Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4672 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4672-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     July 06, 2026                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : chromium     Version        : 150.0.7871.46-1~deb12u1     CVE ID         : CVE-2026-13281 CVE-2026-13282 CVE-2026-13283 CVE-2026-13774                      CVE-2026-13775 CVE-2026-13776 CVE-2026-13777 CVE-2026-13778                      CVE-2026-13779 CVE-2026-13780 CVE-2026-13781 CVE-2026-13782                      CVE-2026-13783 CVE-2026-13784 CVE-2026-13785 CVE-2026-13786                      CVE-2026-13787 CVE-2026-13788 CVE-2026-13789 CVE-2026-13790                      CVE-2026-13791 CVE-2026-13792 CVE-2026-13793 CVE-2026-13794                      CVE-2026-13795 CVE-2026-13796 CVE-2026-13797 CVE-2026-13798                      CVE-2026-13799 CVE-2026-13800 CVE-2026-13801 CVE-2026-13802                      CVE-2026-13803 CVE-2026-13804 CVE-2026-13805 CVE-2026-13806                      CVE-2026-13807 CVE-2026-13808 CVE-2026-13809 CVE-2026-13810                      CVE-2026-13811 CVE-2026-13812 CVE-2026-13813 CVE-2026-13814                      CVE-2026-13815 CVE-2026-13816 CVE-2026-13817 CVE-2026-13818                      CVE-2026-13819 CVE-2026-13820 CVE-2026-13821 CVE-2026-13822                      CVE-2026-13823 CVE-2026-13824 CVE-2026-13825 CVE-2026-13826                      CVE-2026-13827 CVE-2026-13828 CVE-2026-13829 CVE-2026-13830                      CVE-2026-13831 CVE-2026-13832 CVE-2026-13833 CVE-2026-13834                      CVE-2026-13835 CVE-2026-13836 CVE-2026-13837 CVE-2026-13838                      CVE-2026-13839 CVE-2026-13840 CVE-2026-13841 CVE-2026-13842                      CVE-2026-13843 CVE-2026-13844 CVE-2026-13845 CVE-2026-13846                      CVE-2026-13847 CVE-2026-13848 CVE-2026-13849 CVE-2026-13850                      CVE-2026-13851 CVE-2026-13852 CVE-2026-13853 CVE-2026-13854                      CVE-2026-13855 CVE-2026-13856 CVE-2026-13857 CVE-2026-13858                      CVE-2026-13859 CVE-2026-13860 CVE-2026-13861 CVE-2026-13862                      CVE-2026-13863 CVE-2026-13864 CVE-2026-13865 CVE-2026-13866                      CVE-2026-13867 CVE-2026-13868 CVE-2026-13869 CVE-2026-13870                      CVE-2026-13871 CVE-2026-13872 CVE-2026-13873 CVE-2026-13874                      CVE-2026-13875 CVE-2026-13876 CVE-2026-13877 CVE-2026-13878                      CVE-2026-13879 CVE-2026-13880 CVE-2026-13881 CVE-2026-13882                      CVE-2026-13883 CVE-2026-13884 CVE-2026-13885 CVE-2026-13886                      CVE-2026-13887 CVE-2026-13888 CVE-2026-13889 CVE-2026-13890                      CVE-2026-13891 CVE-2026-13892 CVE-2026-13893 CVE-2026-13894                      CVE-2026-13895 CVE-2026-13896 CVE-2026-13897 CVE-2026-13898                      CVE-2026-13899 CVE-2026-13900 CVE-2026-13901 CVE-2026-13902                      CVE-2026-13903 CVE-2026-13904 CVE-2026-13905 CVE-2026-13906                      CVE-2026-13907 CVE-2026-13908 CVE-2026-13909 CVE-2026-13910                      CVE-2026-13911 CVE-2026-13912 CVE-2026-13913 CVE-2026-13914                      CVE-2026-13915 CVE-2026-13916 CVE-2026-13917 CVE-2026-13918                      CVE-2026-13919 CVE-2026-13920 CVE-2026-13921 CVE-2026-13922                      CVE-2026-13923 CVE-2026-13924 CVE-2026-13925 CVE-2026-13926                      CVE-2026-13927 CVE-2026-13928 CVE-2026-13929 CVE-2026-13930                      CVE-2026-13931 CVE-2026-13932 CVE-2026-13933 CVE-2026-13934                      CVE-2026-13935 CVE-2026-13936 CVE-2026-13937 CVE-2026-13938                      CVE-2026-13939 CVE-2026-13940 CVE-2026-13941 CVE-2026-13942                      CVE-2026-13943 CVE-2026-13944 CVE-2026-13945 CVE-2026-13946                      CVE-2026-13947 CVE-2026-13948 CVE-2026-13949 CVE-2026-13950                      CVE-2026-13951 CVE-2026-13952 CVE-2026-13953 CVE-2026-13954                      CVE-2026-13955 CVE-2026-13956 CVE-2026-13957 CVE-2026-13958                      CVE-2026-13959 CVE-2026-13960 CVE-2026-13961 CVE-2026-13962                      CVE-2026-13963 CVE-2026-13964 CVE-2026-13965 CVE-2026-13966                      CVE-2026-13967 CVE-2026-13968 CVE-2026-13969 CVE-2026-13970                      CVE-2026-13971 CVE-2026-13972 CVE-2026-13973 CVE-2026-13974                      CVE-2026-13975 CVE-2026-13976 CVE-2026-13977 CVE-2026-13978                      CVE-2026-13979 CVE-2026-13980 CVE-2026-13981 CVE-2026-13982                      CVE-2026-13983 CVE-2026-13984 CVE-2026-13985 CVE-2026-13986                      CVE-2026-13987 CVE-2026-13988 CVE-2026-13989 CVE-2026-13990                      CVE-2026-13991 CVE-2026-13992 CVE-2026-13993 CVE-2026-13994                      CVE-2026-13995 CVE-2026-13996 CVE-2026-13997 CVE-2026-13998                      CVE-2026-13999 CVE-2026-14000 CVE-2026-14001 CVE-2026-14002                      CVE-2026-14003 CVE-2026-14004 CVE-2026-14005 CVE-2026-14006                      CVE-2026-14007 CVE-2026-14008 CVE-2026-14009 CVE-2026-14010                      CVE-2026-14011 CVE-2026-14012 CVE-2026-14013 CVE-2026-14014                      CVE-2026-14015 CVE-2026-14016 CVE-2026-14017 CVE-2026-14018                      CVE-2026-14019 CVE-2026-14020 CVE-2026-14021 CVE-2026-14022                      CVE-2026-14023 CVE-2026-14024 CVE-2026-14025 CVE-2026-14026                      CVE-2026-14027 CVE-2026-14028 CVE-2026-14030 CVE-2026-14031                      CVE-2026-14032 CVE-2026-14033 CVE-2026-14034 CVE-2026-14035                      CVE-2026-14036 CVE-2026-14037 CVE-2026-14038 CVE-2026-14039                      CVE-2026-14040 CVE-2026-14041 CVE-2026-14042 CVE-2026-14043                      CVE-2026-14044 CVE-2026-14045 CVE-2026-14046 CVE-2026-14047                      CVE-2026-14048 CVE-2026-14049 CVE-2026-14050 CVE-2026-14051                      CVE-2026-14052 CVE-2026-14053 CVE-2026-14054 CVE-2026-14055                      CVE-2026-14056 CVE-2026-14057 CVE-2026-14058 CVE-2026-14059                      CVE-2026-14060 CVE-2026-14061 CVE-2026-14062 CVE-2026-14063                      CVE-2026-14064 CVE-2026-14065 CVE-2026-14066 CVE-2026-14067                      CVE-2026-14068 CVE-2026-14069 CVE-2026-14070 CVE-2026-14071                      CVE-2026-14072 CVE-2026-14073 CVE-2026-14074 CVE-2026-14075                      CVE-2026-14076 CVE-2026-14077 CVE-2026-14078 CVE-2026-14079                      CVE-2026-14080 CVE-2026-14081 CVE-2026-14082 CVE-2026-14083                      CVE-2026-14084 CVE-2026-14085 CVE-2026-14086 CVE-2026-14087                      CVE-2026-14088 CVE-2026-14089 CVE-2026-14090 CVE-2026-14091                      CVE-2026-14092 CVE-2026-14093 CVE-2026-14094 CVE-2026-14095                      CVE-2026-14096 CVE-2026-14097 CVE-2026-14098 CVE-2026-14099                      CVE-2026-14100 CVE-2026-14101 CVE-2026-14102 CVE-2026-14103                      CVE-2026-14104 CVE-2026-14105 CVE-2026-14106 CVE-2026-14107                      CVE-2026-14108 CVE-2026-14109 CVE-2026-14110 CVE-2026-14111                      CVE-2026-14112 CVE-2026-14113 CVE-2026-14114 CVE-2026-14115                      CVE-2026-14116 CVE-2026-14117 CVE-2026-14118 CVE-2026-14119                      CVE-2026-14120 CVE-2026-14121 CVE-2026-14122 CVE-2026-14123                      CVE-2026-14124 CVE-2026-14125 CVE-2026-14126 CVE-2026-14127                      CVE-2026-14128 CVE-2026-14129 CVE-2026-14130 CVE-2026-14131                      CVE-2026-14132 CVE-2026-14133 CVE-2026-14134 CVE-2026-14135                      CVE-2026-14136 CVE-2026-14137 CVE-2026-14138 CVE-2026-14139                      CVE-2026-14140 CVE-2026-14141 CVE-2026-14142 CVE-2026-14143                      CVE-2026-14144 CVE-2026-14145 CVE-2026-14146 CVE-2026-14147                      CVE-2026-14148 CVE-2026-14149 CVE-2026-14150 CVE-2026-14151                      CVE-2026-14152 CVE-2026-14153 CVE-2026-14154 CVE-2026-14155                      CVE-2026-14156 CVE-2026-14381 CVE-2026-14382 CVE-2026-14383                      CVE-2026-14384 CVE-2026-14385 CVE-2026-14386 CVE-2026-14387                      CVE-2026-14388 CVE-2026-14389 CVE-2026-14390 CVE-2026-14391                      CVE-2026-14392 CVE-2026-14393 CVE-2026-14394 CVE-2026-14395                      CVE-2026-14396 CVE-2026-14397 CVE-2026-14398 CVE-2026-14399                      CVE-2026-14400 CVE-2026-14401 CVE-2026-14402 CVE-2026-14403                      CVE-2026-14404 CVE-2026-14405 CVE-2026-14406 CVE-2026-14407                      CVE-2026-14408 CVE-2026-14409 CVE-2026-14410 CVE-2026-14411                      CVE-2026-14412 CVE-2026-14413 CVE-2026-14414 CVE-2026-14415                      CVE-2026-14416 CVE-2026-14417 CVE-2026-14418 CVE-2026-14419                      CVE-2026-14420 CVE-2026-14421 CVE-2026-14422 CVE-2026-14423                      CVE-2026-14424 CVE-2026-14425 CVE-2026-14426 CVE-2026-14427                      CVE-2026-14428 CVE-2026-14429 CVE-2026-14430 CVE-2026-14431                      CVE-2026-14432

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For Debian 12 bookworm, these problems have been fixed in version     150.0.7871.46-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 659e52d0-7574-11f1-8de5-a8a1599412c6 advisory.

    Chrome Releases reports:
    This update includes 382 security fixes:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: High) (CVE-2026-13789)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
325675	Debian dla-4672 : chromium - security update	Nessus	Debian Local Security Checks	critical
324816	FreeBSD : chromium -- security fixes (659e52d0-7574-11f1-8de5-a8a1599412c6)	Nessus	FreeBSD Local Security Checks	critical
324292	Linux Distros Unpatched Vulnerability : CVE-2026-13789	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-13789

critical

Tenable Plugins

critical

critical

critical