Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a
    remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security
    severity: High) (CVE-2026-14411)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74084 advisory.

    [2.54.0-1]
    - Update to 2.54.0

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6534 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6534-1                   security@debian.org     https://www.debian.org/security/                           Alberto Garcia     October 01, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : webkit2gtk     CVE ID         : CVE-2024-1283 CVE-2024-7966 CVE-2024-8193 CVE-2024-8198                      CVE-2024-8636 CVE-2024-9123 CVE-2024-43091 CVE-2024-43097                      CVE-2024-43767 CVE-2024-43768 CVE-2025-0436 CVE-2025-0444                      CVE-2025-8901 CVE-2025-9478 CVE-2025-10502 CVE-2025-26416                      CVE-2025-32318 CVE-2025-48622 CVE-2025-54627 CVE-2026-0908                      CVE-2026-3536 CVE-2026-3538 CVE-2026-3909 CVE-2026-3931                      CVE-2026-4448 CVE-2026-4460 CVE-2026-4464 CVE-2026-5283                      CVE-2026-5870 CVE-2026-6296 CVE-2026-6298 CVE-2026-6364                      CVE-2026-7353 CVE-2026-7354 CVE-2026-7359 CVE-2026-7900                      CVE-2026-7920 CVE-2026-7923 CVE-2026-7942 CVE-2026-7943                      CVE-2026-7949 CVE-2026-8579 CVE-2026-9877 CVE-2026-9878                      CVE-2026-9879 CVE-2026-9882 CVE-2026-9893 CVE-2026-9899                      CVE-2026-9900 CVE-2026-9901 CVE-2026-9904 CVE-2026-9908                      CVE-2026-9909 CVE-2026-9910 CVE-2026-9911 CVE-2026-9913                      CVE-2026-9914 CVE-2026-9915 CVE-2026-9916 CVE-2026-9923                      CVE-2026-9925 CVE-2026-9926 CVE-2026-9927 CVE-2026-9935                      CVE-2026-9940 CVE-2026-9941 CVE-2026-9942 CVE-2026-9944                      CVE-2026-9946 CVE-2026-9953 CVE-2026-9965 CVE-2026-9969                      CVE-2026-9975 CVE-2026-9981 CVE-2026-9982 CVE-2026-9983                      CVE-2026-9998 CVE-2026-10009 CVE-2026-10011 CVE-2026-10012                      CVE-2026-10018 CVE-2026-10019 CVE-2026-10881 CVE-2026-10883                      CVE-2026-10889 CVE-2026-10907 CVE-2026-10919 CVE-2026-10941                      CVE-2026-10974 CVE-2026-10977 CVE-2026-10979 CVE-2026-10985                      CVE-2026-10993 CVE-2026-10994 CVE-2026-11004 CVE-2026-11024                      CVE-2026-11039 CVE-2026-11040 CVE-2026-11051 CVE-2026-11057                      CVE-2026-11061 CVE-2026-11065 CVE-2026-11066 CVE-2026-11087                      CVE-2026-11088 CVE-2026-11090 CVE-2026-11104 CVE-2026-11109                      CVE-2026-11110 CVE-2026-11111 CVE-2026-11113 CVE-2026-11121                      CVE-2026-11123 CVE-2026-11124 CVE-2026-11137 CVE-2026-11138                      CVE-2026-11159 CVE-2026-11191 CVE-2026-11663 CVE-2026-11675                      CVE-2026-13780 CVE-2026-13781 CVE-2026-13834 CVE-2026-13841                      CVE-2026-13859 CVE-2026-13877 CVE-2026-13883 CVE-2026-13971                      CVE-2026-14044 CVE-2026-14125 CVE-2026-14152 CVE-2026-14382                      CVE-2026-14386 CVE-2026-14387 CVE-2026-14388 CVE-2026-14389                      CVE-2026-14390 CVE-2026-14396 CVE-2026-14398 CVE-2026-14400                      CVE-2026-14410 CVE-2026-14411 CVE-2026-14412 CVE-2026-14413                      CVE-2026-14414 CVE-2026-14418 CVE-2026-14419 CVE-2026-14425                      CVE-2026-14427 CVE-2026-14429 CVE-2026-15109 CVE-2026-15766                      CVE-2026-15774 CVE-2026-16413 CVE-2026-16417 CVE-2026-17653                      CVE-2026-17655 CVE-2026-17667 CVE-2026-17668 CVE-2026-17671                      CVE-2026-17675 CVE-2026-17678 CVE-2026-17682 CVE-2026-17683                      CVE-2026-17687 CVE-2026-17689 CVE-2026-17697 CVE-2026-17702                      CVE-2026-17704 CVE-2026-17714 CVE-2026-17717 CVE-2026-17718                      CVE-2026-17721 CVE-2026-17740 CVE-2026-17745 CVE-2026-17750                      CVE-2026-17757 CVE-2026-17771 CVE-2026-17785 CVE-2026-17801                      CVE-2026-17832 CVE-2026-17847 CVE-2026-17914 CVE-2026-19160                      CVE-2026-19161 CVE-2026-19173 CVE-2026-19176 CVE-2026-43670                      CVE-2026-64715 CVE-2026-64753 CVE-2026-64778 CVE-2026-64779                      CVE-2026-64780 CVE-2026-64781 CVE-2026-64782 CVE-2026-64784                      CVE-2026-65331 CVE-2026-65332 CVE-2026-65333 CVE-2026-65334                      CVE-2026-65336 CVE-2026-65337 CVE-2026-65338 CVE-2026-65340                      CVE-2026-65341 CVE-2026-65351 CVE-2026-76041 CVE-2026-78904                      CVE-2026-78905 CVE-2026-78906 CVE-2026-78914 CVE-2026-78958                      CVE-2026-78965 CVE-2026-79020 CVE-2026-79043 CVE-2026-79112                      CVE-2026-79118 CVE-2026-79120 CVE-2026-79127 CVE-2026-79130                      CVE-2026-79131 CVE-2026-79144 CVE-2026-79147 CVE-2026-79149                      CVE-2026-79188 CVE-2026-79189 CVE-2026-79229 CVE-2026-79269                      CVE-2026-79270 CVE-2026-79275 CVE-2026-84635 CVE-2026-86898

    Several vulnerabilities have been discovered in the WebKitGTK web     engine, that may lead to heap corruption, local privilege escalation,     remote code execution, out-of-bounds memory access, cross-origin data     leak and sandbox escape, among other problems.

    See the WebKitGTK security advisory for details on each vulnerability:
    https://webkitgtk.org/security/WSA-2026-0006.html

    For the stable distribution (trixie), these problems have been fixed in     version 2.54.0-1~deb13u1.

    We recommend that you upgrade your webkit2gtk packages.

    For the detailed security status of webkit2gtk please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/webkit2gtk

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69098 advisory.

    * chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)
      * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)
      * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use     (CVE-2026-19161)
      * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)
      * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-28984)
      * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
      * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
      * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination     (CVE-2026-64787)
      * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64757)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64783)
      * webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
      * chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file     (CVE-2026-79020)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-43795)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2026-64715)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64718)
      * webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64779)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64780)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64782)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64784)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65331)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65332)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65334)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65335)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65336)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65337)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65338)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65340)
      * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65351)
      * webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature     (CVE-2026-83596)
      * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination     (CVE-2026-84635)
      * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information     (CVE-2026-64753)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a188c081-9ce8-11f1-8fc6-cb9659fdabad advisory.

    Qt qtwebengine-chromium repo reports:
    Backports for 747 security bugs in Chromium:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4672 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4672-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     July 06, 2026                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : chromium     Version        : 150.0.7871.46-1~deb12u1     CVE ID         : CVE-2026-13281 CVE-2026-13282 CVE-2026-13283 CVE-2026-13774                      CVE-2026-13775 CVE-2026-13776 CVE-2026-13777 CVE-2026-13778                      CVE-2026-13779 CVE-2026-13780 CVE-2026-13781 CVE-2026-13782                      CVE-2026-13783 CVE-2026-13784 CVE-2026-13785 CVE-2026-13786                      CVE-2026-13787 CVE-2026-13788 CVE-2026-13789 CVE-2026-13790                      CVE-2026-13791 CVE-2026-13792 CVE-2026-13793 CVE-2026-13794                      CVE-2026-13795 CVE-2026-13796 CVE-2026-13797 CVE-2026-13798                      CVE-2026-13799 CVE-2026-13800 CVE-2026-13801 CVE-2026-13802                      CVE-2026-13803 CVE-2026-13804 CVE-2026-13805 CVE-2026-13806                      CVE-2026-13807 CVE-2026-13808 CVE-2026-13809 CVE-2026-13810                      CVE-2026-13811 CVE-2026-13812 CVE-2026-13813 CVE-2026-13814                      CVE-2026-13815 CVE-2026-13816 CVE-2026-13817 CVE-2026-13818                      CVE-2026-13819 CVE-2026-13820 CVE-2026-13821 CVE-2026-13822                      CVE-2026-13823 CVE-2026-13824 CVE-2026-13825 CVE-2026-13826                      CVE-2026-13827 CVE-2026-13828 CVE-2026-13829 CVE-2026-13830                      CVE-2026-13831 CVE-2026-13832 CVE-2026-13833 CVE-2026-13834                      CVE-2026-13835 CVE-2026-13836 CVE-2026-13837 CVE-2026-13838                      CVE-2026-13839 CVE-2026-13840 CVE-2026-13841 CVE-2026-13842                      CVE-2026-13843 CVE-2026-13844 CVE-2026-13845 CVE-2026-13846                      CVE-2026-13847 CVE-2026-13848 CVE-2026-13849 CVE-2026-13850                      CVE-2026-13851 CVE-2026-13852 CVE-2026-13853 CVE-2026-13854                      CVE-2026-13855 CVE-2026-13856 CVE-2026-13857 CVE-2026-13858                      CVE-2026-13859 CVE-2026-13860 CVE-2026-13861 CVE-2026-13862                      CVE-2026-13863 CVE-2026-13864 CVE-2026-13865 CVE-2026-13866                      CVE-2026-13867 CVE-2026-13868 CVE-2026-13869 CVE-2026-13870                      CVE-2026-13871 CVE-2026-13872 CVE-2026-13873 CVE-2026-13874                      CVE-2026-13875 CVE-2026-13876 CVE-2026-13877 CVE-2026-13878                      CVE-2026-13879 CVE-2026-13880 CVE-2026-13881 CVE-2026-13882                      CVE-2026-13883 CVE-2026-13884 CVE-2026-13885 CVE-2026-13886                      CVE-2026-13887 CVE-2026-13888 CVE-2026-13889 CVE-2026-13890                      CVE-2026-13891 CVE-2026-13892 CVE-2026-13893 CVE-2026-13894                      CVE-2026-13895 CVE-2026-13896 CVE-2026-13897 CVE-2026-13898                      CVE-2026-13899 CVE-2026-13900 CVE-2026-13901 CVE-2026-13902                      CVE-2026-13903 CVE-2026-13904 CVE-2026-13905 CVE-2026-13906                      CVE-2026-13907 CVE-2026-13908 CVE-2026-13909 CVE-2026-13910                      CVE-2026-13911 CVE-2026-13912 CVE-2026-13913 CVE-2026-13914                      CVE-2026-13915 CVE-2026-13916 CVE-2026-13917 CVE-2026-13918                      CVE-2026-13919 CVE-2026-13920 CVE-2026-13921 CVE-2026-13922                      CVE-2026-13923 CVE-2026-13924 CVE-2026-13925 CVE-2026-13926                      CVE-2026-13927 CVE-2026-13928 CVE-2026-13929 CVE-2026-13930                      CVE-2026-13931 CVE-2026-13932 CVE-2026-13933 CVE-2026-13934                      CVE-2026-13935 CVE-2026-13936 CVE-2026-13937 CVE-2026-13938                      CVE-2026-13939 CVE-2026-13940 CVE-2026-13941 CVE-2026-13942                      CVE-2026-13943 CVE-2026-13944 CVE-2026-13945 CVE-2026-13946                      CVE-2026-13947 CVE-2026-13948 CVE-2026-13949 CVE-2026-13950                      CVE-2026-13951 CVE-2026-13952 CVE-2026-13953 CVE-2026-13954                      CVE-2026-13955 CVE-2026-13956 CVE-2026-13957 CVE-2026-13958                      CVE-2026-13959 CVE-2026-13960 CVE-2026-13961 CVE-2026-13962                      CVE-2026-13963 CVE-2026-13964 CVE-2026-13965 CVE-2026-13966                      CVE-2026-13967 CVE-2026-13968 CVE-2026-13969 CVE-2026-13970                      CVE-2026-13971 CVE-2026-13972 CVE-2026-13973 CVE-2026-13974                      CVE-2026-13975 CVE-2026-13976 CVE-2026-13977 CVE-2026-13978                      CVE-2026-13979 CVE-2026-13980 CVE-2026-13981 CVE-2026-13982                      CVE-2026-13983 CVE-2026-13984 CVE-2026-13985 CVE-2026-13986                      CVE-2026-13987 CVE-2026-13988 CVE-2026-13989 CVE-2026-13990                      CVE-2026-13991 CVE-2026-13992 CVE-2026-13993 CVE-2026-13994                      CVE-2026-13995 CVE-2026-13996 CVE-2026-13997 CVE-2026-13998                      CVE-2026-13999 CVE-2026-14000 CVE-2026-14001 CVE-2026-14002                      CVE-2026-14003 CVE-2026-14004 CVE-2026-14005 CVE-2026-14006                      CVE-2026-14007 CVE-2026-14008 CVE-2026-14009 CVE-2026-14010                      CVE-2026-14011 CVE-2026-14012 CVE-2026-14013 CVE-2026-14014                      CVE-2026-14015 CVE-2026-14016 CVE-2026-14017 CVE-2026-14018                      CVE-2026-14019 CVE-2026-14020 CVE-2026-14021 CVE-2026-14022                      CVE-2026-14023 CVE-2026-14024 CVE-2026-14025 CVE-2026-14026                      CVE-2026-14027 CVE-2026-14028 CVE-2026-14030 CVE-2026-14031                      CVE-2026-14032 CVE-2026-14033 CVE-2026-14034 CVE-2026-14035                      CVE-2026-14036 CVE-2026-14037 CVE-2026-14038 CVE-2026-14039                      CVE-2026-14040 CVE-2026-14041 CVE-2026-14042 CVE-2026-14043                      CVE-2026-14044 CVE-2026-14045 CVE-2026-14046 CVE-2026-14047                      CVE-2026-14048 CVE-2026-14049 CVE-2026-14050 CVE-2026-14051                      CVE-2026-14052 CVE-2026-14053 CVE-2026-14054 CVE-2026-14055                      CVE-2026-14056 CVE-2026-14057 CVE-2026-14058 CVE-2026-14059                      CVE-2026-14060 CVE-2026-14061 CVE-2026-14062 CVE-2026-14063                      CVE-2026-14064 CVE-2026-14065 CVE-2026-14066 CVE-2026-14067                      CVE-2026-14068 CVE-2026-14069 CVE-2026-14070 CVE-2026-14071                      CVE-2026-14072 CVE-2026-14073 CVE-2026-14074 CVE-2026-14075                      CVE-2026-14076 CVE-2026-14077 CVE-2026-14078 CVE-2026-14079                      CVE-2026-14080 CVE-2026-14081 CVE-2026-14082 CVE-2026-14083                      CVE-2026-14084 CVE-2026-14085 CVE-2026-14086 CVE-2026-14087                      CVE-2026-14088 CVE-2026-14089 CVE-2026-14090 CVE-2026-14091                      CVE-2026-14092 CVE-2026-14093 CVE-2026-14094 CVE-2026-14095                      CVE-2026-14096 CVE-2026-14097 CVE-2026-14098 CVE-2026-14099                      CVE-2026-14100 CVE-2026-14101 CVE-2026-14102 CVE-2026-14103                      CVE-2026-14104 CVE-2026-14105 CVE-2026-14106 CVE-2026-14107                      CVE-2026-14108 CVE-2026-14109 CVE-2026-14110 CVE-2026-14111                      CVE-2026-14112 CVE-2026-14113 CVE-2026-14114 CVE-2026-14115                      CVE-2026-14116 CVE-2026-14117 CVE-2026-14118 CVE-2026-14119                      CVE-2026-14120 CVE-2026-14121 CVE-2026-14122 CVE-2026-14123                      CVE-2026-14124 CVE-2026-14125 CVE-2026-14126 CVE-2026-14127                      CVE-2026-14128 CVE-2026-14129 CVE-2026-14130 CVE-2026-14131                      CVE-2026-14132 CVE-2026-14133 CVE-2026-14134 CVE-2026-14135                      CVE-2026-14136 CVE-2026-14137 CVE-2026-14138 CVE-2026-14139                      CVE-2026-14140 CVE-2026-14141 CVE-2026-14142 CVE-2026-14143                      CVE-2026-14144 CVE-2026-14145 CVE-2026-14146 CVE-2026-14147                      CVE-2026-14148 CVE-2026-14149 CVE-2026-14150 CVE-2026-14151                      CVE-2026-14152 CVE-2026-14153 CVE-2026-14154 CVE-2026-14155                      CVE-2026-14156 CVE-2026-14381 CVE-2026-14382 CVE-2026-14383                      CVE-2026-14384 CVE-2026-14385 CVE-2026-14386 CVE-2026-14387                      CVE-2026-14388 CVE-2026-14389 CVE-2026-14390 CVE-2026-14391                      CVE-2026-14392 CVE-2026-14393 CVE-2026-14394 CVE-2026-14395                      CVE-2026-14396 CVE-2026-14397 CVE-2026-14398 CVE-2026-14399                      CVE-2026-14400 CVE-2026-14401 CVE-2026-14402 CVE-2026-14403                      CVE-2026-14404 CVE-2026-14405 CVE-2026-14406 CVE-2026-14407                      CVE-2026-14408 CVE-2026-14409 CVE-2026-14410 CVE-2026-14411                      CVE-2026-14412 CVE-2026-14413 CVE-2026-14414 CVE-2026-14415                      CVE-2026-14416 CVE-2026-14417 CVE-2026-14418 CVE-2026-14419                      CVE-2026-14420 CVE-2026-14421 CVE-2026-14422 CVE-2026-14423                      CVE-2026-14424 CVE-2026-14425 CVE-2026-14426 CVE-2026-14427                      CVE-2026-14428 CVE-2026-14429 CVE-2026-14430 CVE-2026-14431                      CVE-2026-14432

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For Debian 12 bookworm, these problems have been fixed in version     150.0.7871.46-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6378 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6378-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     July 05, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2026-13281 CVE-2026-13282 CVE-2026-13283 CVE-2026-13774                      CVE-2026-13775 CVE-2026-13776 CVE-2026-13777 CVE-2026-13778                      CVE-2026-13779 CVE-2026-13780 CVE-2026-13781 CVE-2026-13782                      CVE-2026-13783 CVE-2026-13784 CVE-2026-13785 CVE-2026-13786                      CVE-2026-13787 CVE-2026-13788 CVE-2026-13790 CVE-2026-13791                      CVE-2026-13792 CVE-2026-13793 CVE-2026-13794 CVE-2026-13795                      CVE-2026-13796 CVE-2026-13797 CVE-2026-13798 CVE-2026-13799                      CVE-2026-13800 CVE-2026-13801 CVE-2026-13802 CVE-2026-13803                      CVE-2026-13804 CVE-2026-13805 CVE-2026-13806 CVE-2026-13807                      CVE-2026-13808 CVE-2026-13809 CVE-2026-13810 CVE-2026-13811                      CVE-2026-13812 CVE-2026-13813 CVE-2026-13814 CVE-2026-13815                      CVE-2026-13816 CVE-2026-13817 CVE-2026-13818 CVE-2026-13819                      CVE-2026-13820 CVE-2026-13821 CVE-2026-13822 CVE-2026-13823                      CVE-2026-13824 CVE-2026-13825 CVE-2026-13826 CVE-2026-13827                      CVE-2026-13828 CVE-2026-13829 CVE-2026-13830 CVE-2026-13831                      CVE-2026-13832 CVE-2026-13833 CVE-2026-13834 CVE-2026-13835                      CVE-2026-13836 CVE-2026-13837 CVE-2026-13838 CVE-2026-13839                      CVE-2026-13840 CVE-2026-13841 CVE-2026-13842 CVE-2026-13843                      CVE-2026-13844 CVE-2026-13845 CVE-2026-13846 CVE-2026-13847                      CVE-2026-13848 CVE-2026-13849 CVE-2026-13850 CVE-2026-13851                      CVE-2026-13852 CVE-2026-13853 CVE-2026-13854 CVE-2026-13855                      CVE-2026-13856 CVE-2026-13857 CVE-2026-13858 CVE-2026-13859                      CVE-2026-13860 CVE-2026-13861 CVE-2026-13862 CVE-2026-13863                      CVE-2026-13864 CVE-2026-13865 CVE-2026-13866 CVE-2026-13867                      CVE-2026-13868 CVE-2026-13869 CVE-2026-13870 CVE-2026-13871                      CVE-2026-13872 CVE-2026-13873 CVE-2026-13874 CVE-2026-13875                      CVE-2026-13876 CVE-2026-13877 CVE-2026-13878 CVE-2026-13879                      CVE-2026-13880 CVE-2026-13881 CVE-2026-13882 CVE-2026-13883                      CVE-2026-13884 CVE-2026-13885 CVE-2026-13886 CVE-2026-13887                      CVE-2026-13888 CVE-2026-13889 CVE-2026-13890 CVE-2026-13891                      CVE-2026-13892 CVE-2026-13893 CVE-2026-13894 CVE-2026-13895                      CVE-2026-13896 CVE-2026-13897 CVE-2026-13898 CVE-2026-13899                      CVE-2026-13900 CVE-2026-13901 CVE-2026-13902 CVE-2026-13903                      CVE-2026-13904 CVE-2026-13905 CVE-2026-13906 CVE-2026-13907                      CVE-2026-13908 CVE-2026-13909 CVE-2026-13910 CVE-2026-13911                      CVE-2026-13912 CVE-2026-13913 CVE-2026-13914 CVE-2026-13915                      CVE-2026-13916 CVE-2026-13917 CVE-2026-13918 CVE-2026-13919                      CVE-2026-13920 CVE-2026-13921 CVE-2026-13922 CVE-2026-13923                      CVE-2026-13924 CVE-2026-13925 CVE-2026-13926 CVE-2026-13927                      CVE-2026-13928 CVE-2026-13929 CVE-2026-13930 CVE-2026-13931                      CVE-2026-13932 CVE-2026-13933 CVE-2026-13934 CVE-2026-13935                      CVE-2026-13936 CVE-2026-13937 CVE-2026-13938 CVE-2026-13939                      CVE-2026-13940 CVE-2026-13941 CVE-2026-13942 CVE-2026-13943                      CVE-2026-13944 CVE-2026-13945 CVE-2026-13946 CVE-2026-13947                      CVE-2026-13948 CVE-2026-13949 CVE-2026-13950 CVE-2026-13951                      CVE-2026-13952 CVE-2026-13953 CVE-2026-13954 CVE-2026-13955                      CVE-2026-13956 CVE-2026-13957 CVE-2026-13958 CVE-2026-13959                      CVE-2026-13960 CVE-2026-13961 CVE-2026-13962 CVE-2026-13963                      CVE-2026-13964 CVE-2026-13965 CVE-2026-13966 CVE-2026-13967                      CVE-2026-13968 CVE-2026-13969 CVE-2026-13970 CVE-2026-13971                      CVE-2026-13972 CVE-2026-13973 CVE-2026-13974 CVE-2026-13975                      CVE-2026-13976 CVE-2026-13977 CVE-2026-13978 CVE-2026-13979                      CVE-2026-13980 CVE-2026-13981 CVE-2026-13982 CVE-2026-13983                      CVE-2026-13984 CVE-2026-13985 CVE-2026-13986 CVE-2026-13987                      CVE-2026-13988 CVE-2026-13989 CVE-2026-13990 CVE-2026-13991                      CVE-2026-13992 CVE-2026-13993 CVE-2026-13994 CVE-2026-13995                      CVE-2026-13996 CVE-2026-13997 CVE-2026-13998 CVE-2026-13999                      CVE-2026-14000 CVE-2026-14001 CVE-2026-14002 CVE-2026-14003                      CVE-2026-14004 CVE-2026-14005 CVE-2026-14006 CVE-2026-14007                      CVE-2026-14008 CVE-2026-14009 CVE-2026-14010 CVE-2026-14011                      CVE-2026-14012 CVE-2026-14013 CVE-2026-14014 CVE-2026-14015                      CVE-2026-14016 CVE-2026-14017 CVE-2026-14018 CVE-2026-14019                      CVE-2026-14020 CVE-2026-14021 CVE-2026-14022 CVE-2026-14023                      CVE-2026-14024 CVE-2026-14025 CVE-2026-14026 CVE-2026-14027                      CVE-2026-14028 CVE-2026-14030 CVE-2026-14031 CVE-2026-14032                      CVE-2026-14033 CVE-2026-14034 CVE-2026-14035 CVE-2026-14036                      CVE-2026-14037 CVE-2026-14038 CVE-2026-14039 CVE-2026-14040                      CVE-2026-14041 CVE-2026-14042 CVE-2026-14043 CVE-2026-14044                      CVE-2026-14045 CVE-2026-14046 CVE-2026-14047 CVE-2026-14048                      CVE-2026-14049 CVE-2026-14050 CVE-2026-14051 CVE-2026-14052                      CVE-2026-14053 CVE-2026-14054 CVE-2026-14055 CVE-2026-14056                      CVE-2026-14057 CVE-2026-14058 CVE-2026-14059 CVE-2026-14060                      CVE-2026-14061 CVE-2026-14062 CVE-2026-14063 CVE-2026-14064                      CVE-2026-14065 CVE-2026-14066 CVE-2026-14067 CVE-2026-14068                      CVE-2026-14069 CVE-2026-14070 CVE-2026-14071 CVE-2026-14072                      CVE-2026-14073 CVE-2026-14074 CVE-2026-14075 CVE-2026-14076                      CVE-2026-14077 CVE-2026-14078 CVE-2026-14079 CVE-2026-14080                      CVE-2026-14081 CVE-2026-14082 CVE-2026-14083 CVE-2026-14084                      CVE-2026-14085 CVE-2026-14086 CVE-2026-14087 CVE-2026-14088                      CVE-2026-14089 CVE-2026-14090 CVE-2026-14091 CVE-2026-14092                      CVE-2026-14093 CVE-2026-14094 CVE-2026-14095 CVE-2026-14096                      CVE-2026-14097 CVE-2026-14098 CVE-2026-14099 CVE-2026-14100                      CVE-2026-14101 CVE-2026-14102 CVE-2026-14103 CVE-2026-14104                      CVE-2026-14105 CVE-2026-14106 CVE-2026-14107 CVE-2026-14108                      CVE-2026-14109 CVE-2026-14110 CVE-2026-14111 CVE-2026-14112                      CVE-2026-14113 CVE-2026-14114 CVE-2026-14115 CVE-2026-14116                      CVE-2026-14117 CVE-2026-14118 CVE-2026-14119 CVE-2026-14120                      CVE-2026-14121 CVE-2026-14122 CVE-2026-14123 CVE-2026-14124                      CVE-2026-14125 CVE-2026-14126 CVE-2026-14127 CVE-2026-14128                      CVE-2026-14129 CVE-2026-14130 CVE-2026-14131 CVE-2026-14132                      CVE-2026-14133 CVE-2026-14134 CVE-2026-14135 CVE-2026-14136                      CVE-2026-14137 CVE-2026-14138 CVE-2026-14139 CVE-2026-14140                      CVE-2026-14141 CVE-2026-14142 CVE-2026-14143 CVE-2026-14144                      CVE-2026-14145 CVE-2026-14146 CVE-2026-14147 CVE-2026-14148                      CVE-2026-14149 CVE-2026-14150 CVE-2026-14151 CVE-2026-14152                      CVE-2026-14153 CVE-2026-14154 CVE-2026-14155 CVE-2026-14156                      CVE-2026-14381 CVE-2026-14382 CVE-2026-14383 CVE-2026-14384                      CVE-2026-14385 CVE-2026-14386 CVE-2026-14387 CVE-2026-14388                      CVE-2026-14389 CVE-2026-14390 CVE-2026-14391 CVE-2026-14392                      CVE-2026-14393 CVE-2026-14394 CVE-2026-14395 CVE-2026-14396                      CVE-2026-14397 CVE-2026-14398 CVE-2026-14399 CVE-2026-14400                      CVE-2026-14401 CVE-2026-14402 CVE-2026-14403 CVE-2026-14404                      CVE-2026-14405 CVE-2026-14406 CVE-2026-14407 CVE-2026-14408                      CVE-2026-14409 CVE-2026-14410 CVE-2026-14411 CVE-2026-14412                      CVE-2026-14413 CVE-2026-14414 CVE-2026-14415 CVE-2026-14416                      CVE-2026-14417 CVE-2026-14418 CVE-2026-14419 CVE-2026-14420                      CVE-2026-14421 CVE-2026-14422 CVE-2026-14423 CVE-2026-14424                      CVE-2026-14425 CVE-2026-14426 CVE-2026-14427 CVE-2026-14428                      CVE-2026-14429 CVE-2026-14430 CVE-2026-14431 CVE-2026-14432

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 150.0.7871.46-1~deb13u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a     remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security     severity: High) (CVE-2026-14411)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Google Chrome installed on the remote macOS host is prior to 150.0.7871.46. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_06_stable-channel-update-for-desktop_0175352312 advisory.

  - Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-14393, CVE-2026-14432)

  - Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13782)

  - Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a     user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium     security severity: Critical) (CVE-2026-13774)

  - Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13775)

  - Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-14398)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 150.0.7871.46. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_06_stable-channel-update-for-desktop_0175352312 advisory.

  - Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-14393, CVE-2026-14432)

  - Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13782)

  - Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a     user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium     security severity: Critical) (CVE-2026-13774)

  - Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-13775)

  - Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-14398)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
457901	Echo: chromium: security update to 150.0.7871.46	Tenable Cloud Security	Echo Local Security Checks	Local	critical
457901	Echo: chromium: security update to 150.0.7871.46	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
362691	Oracle Linux 8 : webkit2gtk3 (ELSA-2026-74084)	Nessus	Oracle Linux Local Security Checks	Local	critical
362636	Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_74084)	Nessus	Rocky Linux Local Security Checks	Local	critical
362455	Debian dsa-6534 : gir1.2-javascriptcoregtk-4.1 - security update	Nessus	Debian Local Security Checks	Local	critical
362401	AlmaLinux 8 : webkit2gtk3 (ALSA-2026:74084)	Nessus	Alma Linux Local Security Checks	Local	critical
358443	RockyLinux 8 : webkit2gtk3 (RLSA-2026:74084)	Nessus	Rocky Linux Local Security Checks	Local	critical
353421	RHEL 8 : webkit2gtk3 (RHSA-2026:74084)	Nessus	Red Hat Local Security Checks	Local	critical
348734	AlmaLinux 9 : webkit2gtk3 (ALSA-2026:69098)	Nessus	Alma Linux Local Security Checks	Local	critical
338718	FreeBSD : qt6-webengine -- multiple vulnerabilities (a188c081-9ce8-11f1-8fc6-cb9659fdabad)	Nessus	FreeBSD Local Security Checks	Local	critical
331554	openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21498-1)	Nessus	SuSE Local Security Checks	Local	critical
326415	openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21279-1)	Nessus	SuSE Local Security Checks	Local	critical
325675	Debian dla-4672 : chromium - security update	Nessus	Debian Local Security Checks	Local	critical
325118	Debian dsa-6378 : chromium - security update	Nessus	Debian Local Security Checks	Local	critical
324798	Linux Distros Unpatched Vulnerability : CVE-2026-14411	Nessus	Misc.	Local	critical
324031	Google Chrome < 150.0.7871.46 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical
324030	Google Chrome < 150.0.7871.46 Multiple Vulnerabilities	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2026-14411

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical