Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

freebsd f4f0bb8d-ce20-11f1-9bfa-a8a1599412c6: chromium -- security fixes

The version of Microsoft Edge installed on the remote Windows host is prior to 156.0.4314.42. It is, therefore, affected by multiple vulnerabilities as referenced in the October 22, 2026 advisory.

  - Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-113016, CVE-2026-113231, CVE-2026-113264)

  - Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to     potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-112992)

  - Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-112993)

  - Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)     (CVE-2026-112994)

  - Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-112995)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6577 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6577-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     October 22, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916                      CVE-2026-110917 CVE-2026-110918 CVE-2026-110919 CVE-2026-110920                      CVE-2026-110921 CVE-2026-110922 CVE-2026-112992 CVE-2026-112993                      CVE-2026-112994 CVE-2026-112995 CVE-2026-112996 CVE-2026-112997                      CVE-2026-112998 CVE-2026-112999 CVE-2026-113000 CVE-2026-113001                      CVE-2026-113002 CVE-2026-113003 CVE-2026-113004 CVE-2026-113005                      CVE-2026-113006 CVE-2026-113007 CVE-2026-113008 CVE-2026-113009                      CVE-2026-113010 CVE-2026-113011 CVE-2026-113012 CVE-2026-113013                      CVE-2026-113014 CVE-2026-113015 CVE-2026-113016 CVE-2026-113017                      CVE-2026-113018 CVE-2026-113019 CVE-2026-113020 CVE-2026-113021                      CVE-2026-113022 CVE-2026-113023 CVE-2026-113024 CVE-2026-113025                      CVE-2026-113026 CVE-2026-113027 CVE-2026-113028 CVE-2026-113029                      CVE-2026-113030 CVE-2026-113031 CVE-2026-113032 CVE-2026-113033                      CVE-2026-113034 CVE-2026-113035 CVE-2026-113036 CVE-2026-113037                      CVE-2026-113038 CVE-2026-113039 CVE-2026-113040 CVE-2026-113041                      CVE-2026-113042 CVE-2026-113043 CVE-2026-113044 CVE-2026-113045                      CVE-2026-113046 CVE-2026-113047 CVE-2026-113048 CVE-2026-113049                      CVE-2026-113050 CVE-2026-113051 CVE-2026-113052 CVE-2026-113053                      CVE-2026-113054 CVE-2026-113055 CVE-2026-113056 CVE-2026-113057                      CVE-2026-113058 CVE-2026-113059 CVE-2026-113060 CVE-2026-113061                      CVE-2026-113062 CVE-2026-113063 CVE-2026-113064 CVE-2026-113065                      CVE-2026-113066 CVE-2026-113067 CVE-2026-113068 CVE-2026-113069                      CVE-2026-113070 CVE-2026-113071 CVE-2026-113072 CVE-2026-113073                      CVE-2026-113074 CVE-2026-113075 CVE-2026-113076 CVE-2026-113077                      CVE-2026-113078 CVE-2026-113079 CVE-2026-113080 CVE-2026-113081                      CVE-2026-113082 CVE-2026-113083 CVE-2026-113084 CVE-2026-113085                      CVE-2026-113086 CVE-2026-113087 CVE-2026-113088 CVE-2026-113089                      CVE-2026-113090 CVE-2026-113091 CVE-2026-113092 CVE-2026-113093                      CVE-2026-113094 CVE-2026-113095 CVE-2026-113096 CVE-2026-113097                      CVE-2026-113098 CVE-2026-113099 CVE-2026-113100 CVE-2026-113101                      CVE-2026-113102 CVE-2026-113103 CVE-2026-113104 CVE-2026-113105                      CVE-2026-113106 CVE-2026-113107 CVE-2026-113108 CVE-2026-113109                      CVE-2026-113110 CVE-2026-113111 CVE-2026-113112 CVE-2026-113113                      CVE-2026-113114 CVE-2026-113115 CVE-2026-113116 CVE-2026-113117                      CVE-2026-113118 CVE-2026-113119 CVE-2026-113120 CVE-2026-113121                      CVE-2026-113122 CVE-2026-113123 CVE-2026-113124 CVE-2026-113125                      CVE-2026-113126 CVE-2026-113127 CVE-2026-113128 CVE-2026-113129                      CVE-2026-113130 CVE-2026-113131 CVE-2026-113132 CVE-2026-113133                      CVE-2026-113134 CVE-2026-113135 CVE-2026-113136 CVE-2026-113137                      CVE-2026-113138 CVE-2026-113139 CVE-2026-113140 CVE-2026-113141                      CVE-2026-113142 CVE-2026-113143 CVE-2026-113144 CVE-2026-113145                      CVE-2026-113146 CVE-2026-113147 CVE-2026-113148 CVE-2026-113149                      CVE-2026-113150 CVE-2026-113151 CVE-2026-113152 CVE-2026-113153                      CVE-2026-113154 CVE-2026-113155 CVE-2026-113156 CVE-2026-113157                      CVE-2026-113158 CVE-2026-113159 CVE-2026-113160 CVE-2026-113161                      CVE-2026-113162 CVE-2026-113163 CVE-2026-113164 CVE-2026-113165                      CVE-2026-113166 CVE-2026-113167 CVE-2026-113168 CVE-2026-113169                      CVE-2026-113170 CVE-2026-113171 CVE-2026-113172 CVE-2026-113173                      CVE-2026-113174 CVE-2026-113175 CVE-2026-113176 CVE-2026-113177                      CVE-2026-113178 CVE-2026-113179 CVE-2026-113180 CVE-2026-113181                      CVE-2026-113182 CVE-2026-113183 CVE-2026-113184 CVE-2026-113185                      CVE-2026-113186 CVE-2026-113187 CVE-2026-113188 CVE-2026-113189                      CVE-2026-113190 CVE-2026-113191 CVE-2026-113192 CVE-2026-113193                      CVE-2026-113194 CVE-2026-113195 CVE-2026-113196 CVE-2026-113197                      CVE-2026-113198 CVE-2026-113199 CVE-2026-113200 CVE-2026-113201                      CVE-2026-113202 CVE-2026-113203 CVE-2026-113204 CVE-2026-113205                      CVE-2026-113206 CVE-2026-113207 CVE-2026-113208 CVE-2026-113209                      CVE-2026-113210 CVE-2026-113211 CVE-2026-113212 CVE-2026-113213                      CVE-2026-113214 CVE-2026-113215 CVE-2026-113216 CVE-2026-113217                      CVE-2026-113218 CVE-2026-113219 CVE-2026-113220 CVE-2026-113221                      CVE-2026-113222 CVE-2026-113223 CVE-2026-113224 CVE-2026-113225                      CVE-2026-113226 CVE-2026-113227 CVE-2026-113228 CVE-2026-113229                      CVE-2026-113230 CVE-2026-113231 CVE-2026-113232 CVE-2026-113233                      CVE-2026-113234 CVE-2026-113235 CVE-2026-113236 CVE-2026-113237                      CVE-2026-113238 CVE-2026-113239 CVE-2026-113240 CVE-2026-113241                      CVE-2026-113242 CVE-2026-113243 CVE-2026-113244 CVE-2026-113245                      CVE-2026-113246 CVE-2026-113247 CVE-2026-113248 CVE-2026-113249                      CVE-2026-113250 CVE-2026-113251 CVE-2026-113252 CVE-2026-113253                      CVE-2026-113254 CVE-2026-113255 CVE-2026-113256 CVE-2026-113257                      CVE-2026-113258 CVE-2026-113259 CVE-2026-113260 CVE-2026-113261                      CVE-2026-113262 CVE-2026-113263 CVE-2026-113264 CVE-2026-113265                      CVE-2026-113266 CVE-2026-113267 CVE-2026-113268 CVE-2026-113269                      CVE-2026-113270 CVE-2026-113271 CVE-2026-113272 CVE-2026-113273                      CVE-2026-113274 CVE-2026-113275 CVE-2026-113276 CVE-2026-113277                      CVE-2026-113278 CVE-2026-113279 CVE-2026-113280 CVE-2026-113281                      CVE-2026-113282 CVE-2026-113283 CVE-2026-113284 CVE-2026-113285                      CVE-2026-113286 CVE-2026-113287 CVE-2026-113288 CVE-2026-113289                      CVE-2026-113290 CVE-2026-113291 CVE-2026-113292 CVE-2026-113293                      CVE-2026-113294 CVE-2026-113295 CVE-2026-113296 CVE-2026-113297                      CVE-2026-113298 CVE-2026-113299 CVE-2026-113300 CVE-2026-113301                      CVE-2026-113302 CVE-2026-113303 CVE-2026-113304 CVE-2026-113305                      CVE-2026-113306 CVE-2026-113307 CVE-2026-113308 CVE-2026-113309                      CVE-2026-113310 CVE-2026-113311 CVE-2026-113312 CVE-2026-113313                      CVE-2026-113314 CVE-2026-113315 CVE-2026-113316 CVE-2026-113317                      CVE-2026-113318 CVE-2026-113319 CVE-2026-113320 CVE-2026-113321                      CVE-2026-113322 CVE-2026-113323 CVE-2026-113324 CVE-2026-113325                      CVE-2026-113326 CVE-2026-113327 CVE-2026-113328 CVE-2026-113329                      CVE-2026-113330 CVE-2026-113331 CVE-2026-113332 CVE-2026-113333                      CVE-2026-113334 CVE-2026-113335 CVE-2026-113336 CVE-2026-113337                      CVE-2026-113338 CVE-2026-113339 CVE-2026-113340 CVE-2026-113341                      CVE-2026-113342 CVE-2026-113343 CVE-2026-113344

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 156.0.8078.47-1~deb13u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially     read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-113051)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Google Chrome installed on the remote Windows host is prior to 156.0.8078.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_02018666648 advisory.

  - Use after free in Performance. (CVE-2026-113344)

  - Use after free in Input. (CVE-2026-112993, CVE-2026-113025, CVE-2026-113068, CVE-2026-113290)

  - Memory corruption in Paint. (CVE-2026-113000, CVE-2026-113280)

  - Out of bounds read in Navigation. (CVE-2026-113006)

  - Use after free in CredentialProvider. (CVE-2026-113011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 156.0.8078.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_02018666648 advisory.

  - Use after free in Performance. (CVE-2026-113344)

  - Use after free in Input. (CVE-2026-112993, CVE-2026-113025, CVE-2026-113068, CVE-2026-113290)

  - Memory corruption in Paint. (CVE-2026-113000, CVE-2026-113280)

  - Out of bounds read in Navigation. (CVE-2026-113006)

  - Use after free in CredentialProvider. (CVE-2026-113011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
370895	Microsoft Edge (Chromium) < 156.0.4314.42 Multiple Vulnerabilities	Nessus	Windows	Local	high
370505	Debian dsa-6577 : chromium - security update	Nessus	Debian Local Security Checks	Local	high
369716	Linux Distros Unpatched Vulnerability : CVE-2026-113051	Nessus	Misc.	Local	medium
369056	Google Chrome < 156.0.8078.47 Multiple Vulnerabilities	Nessus	Windows	Local	critical
369055	Google Chrome < 156.0.8078.47 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-113051

medium

Tenable Plugins

Coming Soon

high

high

medium

critical

critical