Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6378 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6378-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     July 05, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2026-13281 CVE-2026-13282 CVE-2026-13283 CVE-2026-13774                      CVE-2026-13775 CVE-2026-13776 CVE-2026-13777 CVE-2026-13778                      CVE-2026-13779 CVE-2026-13780 CVE-2026-13781 CVE-2026-13782                      CVE-2026-13783 CVE-2026-13784 CVE-2026-13785 CVE-2026-13786                      CVE-2026-13787 CVE-2026-13788 CVE-2026-13790 CVE-2026-13791                      CVE-2026-13792 CVE-2026-13793 CVE-2026-13794 CVE-2026-13795                      CVE-2026-13796 CVE-2026-13797 CVE-2026-13798 CVE-2026-13799                      CVE-2026-13800 CVE-2026-13801 CVE-2026-13802 CVE-2026-13803                      CVE-2026-13804 CVE-2026-13805 CVE-2026-13806 CVE-2026-13807                      CVE-2026-13808 CVE-2026-13809 CVE-2026-13810 CVE-2026-13811                      CVE-2026-13812 CVE-2026-13813 CVE-2026-13814 CVE-2026-13815                      CVE-2026-13816 CVE-2026-13817 CVE-2026-13818 CVE-2026-13819                      CVE-2026-13820 CVE-2026-13821 CVE-2026-13822 CVE-2026-13823                      CVE-2026-13824 CVE-2026-13825 CVE-2026-13826 CVE-2026-13827                      CVE-2026-13828 CVE-2026-13829 CVE-2026-13830 CVE-2026-13831                      CVE-2026-13832 CVE-2026-13833 CVE-2026-13834 CVE-2026-13835                      CVE-2026-13836 CVE-2026-13837 CVE-2026-13838 CVE-2026-13839                      CVE-2026-13840 CVE-2026-13841 CVE-2026-13842 CVE-2026-13843                      CVE-2026-13844 CVE-2026-13845 CVE-2026-13846 CVE-2026-13847                      CVE-2026-13848 CVE-2026-13849 CVE-2026-13850 CVE-2026-13851                      CVE-2026-13852 CVE-2026-13853 CVE-2026-13854 CVE-2026-13855                      CVE-2026-13856 CVE-2026-13857 CVE-2026-13858 CVE-2026-13859                      CVE-2026-13860 CVE-2026-13861 CVE-2026-13862 CVE-2026-13863                      CVE-2026-13864 CVE-2026-13865 CVE-2026-13866 CVE-2026-13867                      CVE-2026-13868 CVE-2026-13869 CVE-2026-13870 CVE-2026-13871                      CVE-2026-13872 CVE-2026-13873 CVE-2026-13874 CVE-2026-13875                      CVE-2026-13876 CVE-2026-13877 CVE-2026-13878 CVE-2026-13879                      CVE-2026-13880 CVE-2026-13881 CVE-2026-13882 CVE-2026-13883                      CVE-2026-13884 CVE-2026-13885 CVE-2026-13886 CVE-2026-13887                      CVE-2026-13888 CVE-2026-13889 CVE-2026-13890 CVE-2026-13891                      CVE-2026-13892 CVE-2026-13893 CVE-2026-13894 CVE-2026-13895                      CVE-2026-13896 CVE-2026-13897 CVE-2026-13898 CVE-2026-13899                      CVE-2026-13900 CVE-2026-13901 CVE-2026-13902 CVE-2026-13903                      CVE-2026-13904 CVE-2026-13905 CVE-2026-13906 CVE-2026-13907                      CVE-2026-13908 CVE-2026-13909 CVE-2026-13910 CVE-2026-13911                      CVE-2026-13912 CVE-2026-13913 CVE-2026-13914 CVE-2026-13915                      CVE-2026-13916 CVE-2026-13917 CVE-2026-13918 CVE-2026-13919                      CVE-2026-13920 CVE-2026-13921 CVE-2026-13922 CVE-2026-13923                      CVE-2026-13924 CVE-2026-13925 CVE-2026-13926 CVE-2026-13927                      CVE-2026-13928 CVE-2026-13929 CVE-2026-13930 CVE-2026-13931                      CVE-2026-13932 CVE-2026-13933 CVE-2026-13934 CVE-2026-13935                      CVE-2026-13936 CVE-2026-13937 CVE-2026-13938 CVE-2026-13939                      CVE-2026-13940 CVE-2026-13941 CVE-2026-13942 CVE-2026-13943                      CVE-2026-13944 CVE-2026-13945 CVE-2026-13946 CVE-2026-13947                      CVE-2026-13948 CVE-2026-13949 CVE-2026-13950 CVE-2026-13951                      CVE-2026-13952 CVE-2026-13953 CVE-2026-13954 CVE-2026-13955                      CVE-2026-13956 CVE-2026-13957 CVE-2026-13958 CVE-2026-13959                      CVE-2026-13960 CVE-2026-13961 CVE-2026-13962 CVE-2026-13963                      CVE-2026-13964 CVE-2026-13965 CVE-2026-13966 CVE-2026-13967                      CVE-2026-13968 CVE-2026-13969 CVE-2026-13970 CVE-2026-13971                      CVE-2026-13972 CVE-2026-13973 CVE-2026-13974 CVE-2026-13975                      CVE-2026-13976 CVE-2026-13977 CVE-2026-13978 CVE-2026-13979                      CVE-2026-13980 CVE-2026-13981 CVE-2026-13982 CVE-2026-13983                      CVE-2026-13984 CVE-2026-13985 CVE-2026-13986 CVE-2026-13987                      CVE-2026-13988 CVE-2026-13989 CVE-2026-13990 CVE-2026-13991                      CVE-2026-13992 CVE-2026-13993 CVE-2026-13994 CVE-2026-13995                      CVE-2026-13996 CVE-2026-13997 CVE-2026-13998 CVE-2026-13999                      CVE-2026-14000 CVE-2026-14001 CVE-2026-14002 CVE-2026-14003                      CVE-2026-14004 CVE-2026-14005 CVE-2026-14006 CVE-2026-14007                      CVE-2026-14008 CVE-2026-14009 CVE-2026-14010 CVE-2026-14011                      CVE-2026-14012 CVE-2026-14013 CVE-2026-14014 CVE-2026-14015                      CVE-2026-14016 CVE-2026-14017 CVE-2026-14018 CVE-2026-14019                      CVE-2026-14020 CVE-2026-14021 CVE-2026-14022 CVE-2026-14023                      CVE-2026-14024 CVE-2026-14025 CVE-2026-14026 CVE-2026-14027                      CVE-2026-14028 CVE-2026-14030 CVE-2026-14031 CVE-2026-14032                      CVE-2026-14033 CVE-2026-14034 CVE-2026-14035 CVE-2026-14036                      CVE-2026-14037 CVE-2026-14038 CVE-2026-14039 CVE-2026-14040                      CVE-2026-14041 CVE-2026-14042 CVE-2026-14043 CVE-2026-14044                      CVE-2026-14045 CVE-2026-14046 CVE-2026-14047 CVE-2026-14048                      CVE-2026-14049 CVE-2026-14050 CVE-2026-14051 CVE-2026-14052                      CVE-2026-14053 CVE-2026-14054 CVE-2026-14055 CVE-2026-14056                      CVE-2026-14057 CVE-2026-14058 CVE-2026-14059 CVE-2026-14060                      CVE-2026-14061 CVE-2026-14062 CVE-2026-14063 CVE-2026-14064                      CVE-2026-14065 CVE-2026-14066 CVE-2026-14067 CVE-2026-14068                      CVE-2026-14069 CVE-2026-14070 CVE-2026-14071 CVE-2026-14072                      CVE-2026-14073 CVE-2026-14074 CVE-2026-14075 CVE-2026-14076                      CVE-2026-14077 CVE-2026-14078 CVE-2026-14079 CVE-2026-14080                      CVE-2026-14081 CVE-2026-14082 CVE-2026-14083 CVE-2026-14084                      CVE-2026-14085 CVE-2026-14086 CVE-2026-14087 CVE-2026-14088                      CVE-2026-14089 CVE-2026-14090 CVE-2026-14091 CVE-2026-14092                      CVE-2026-14093 CVE-2026-14094 CVE-2026-14095 CVE-2026-14096                      CVE-2026-14097 CVE-2026-14098 CVE-2026-14099 CVE-2026-14100                      CVE-2026-14101 CVE-2026-14102 CVE-2026-14103 CVE-2026-14104                      CVE-2026-14105 CVE-2026-14106 CVE-2026-14107 CVE-2026-14108                      CVE-2026-14109 CVE-2026-14110 CVE-2026-14111 CVE-2026-14112                      CVE-2026-14113 CVE-2026-14114 CVE-2026-14115 CVE-2026-14116                      CVE-2026-14117 CVE-2026-14118 CVE-2026-14119 CVE-2026-14120                      CVE-2026-14121 CVE-2026-14122 CVE-2026-14123 CVE-2026-14124                      CVE-2026-14125 CVE-2026-14126 CVE-2026-14127 CVE-2026-14128                      CVE-2026-14129 CVE-2026-14130 CVE-2026-14131 CVE-2026-14132                      CVE-2026-14133 CVE-2026-14134 CVE-2026-14135 CVE-2026-14136                      CVE-2026-14137 CVE-2026-14138 CVE-2026-14139 CVE-2026-14140                      CVE-2026-14141 CVE-2026-14142 CVE-2026-14143 CVE-2026-14144                      CVE-2026-14145 CVE-2026-14146 CVE-2026-14147 CVE-2026-14148                      CVE-2026-14149 CVE-2026-14150 CVE-2026-14151 CVE-2026-14152                      CVE-2026-14153 CVE-2026-14154 CVE-2026-14155 CVE-2026-14156                      CVE-2026-14381 CVE-2026-14382 CVE-2026-14383 CVE-2026-14384                      CVE-2026-14385 CVE-2026-14386 CVE-2026-14387 CVE-2026-14388                      CVE-2026-14389 CVE-2026-14390 CVE-2026-14391 CVE-2026-14392                      CVE-2026-14393 CVE-2026-14394 CVE-2026-14395 CVE-2026-14396                      CVE-2026-14397 CVE-2026-14398 CVE-2026-14399 CVE-2026-14400                      CVE-2026-14401 CVE-2026-14402 CVE-2026-14403 CVE-2026-14404                      CVE-2026-14405 CVE-2026-14406 CVE-2026-14407 CVE-2026-14408                      CVE-2026-14409 CVE-2026-14410 CVE-2026-14411 CVE-2026-14412                      CVE-2026-14413 CVE-2026-14414 CVE-2026-14415 CVE-2026-14416                      CVE-2026-14417 CVE-2026-14418 CVE-2026-14419 CVE-2026-14420                      CVE-2026-14421 CVE-2026-14422 CVE-2026-14423 CVE-2026-14424                      CVE-2026-14425 CVE-2026-14426 CVE-2026-14427 CVE-2026-14428                      CVE-2026-14429 CVE-2026-14430 CVE-2026-14431 CVE-2026-14432

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 150.0.7871.46-1~deb13u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 659e52d0-7574-11f1-8de5-a8a1599412c6 advisory.

    Chrome Releases reports:
    This update includes 382 security fixes:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47     allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially     sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-13961)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Google Chrome installed on the remote macOS host is prior to 150.0.7871.46. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_06_stable-channel-update-for-desktop_0175352312 advisory.

  - Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-14393, CVE-2026-14432)

  - Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13782)

  - Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a     user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium     security severity: Critical) (CVE-2026-13774)

  - Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13775)

  - Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-14398)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 150.0.7871.46. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_06_stable-channel-update-for-desktop_0175352312 advisory.

  - Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-14393, CVE-2026-14432)

  - Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13782)

  - Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a     user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium     security severity: Critical) (CVE-2026-13774)

  - Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13775)

  - Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-14398)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
325118	Debian dsa-6378 : chromium - security update	Nessus	Debian Local Security Checks	critical
324816	FreeBSD : chromium -- security fixes (659e52d0-7574-11f1-8de5-a8a1599412c6)	Nessus	FreeBSD Local Security Checks	critical
324408	Linux Distros Unpatched Vulnerability : CVE-2026-13961	Nessus	Misc.	medium
324031	Google Chrome < 150.0.7871.46 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
324030	Google Chrome < 150.0.7871.46 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2026-13961

medium

Tenable Plugins

critical

critical

medium

critical

critical