2026-113115: Use after free in Transactions Platform
      * CVE-2026-113045: Out of bounds read in Offline
      * CVE-2026-113307: Memory corruption in Extensions
      * CVE-2026-113009: Use after free in WindowControlsOverlay
      * CVE-2026-113071: Use after free in Notifications
      * CVE-2026-113278: Use after free in Extensions
      * CVE-2026-113190: Use after free in ServiceWorker
      * CVE-2026-112992: Memory corruption in Canvas
      * CVE-2026-112995: Use after free in Animation
      * CVE-2026-113261: Use after free in WebAppInstalls
      * CVE-2026-113172: Memory corruption in ServiceWorker
      * CVE-2026-113332: Memory corruption in GPU
      * CVE-2026-113262: Use after free in Extensions
      * CVE-2026-113149: Memory corruption in FullScreen
      * CVE-2026-113206: Memory corruption in Omnibox
      * CVE-2026-113185: Memory corruption in Extensions
      * CVE-2026-113171: Memory corruption in Prompts
      * CVE-2026-113042: Use after free in Extensions
      * CVE-2026-113276: Memory corruption in Passwords
      * CVE-2026-113218: Use after free in DataTransfer
      * CVE-2026-113195: Improper input validation in Downloads
      * CVE-2026-113328: Improper input validation in Privacy
      * CVE-2026-113335: Memory corruption in Extensions
      * CVE-2026-113255: Use after free in CustomTabs
      * CVE-2026-113076: Use after free in Toolbar
      * CVE-2026-113325: Memory corruption in SignIn
      * CVE-2026-113084: Improper input validation in Permissions
      * CVE-2026-113308: Use after free in Core
      * CVE-2026-113224: Memory corruption in WebAppInstalls
      * CVE-2026-113148: Memory corruption in WebUI
      * CVE-2026-113010: Out of bounds read in Extensions
      * CVE-2026-113073: Use after free in Browser
      * CVE-2026-113265: Memory corruption in BFCache
      * CVE-2026-113329: Out of bounds read in Installer
      * CVE-2026-113043: Use after free in iOSWeb
      * CVE-2026-113202: Use after free in BrowserTag
      * CVE-2026-113016: Improper input validation in Extensions
      * CVE-2026-113246: Memory corruption in iOSWebView
      * CVE-2026-113041: Use after free in Actor
      * CVE-2026-113126: Memory corruption in PolicyContainer
      * CVE-2026-113031: Memory corruption in Media
      * CVE-2026-113081: Use after free in Compositing
      * CVE-2026-113139: Memory corruption in Autofill
      * CVE-2026-113128: Missing authorization in Animation
      * CVE-2026-113049: Memory corruption in Core
      * CVE-2026-113032: Memory corruption in Omnibox
      * CVE-2026-113204: Use after free in TrustedWebActivities
      * CVE-2026-113144: Memory corruption in Speech
      * CVE-2026-113054: Out of bounds read in SiteIsolation
      * CVE-2026-113123: Use after free in GPU
      * CVE-2026-113277: Out of bounds read in CustomTabs
      * CVE-2026-113136: Memory corruption in DevTools
      * CVE-2026-113106: Memory corruption in Skia
      * CVE-2026-113001: Use after free in Workers
      * CVE-2026-113064: Memory corruption in OptimizationGuide
      * CVE-2026-113243: Memory corruption in DOM
      * CVE-2026-113326: Memory corruption in Core
      * CVE-2026-113124: Memory corruption in DataTransfer
      * CVE-2026-113230: Improper input validation in Browser
      * CVE-2026-113090: Memory corruption in Interstitials
      * CVE-2026-113158: Use after free in Streaming
      * CVE-2026-113077: Memory corruption in Core
      * CVE-2026-113282: Use after free in Views
      * CVE-2026-113165: Use after free in Core
      * CVE-2026-113178: Memory corruption in Views
      * CVE-2026-113110: Memory corruption in ShadowDOM
      * CVE-2026-113007: Memory corruption in Permissions
      * CVE-2026-113187: Use after free in DOM
      * CVE-2026-113075: Use after free in DevTools
      * CVE-2026-113259: Use after free in Frames
      * CVE-2026-113228: Use after free in Network
      * CVE-2026-113099: Improper input validation in Omnibox
      * CVE-2026-113216: Use after free in Navigation
      * CVE-2026-113270: Use after free in Internals
      * CVE-2026-113087: Use after free in Actor
      * CVE-2026-113267: Memory corruption in Video
      * CVE-2026-113304: Memory corruption in GPU
      * CVE-2026-113177: Use after free in FileSystem
      * CVE-2026-113151: Out of bounds read in Actor
      * CVE-2026-113028: Use after free in Media
      * CVE-2026-113120: Improper input validation in Media
      * CVE-2026-112997: Memory corruption in CSS
      * CVE-2026-113037: Use after free in WebSockets
      * CVE-2026-113153: Memory corruption in SiteIsolation
      * CVE-2026-113138: Memory corruption in WebAppInstalls
      * CVE-2026-113030: Improper access control in V8
      * CVE-2026-113100: Memory corruption in Audio
      * CVE-2026-113221: Use after free in Google Lens
      * CVE-2026-113344: Use after free in Performance
      * CVE-2026-113342: Memory corruption in Network
      * CVE-2026-113159: Improper access control in DevTools
      * CVE-2026-113233: Out of bounds read in Core
      * CVE-2026-113065: Use after free in Media
      * CVE-2026-113002: Memory corruption in Transactions Platform
      * CVE-2026-113199: Out of bounds read in Payments
      * CVE-2026-113197: Use after free in Forms
      * CVE-2026-113203: Use after free in CSS
      * CVE-2026-113170: Use after free in Autofill
      * CVE-2026-113258: Memory corruption in Chromoting
      * CVE-2026-113297: Improper access control in Ozone
      * CVE-2026-113062: Improper input validation in API
      * CVE-2026-113096: Memory corruption in Text
      * CVE-2026-113050: Out of bounds read in HID
      * CVE-2026-113008: Memory corruption in Transactions Platform
      * CVE-2026-113111: Use after free in Compositing
      * CVE-2026-113200: Use after free in ANGLE
      * CVE-2026-113143: Memory corruption in ANGLE
      * CVE-2026-113157: Information leak in ANGLE
      * CVE-2026-113235: Improper input validation in Passwords
      * CVE-2026-113089: Improper input validation in PrintPreview
      * CVE-2026-113340: Memory corruption in ANGLE
      * CVE-2026-113052: Memory corruption in V8
      * CVE-2026-113133: Memory corruption in PlatformIntegration
      * CVE-2026-113086: Improper input validation in Input
      * CVE-2026-113251: Use after free in PDF
      * CVE-2026-113215: Use after free in Extensions
      * CVE-2026-113053: Use after free in Cookies
      * CVE-2026-113312: Memory corruption in Autofill
      * CVE-2026-113323: Use after free in Chrome for iOS
      * CVE-2026-113114: Use after free in SignIn
      * CVE-2026-113015: Use after free in Workers
      * CVE-2026-113091: Use after free in PerformanceAPIs
      * CVE-2026-113168: Use after free in Permissions
      * CVE-2026-113229: Use after free in Loader
      * CVE-2026-113256: Use after free in Permissions
      * CVE-2026-113103: Use after free in WebProtect
      * CVE-2026-113056: Memory corruption in PerformanceAPIs
      * CVE-2026-113201: Memory corruption in Google Lens
      * CVE-2026-113027: Memory corruption in WebFonts
      * CVE-2026-113214: Improper input validation in FullScreen
      * CVE-2026-113004: Memory corruption in Sync
      * CVE-2026-113300: Out of bounds write in Forms
      * CVE-2026-113213: Memory corruption in DevTools
      * CVE-2026-113167: Memory corruption in Network
      * CVE-2026-113223: Memory corruption in DevTools
      * CVE-2026-113291: Memory corruption in FullScreen
      * CVE-2026-113241: Memory corruption in Toolbar
      * CVE-2026-113244: Improper input validation in UI
      * CVE-2026-113048: Memory corruption in DevTools
      * CVE-2026-113247: Memory corruption in DevTools
      * CVE-2026-113023: Improper input validation in Extensions
      * CVE-2026-113330: Memory corruption in CustomTabs
      * CVE-2026-113226: Memory corruption in Model
      * CVE-2026-113152: Memory corruption in SignIn
      * CVE-2026-113029: Improper access control in ANGLE
      * CVE-2026-113296: Memory corruption in Actor
      * CVE-2026-113306: Improper input validation in Network
      * CVE-2026-113245: Memory corruption in DevTools
      * CVE-2026-113299: Memory corruption in WebProtect
      * CVE-2026-113024: Use after free in WebAppInstalls
      * CVE-2026-113025: Use after free in Input
      * CVE-2026-113080: Use after free in WebAppInstalls
      * CVE-2026-113186: Memory corruption in DevTools
      * CVE-2026-113180: Memory corruption in ContentCapture
      * CVE-2026-113140: Use after free in ANGLE
      * CVE-2026-113184: Memory corruption in Scheduling
      * CVE-2026-113017: Use after free in Views
      * CVE-2026-112998: Memory corruption in Views
      * CVE-2026-113021: Use after free in WebAppInstalls
      * CVE-2026-113145: Memory corruption in Messages
      * CVE-2026-113292: Improper input validation in Omnibox
      * CVE-2026-113156: Use after free in Messages
      * CVE-2026-113116: Use after free in DevTools
      * CVE-2026-113047: Memory corruption in BrowserTag
      * CVE-2026-113173: Improper input validation in UI
      * CVE-2026-113260: Memory corruption in Core
      * CVE-2026-113269: Memory corruption in BrowserTag
      * CVE-2026-113036: Memory corruption in HTML
      * CVE-2026-113268: Memory corruption in Navigation
      * CVE-2026-113038: Memory corruption in DevTools
      * CVE-2026-113313: Memory corruption in DevTools
      * CVE-2026-113061: Memory corruption in Chromoting
      * CVE-2026-113248: Memory corruption in FileSystem
      * CVE-2026-113288: Memory corruption in Core
      * CVE-2026-113085: Use after free in Media
      * CVE-2026-113107: Use after free in Media
      * CVE-2026-113066: Memory corruption in Fonts
      * CVE-2026-113121: Memory corruption in ContextMenu
      * CVE-2026-113287: Use after free in Prompts
      * CVE-2026-113132: Memory corruption in DevTools
      * CVE-2026-113169: Memory corruption in WebAppInstalls
      * CVE-2026-113254: Memory corruption in DevTools
      * CVE-2026-113063: Improper input validation in Chromoting
      * CVE-2026-112994: Memory corruption in Browser
      * CVE-2026-113314: Use after free in Media
      * CVE-2026-113237: Memory corruption in Chromoting
      * CVE-2026-113331: Memory corruption in Controls
      * CVE-2026-113182: Memory corruption in Passwords
      * CVE-2026-113046: Improper input validation in Passwords
      * CVE-2026-113067: Use after free in Chromoting
      * CVE-2026-113074: Use after free in Media
      * CVE-2026-113130: Use after free in Actor
      * CVE-2026-113294: Improper input validation in Loader
      * CVE-2026-112996: Memory corruption in Loader
      * CVE-2026-113122: Memory corruption in Loader
      * CVE-2026-113227: Use after free in Editing
      * CVE-2026-113286: Memory corruption in Google Lens
      * CVE-2026-113083: Memory corruption in Actor
      * CVE-2026-113088: Memory corruption in Mobile
      * CVE-2026-113013: Memory corruption in DevTools
      * CVE-2026-113125: Memory corruption in DevTools
      * CVE-2026-113039: Use after free in Bookmarks
      * CVE-2026-113274: Use after free in ReadingMode

    Chromium 156.0.8078.12 (beta released 2026-10-07)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d6fc6be6c advisory.

     Update to 156.0.8078.73, include 52 security fixes

      * CVE-2026-118304: Improper input validation in SVG
      * CVE-2026-118305: Memory corruption in Turbolev
      * CVE-2026-118306: Memory corruption in FileSystem
      * CVE-2026-118307: Use after free in Paint
      * CVE-2026-118308: Use after free in SVG
      * CVE-2026-118309: Improper input validation in UI
      * CVE-2026-118310: Improper input validation in Views
      * CVE-2026-118311: Memory corruption in Media
      * CVE-2026-118312: Memory corruption in Paint
      * CVE-2026-118313: Use after free in Video
      * CVE-2026-118314: Improper input validation in UI
      * CVE-2026-118315: Improper input validation in SVG
      * CVE-2026-118316: Improper input validation in V8
      * CVE-2026-118317: Memory corruption in HTML
      * CVE-2026-118318: Improper access control in V8
      * CVE-2026-118319: Memory corruption in Skia
      * CVE-2026-118320: Memory corruption in V8
      * CVE-2026-118321: Improper input validation in Core
      * CVE-2026-118322: Memory corruption in ANGLE
      * CVE-2026-118327: Memory corruption in Media
      * CVE-2026-118328: Improper input validation in WebRTC
      * CVE-2026-118329: Improper input validation in ANGLE
      * CVE-2026-118330: Use after free in Browser
      * CVE-2026-118331: Improper input validation in FileAPI
      * CVE-2026-118332: Improper input validation in Compositing
      * CVE-2026-118333: Missing authorization in Video
      * CVE-2026-118334: Use after free in ImageCapture
      * CVE-2026-118335: Improper input validation in Metrics
      * CVE-2026-118336: Improper input validation in Headless
      * CVE-2026-118337: Improper access control in Forms
      * CVE-2026-118338: Use after free in Animation
      * CVE-2026-118339: Use after free in Animation
      * CVE-2026-118340: Memory corruption in Skia
      * CVE-2026-118341: Use after free in Modularization
      * CVE-2026-118342: Out of bounds write in Editing
      * CVE-2026-118343: Improper input validation in ReadingList
      * CVE-2026-118344: Use after free in Layout
      * CVE-2026-118345: Use after free in PDFium
      * CVE-2026-118346: Use after free in Compositing
      * CVE-2026-118347: Use after free in FileSystem
      * CVE-2026-118348: Improper input validation in Skia
      * CVE-2026-118349: Memory corruption in Payments
      * CVE-2026-118350: Use after free in Turbolev
      * CVE-2026-118351: Memory corruption in Skia
      * CVE-2026-118352: Memory corruption in Cache
      * CVE-2026-118353: Use after free in Paint
      * CVE-2026-118354: Improper input validation in Skia
      * CVE-2026-118355: Improper input validation in Command
      * CVE-2026-118356: Use after free in WTF
      * CVE-2026-118357: Use after free in FileSystem
      * CVE-2026-118358: Memory corruption in WebAudio
      * CVE-2026-118359: Memory corruption in V8


    ----

    Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344


    ----

    Update to 155.0.8059.84, includes 10 security fixes

      * CVE-2026-110913: Memory corruption in DOM
      * CVE-2026-110914: Memory corruption in Workers
      * CVE-2026-110915: Use after free in Compositing
      * CVE-2026-110916: Improper input validation in Desktop
      * CVE-2026-110917: Memory corruption in SVG
      * CVE-2026-110918: Memory corruption in Core
      * CVE-2026-110919: Use after free in V8
      * CVE-2026-110920: Memory corruption in V8
      * CVE-2026-110921: Use after free in V8
      * CVE-2026-110922: Use after free in Prerender


    ----

    Update to 155.0.8059.39, includes 37 security fixes

      * CVE-2026-110136: Use after free in PDF
      * CVE-2026-110137: Use after free in WebRTC
      * CVE-2026-110138: Use after free in ShapeDetection
      * CVE-2026-110139: Use after free in Media
      * CVE-2026-110140: Type confusion in V8
      * CVE-2026-110141: Observable discrepancy in Media
      * CVE-2026-110142: Use after free in FileSystem
      * CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
      * CVE-2026-110144: Incorrect authorization in Mojo
      * CVE-2026-110145: Use after free in Passwords
      * CVE-2026-110146: Information leak in Passwords
      * CVE-2026-110147: Use after free in PDF
      * CVE-2026-110148: Use after free in SVG
      * CVE-2026-110149: Use after free in Browser
      * CVE-2026-110150: Privilege elevation in Installer
      * CVE-2026-110151: Use after free in Media
      * CVE-2026-110152: Buffer overflow in ANGLE
      * CVE-2026-110153: Use after free in Media
      * CVE-2026-110154: Use after free in Canvas
      * CVE-2026-110155: Buffer overflow in PDFium
      * CVE-2026-110156: Incorrect reference resolution in Extensions
      * CVE-2026-110157: Use after free in SVG
      * CVE-2026-110158: Use after free in Passwords
      * CVE-2026-110159: Incorrect authorization in Updater
      * CVE-2026-110160: Missing authorization in ReadingMode
      * CVE-2026-110161: Use after free in Network
      * CVE-2026-110162: Use after free in Desktop
      * CVE-2026-110163: Use after free in DOM
      * CVE-2026-110164: Use after free in DOM
      * CVE-2026-110165: Use after free in Core
      * CVE-2026-110166: Buffer overflow in Animation
      * CVE-2026-110167: Use after free in Media
      * CVE-2026-110168: Use after free in V8
      * CVE-2026-110169: Use after free in V8
      * CVE-2026-110170: Use after free in Bindings
      * CVE-2026-110171: Use after free in Media
      * CVE-2026-110172: Use after free in Media

    ----

    Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e61285733f advisory.

    Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ccc7071380 advisory.

    Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote
    attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium
    security severity: Medium) (CVE-2026-113002)

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4853 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4853-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     October 23, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : chromium     Version        : 156.0.8078.47-1~deb12u1     CVE ID         : CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916                      CVE-2026-110917 CVE-2026-110918 CVE-2026-110919 CVE-2026-110920                      CVE-2026-110921 CVE-2026-110922 CVE-2026-112992 CVE-2026-112993                      CVE-2026-112994 CVE-2026-112995 CVE-2026-112996 CVE-2026-112997                      CVE-2026-112998 CVE-2026-112999 CVE-2026-113000 CVE-2026-113001                      CVE-2026-113002 CVE-2026-113003 CVE-2026-113004 CVE-2026-113005                      CVE-2026-113006 CVE-2026-113007 CVE-2026-113008 CVE-2026-113009                      CVE-2026-113010 CVE-2026-113011 CVE-2026-113012 CVE-2026-113013                      CVE-2026-113014 CVE-2026-113015 CVE-2026-113016 CVE-2026-113017                      CVE-2026-113018 CVE-2026-113019 CVE-2026-113020 CVE-2026-113021                      CVE-2026-113022 CVE-2026-113023 CVE-2026-113024 CVE-2026-113025                      CVE-2026-113026 CVE-2026-113027 CVE-2026-113028 CVE-2026-113029                      CVE-2026-113030 CVE-2026-113031 CVE-2026-113032 CVE-2026-113033                      CVE-2026-113034 CVE-2026-113035 CVE-2026-113036 CVE-2026-113037                      CVE-2026-113038 CVE-2026-113039 CVE-2026-113040 CVE-2026-113041                      CVE-2026-113042 CVE-2026-113043 CVE-2026-113044 CVE-2026-113045                      CVE-2026-113046 CVE-2026-113047 CVE-2026-113048 CVE-2026-113049                      CVE-2026-113050 CVE-2026-113051 CVE-2026-113052 CVE-2026-113053                      CVE-2026-113054 CVE-2026-113055 CVE-2026-113056 CVE-2026-113057                      CVE-2026-113058 CVE-2026-113059 CVE-2026-113060 CVE-2026-113061                      CVE-2026-113062 CVE-2026-113063 CVE-2026-113064 CVE-2026-113065                      CVE-2026-113066 CVE-2026-113067 CVE-2026-113068 CVE-2026-113069                      CVE-2026-113070 CVE-2026-113071 CVE-2026-113072 CVE-2026-113073                      CVE-2026-113074 CVE-2026-113075 CVE-2026-113076 CVE-2026-113077                      CVE-2026-113078 CVE-2026-113079 CVE-2026-113080 CVE-2026-113081                      CVE-2026-113082 CVE-2026-113083 CVE-2026-113084 CVE-2026-113085                      CVE-2026-113086 CVE-2026-113087 CVE-2026-113088 CVE-2026-113089                      CVE-2026-113090 CVE-2026-113091 CVE-2026-113092 CVE-2026-113093                      CVE-2026-113094 CVE-2026-113095 CVE-2026-113096 CVE-2026-113097                      CVE-2026-113098 CVE-2026-113099 CVE-2026-113100 CVE-2026-113101                      CVE-2026-113102 CVE-2026-113103 CVE-2026-113104 CVE-2026-113105                      CVE-2026-113106 CVE-2026-113107 CVE-2026-113108 CVE-2026-113109                      CVE-2026-113110 CVE-2026-113111 CVE-2026-113112 CVE-2026-113113                      CVE-2026-113114 CVE-2026-113115 CVE-2026-113116 CVE-2026-113117                      CVE-2026-113118 CVE-2026-113119 CVE-2026-113120 CVE-2026-113121                      CVE-2026-113122 CVE-2026-113123 CVE-2026-113124 CVE-2026-113125                      CVE-2026-113126 CVE-2026-113127 CVE-2026-113128 CVE-2026-113129                      CVE-2026-113130 CVE-2026-113131 CVE-2026-113132 CVE-2026-113133                      CVE-2026-113134 CVE-2026-113135 CVE-2026-113136 CVE-2026-113137                      CVE-2026-113138 CVE-2026-113139 CVE-2026-113140 CVE-2026-113141                      CVE-2026-113142 CVE-2026-113143 CVE-2026-113144 CVE-2026-113145                      CVE-2026-113146 CVE-2026-113147 CVE-2026-113148 CVE-2026-113149                      CVE-2026-113150 CVE-2026-113151 CVE-2026-113152 CVE-2026-113153                      CVE-2026-113154 CVE-2026-113155 CVE-2026-113156 CVE-2026-113157                      CVE-2026-113158 CVE-2026-113159 CVE-2026-113160 CVE-2026-113161                      CVE-2026-113162 CVE-2026-113163 CVE-2026-113164 CVE-2026-113165                      CVE-2026-113166 CVE-2026-113167 CVE-2026-113168 CVE-2026-113169                      CVE-2026-113170 CVE-2026-113171 CVE-2026-113172 CVE-2026-113173                      CVE-2026-113174 CVE-2026-113175 CVE-2026-113176 CVE-2026-113177                      CVE-2026-113178 CVE-2026-113179 CVE-2026-113180 CVE-2026-113181                      CVE-2026-113182 CVE-2026-113183 CVE-2026-113184 CVE-2026-113185                      CVE-2026-113186 CVE-2026-113187 CVE-2026-113188 CVE-2026-113189                      CVE-2026-113190 CVE-2026-113191 CVE-2026-113192 CVE-2026-113193                      CVE-2026-113194 CVE-2026-113195 CVE-2026-113196 CVE-2026-113197                      CVE-2026-113198 CVE-2026-113199 CVE-2026-113200 CVE-2026-113201                      CVE-2026-113202 CVE-2026-113203 CVE-2026-113204 CVE-2026-113205                      CVE-2026-113206 CVE-2026-113207 CVE-2026-113208 CVE-2026-113209                      CVE-2026-113210 CVE-2026-113211 CVE-2026-113212 CVE-2026-113213                      CVE-2026-113214 CVE-2026-113215 CVE-2026-113216 CVE-2026-113217                      CVE-2026-113218 CVE-2026-113219 CVE-2026-113220 CVE-2026-113221                      CVE-2026-113222 CVE-2026-113223 CVE-2026-113224 CVE-2026-113225                      CVE-2026-113226 CVE-2026-113227 CVE-2026-113228 CVE-2026-113229                      CVE-2026-113230 CVE-2026-113231 CVE-2026-113232 CVE-2026-113233                      CVE-2026-113234 CVE-2026-113235 CVE-2026-113236 CVE-2026-113237                      CVE-2026-113238 CVE-2026-113239 CVE-2026-113240 CVE-2026-113241                      CVE-2026-113242 CVE-2026-113243 CVE-2026-113244 CVE-2026-113245                      CVE-2026-113246 CVE-2026-113247 CVE-2026-113248 CVE-2026-113249                      CVE-2026-113250 CVE-2026-113251 CVE-2026-113252 CVE-2026-113253                      CVE-2026-113254 CVE-2026-113255 CVE-2026-113256 CVE-2026-113257                      CVE-2026-113258 CVE-2026-113259 CVE-2026-113260 CVE-2026-113261                      CVE-2026-113262 CVE-2026-113263 CVE-2026-113264 CVE-2026-113265                      CVE-2026-113266 CVE-2026-113267 CVE-2026-113268 CVE-2026-113269                      CVE-2026-113270 CVE-2026-113271 CVE-2026-113272 CVE-2026-113273                      CVE-2026-113274 CVE-2026-113275 CVE-2026-113276 CVE-2026-113277                      CVE-2026-113278 CVE-2026-113279 CVE-2026-113280 CVE-2026-113281                      CVE-2026-113282 CVE-2026-113283 CVE-2026-113284 CVE-2026-113285                      CVE-2026-113286 CVE-2026-113287 CVE-2026-113288 CVE-2026-113289                      CVE-2026-113290 CVE-2026-113291 CVE-2026-113292 CVE-2026-113293                      CVE-2026-113294 CVE-2026-113295 CVE-2026-113296 CVE-2026-113297                      CVE-2026-113298 CVE-2026-113299 CVE-2026-113300 CVE-2026-113301                      CVE-2026-113302 CVE-2026-113303 CVE-2026-113304 CVE-2026-113305                      CVE-2026-113306 CVE-2026-113307 CVE-2026-113308 CVE-2026-113309                      CVE-2026-113310 CVE-2026-113311 CVE-2026-113312 CVE-2026-113313                      CVE-2026-113314 CVE-2026-113315 CVE-2026-113316 CVE-2026-113317                      CVE-2026-113318 CVE-2026-113319 CVE-2026-113320 CVE-2026-113321                      CVE-2026-113322 CVE-2026-113323 CVE-2026-113324 CVE-2026-113325                      CVE-2026-113326 CVE-2026-113327 CVE-2026-113328 CVE-2026-113329                      CVE-2026-113330 CVE-2026-113331 CVE-2026-113332 CVE-2026-113333                      CVE-2026-113334 CVE-2026-113335 CVE-2026-113336 CVE-2026-113337                      CVE-2026-113338 CVE-2026-113339 CVE-2026-113340 CVE-2026-113341                      CVE-2026-113342 CVE-2026-113343 CVE-2026-113344

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For Debian 12 bookworm, these problems have been fixed in version     156.0.8078.47-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f4f0bb8d-ce20-11f1-9bfa-a8a1599412c6 advisory.

    Chrome Releases reports:
    This update includes 353 security fixes:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 156.0.4314.42. It is, therefore, affected by multiple vulnerabilities as referenced in the October 26, 2026 advisory.

  - Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-113016, CVE-2026-113231, CVE-2026-113264)

  - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-102299, CVE-2026-102321, CVE-2026-102323, CVE-2026-102326, CVE-2026-102328)

  - Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to     obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-102300)

  - Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had     compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted     HTML page. (Chromium security severity: High) (CVE-2026-102301)

  - Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-102302)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6577 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6577-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     October 22, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916                      CVE-2026-110917 CVE-2026-110918 CVE-2026-110919 CVE-2026-110920                      CVE-2026-110921 CVE-2026-110922 CVE-2026-112992 CVE-2026-112993                      CVE-2026-112994 CVE-2026-112995 CVE-2026-112996 CVE-2026-112997                      CVE-2026-112998 CVE-2026-112999 CVE-2026-113000 CVE-2026-113001                      CVE-2026-113002 CVE-2026-113003 CVE-2026-113004 CVE-2026-113005                      CVE-2026-113006 CVE-2026-113007 CVE-2026-113008 CVE-2026-113009                      CVE-2026-113010 CVE-2026-113011 CVE-2026-113012 CVE-2026-113013                      CVE-2026-113014 CVE-2026-113015 CVE-2026-113016 CVE-2026-113017                      CVE-2026-113018 CVE-2026-113019 CVE-2026-113020 CVE-2026-113021                      CVE-2026-113022 CVE-2026-113023 CVE-2026-113024 CVE-2026-113025                      CVE-2026-113026 CVE-2026-113027 CVE-2026-113028 CVE-2026-113029                      CVE-2026-113030 CVE-2026-113031 CVE-2026-113032 CVE-2026-113033                      CVE-2026-113034 CVE-2026-113035 CVE-2026-113036 CVE-2026-113037                      CVE-2026-113038 CVE-2026-113039 CVE-2026-113040 CVE-2026-113041                      CVE-2026-113042 CVE-2026-113043 CVE-2026-113044 CVE-2026-113045                      CVE-2026-113046 CVE-2026-113047 CVE-2026-113048 CVE-2026-113049                      CVE-2026-113050 CVE-2026-113051 CVE-2026-113052 CVE-2026-113053                      CVE-2026-113054 CVE-2026-113055 CVE-2026-113056 CVE-2026-113057                      CVE-2026-113058 CVE-2026-113059 CVE-2026-113060 CVE-2026-113061                      CVE-2026-113062 CVE-2026-113063 CVE-2026-113064 CVE-2026-113065                      CVE-2026-113066 CVE-2026-113067 CVE-2026-113068 CVE-2026-113069                      CVE-2026-113070 CVE-2026-113071 CVE-2026-113072 CVE-2026-113073                      CVE-2026-113074 CVE-2026-113075 CVE-2026-113076 CVE-2026-113077                      CVE-2026-113078 CVE-2026-113079 CVE-2026-113080 CVE-2026-113081                      CVE-2026-113082 CVE-2026-113083 CVE-2026-113084 CVE-2026-113085                      CVE-2026-113086 CVE-2026-113087 CVE-2026-113088 CVE-2026-113089                      CVE-2026-113090 CVE-2026-113091 CVE-2026-113092 CVE-2026-113093                      CVE-2026-113094 CVE-2026-113095 CVE-2026-113096 CVE-2026-113097                      CVE-2026-113098 CVE-2026-113099 CVE-2026-113100 CVE-2026-113101                      CVE-2026-113102 CVE-2026-113103 CVE-2026-113104 CVE-2026-113105                      CVE-2026-113106 CVE-2026-113107 CVE-2026-113108 CVE-2026-113109                      CVE-2026-113110 CVE-2026-113111 CVE-2026-113112 CVE-2026-113113                      CVE-2026-113114 CVE-2026-113115 CVE-2026-113116 CVE-2026-113117                      CVE-2026-113118 CVE-2026-113119 CVE-2026-113120 CVE-2026-113121                      CVE-2026-113122 CVE-2026-113123 CVE-2026-113124 CVE-2026-113125                      CVE-2026-113126 CVE-2026-113127 CVE-2026-113128 CVE-2026-113129                      CVE-2026-113130 CVE-2026-113131 CVE-2026-113132 CVE-2026-113133                      CVE-2026-113134 CVE-2026-113135 CVE-2026-113136 CVE-2026-113137                      CVE-2026-113138 CVE-2026-113139 CVE-2026-113140 CVE-2026-113141                      CVE-2026-113142 CVE-2026-113143 CVE-2026-113144 CVE-2026-113145                      CVE-2026-113146 CVE-2026-113147 CVE-2026-113148 CVE-2026-113149                      CVE-2026-113150 CVE-2026-113151 CVE-2026-113152 CVE-2026-113153                      CVE-2026-113154 CVE-2026-113155 CVE-2026-113156 CVE-2026-113157                      CVE-2026-113158 CVE-2026-113159 CVE-2026-113160 CVE-2026-113161                      CVE-2026-113162 CVE-2026-113163 CVE-2026-113164 CVE-2026-113165                      CVE-2026-113166 CVE-2026-113167 CVE-2026-113168 CVE-2026-113169                      CVE-2026-113170 CVE-2026-113171 CVE-2026-113172 CVE-2026-113173                      CVE-2026-113174 CVE-2026-113175 CVE-2026-113176 CVE-2026-113177                      CVE-2026-113178 CVE-2026-113179 CVE-2026-113180 CVE-2026-113181                      CVE-2026-113182 CVE-2026-113183 CVE-2026-113184 CVE-2026-113185                      CVE-2026-113186 CVE-2026-113187 CVE-2026-113188 CVE-2026-113189                      CVE-2026-113190 CVE-2026-113191 CVE-2026-113192 CVE-2026-113193                      CVE-2026-113194 CVE-2026-113195 CVE-2026-113196 CVE-2026-113197                      CVE-2026-113198 CVE-2026-113199 CVE-2026-113200 CVE-2026-113201                      CVE-2026-113202 CVE-2026-113203 CVE-2026-113204 CVE-2026-113205                      CVE-2026-113206 CVE-2026-113207 CVE-2026-113208 CVE-2026-113209                      CVE-2026-113210 CVE-2026-113211 CVE-2026-113212 CVE-2026-113213                      CVE-2026-113214 CVE-2026-113215 CVE-2026-113216 CVE-2026-113217                      CVE-2026-113218 CVE-2026-113219 CVE-2026-113220 CVE-2026-113221                      CVE-2026-113222 CVE-2026-113223 CVE-2026-113224 CVE-2026-113225                      CVE-2026-113226 CVE-2026-113227 CVE-2026-113228 CVE-2026-113229                      CVE-2026-113230 CVE-2026-113231 CVE-2026-113232 CVE-2026-113233                      CVE-2026-113234 CVE-2026-113235 CVE-2026-113236 CVE-2026-113237                      CVE-2026-113238 CVE-2026-113239 CVE-2026-113240 CVE-2026-113241                      CVE-2026-113242 CVE-2026-113243 CVE-2026-113244 CVE-2026-113245                      CVE-2026-113246 CVE-2026-113247 CVE-2026-113248 CVE-2026-113249                      CVE-2026-113250 CVE-2026-113251 CVE-2026-113252 CVE-2026-113253                      CVE-2026-113254 CVE-2026-113255 CVE-2026-113256 CVE-2026-113257                      CVE-2026-113258 CVE-2026-113259 CVE-2026-113260 CVE-2026-113261                      CVE-2026-113262 CVE-2026-113263 CVE-2026-113264 CVE-2026-113265                      CVE-2026-113266 CVE-2026-113267 CVE-2026-113268 CVE-2026-113269                      CVE-2026-113270 CVE-2026-113271 CVE-2026-113272 CVE-2026-113273                      CVE-2026-113274 CVE-2026-113275 CVE-2026-113276 CVE-2026-113277                      CVE-2026-113278 CVE-2026-113279 CVE-2026-113280 CVE-2026-113281                      CVE-2026-113282 CVE-2026-113283 CVE-2026-113284 CVE-2026-113285                      CVE-2026-113286 CVE-2026-113287 CVE-2026-113288 CVE-2026-113289                      CVE-2026-113290 CVE-2026-113291 CVE-2026-113292 CVE-2026-113293                      CVE-2026-113294 CVE-2026-113295 CVE-2026-113296 CVE-2026-113297                      CVE-2026-113298 CVE-2026-113299 CVE-2026-113300 CVE-2026-113301                      CVE-2026-113302 CVE-2026-113303 CVE-2026-113304 CVE-2026-113305                      CVE-2026-113306 CVE-2026-113307 CVE-2026-113308 CVE-2026-113309                      CVE-2026-113310 CVE-2026-113311 CVE-2026-113312 CVE-2026-113313                      CVE-2026-113314 CVE-2026-113315 CVE-2026-113316 CVE-2026-113317                      CVE-2026-113318 CVE-2026-113319 CVE-2026-113320 CVE-2026-113321                      CVE-2026-113322 CVE-2026-113323 CVE-2026-113324 CVE-2026-113325                      CVE-2026-113326 CVE-2026-113327 CVE-2026-113328 CVE-2026-113329                      CVE-2026-113330 CVE-2026-113331 CVE-2026-113332 CVE-2026-113333                      CVE-2026-113334 CVE-2026-113335 CVE-2026-113336 CVE-2026-113337                      CVE-2026-113338 CVE-2026-113339 CVE-2026-113340 CVE-2026-113341                      CVE-2026-113342 CVE-2026-113343 CVE-2026-113344

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 156.0.8078.47-1~deb13u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 156.0.8078.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_02018666648 advisory.

  - Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium     security severity: Medium) (CVE-2026-113264)

  - Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-113341)

  - Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security     severity: High) (CVE-2026-112993)

  - Information leak in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain     cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-113000)

  - Incorrect authorization in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to     bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-113006)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 156.0.8078.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_02018666648 advisory.

  - Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium     security severity: Medium) (CVE-2026-113264)

  - Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-113341)

  - Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security     severity: High) (CVE-2026-112993)

  - Information leak in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain     cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-113000)

  - Incorrect authorization in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to     bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-113006)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
374755	openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22185-1)	Nessus	SuSE Local Security Checks	Local	high
374604	Fedora 45 : chromium (2026-9d6fc6be6c)	Nessus	Fedora Local Security Checks	Local	critical
372889	Fedora 43 : chromium (2026-e61285733f)	Nessus	Fedora Local Security Checks	Local	critical
371746	Fedora 44 : chromium (2026-ccc7071380)	Nessus	Fedora Local Security Checks	Local	critical
477034	Echo: chromium: security update to 156.0.8078.47	Tenable Cloud Security	Echo Local Security Checks	Local	medium
477034	Echo: chromium: security update to 156.0.8078.47	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
371253	Debian dla-4853 : chromium - security update	Nessus	Debian Local Security Checks	Local	high
371162	FreeBSD : chromium -- security fixes (f4f0bb8d-ce20-11f1-9bfa-a8a1599412c6)	Nessus	FreeBSD Local Security Checks	Local	high
476805	Chainguard: multiple chromium packages: security update to 156.0.8078.47-r0	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
476805	Chainguard: multiple chromium packages: security update to 156.0.8078.47-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
370895	Microsoft Edge (Chromium) < 156.0.4314.42 Multiple Vulnerabilities	Nessus	Windows	Local	high
370505	Debian dsa-6577 : chromium - security update	Nessus	Debian Local Security Checks	Local	high
369056	Google Chrome < 156.0.8078.47 Multiple Vulnerabilities	Nessus	Windows	Local	high
369055	Google Chrome < 156.0.8078.47 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2026-113002

medium

Tenable Plugins

high

critical

critical

critical

medium

medium

high

high

medium

medium

high

high

high

high