Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Multiple Vulnerabilities in Google Chrome

The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.65. It is, therefore, affected by multiple vulnerabilities as referenced in the July 28, 2026 advisory.

  - Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to     execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15133)

  - Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker     to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15113)

  - Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-15107)

  - Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who     convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted     Chrome Extension. (Chromium security severity: High) (CVE-2026-15108)

  - Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page. (Chromium security     severity: High) (CVE-2026-15109)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker     to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15113)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4677 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4677-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     July 12, 2026                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : chromium     Version        : 150.0.7871.114-1~deb12u1     CVE ID         : CVE-2026-15107 CVE-2026-15108 CVE-2026-15109 CVE-2026-15110                      CVE-2026-15111 CVE-2026-15112 CVE-2026-15113 CVE-2026-15114                      CVE-2026-15115 CVE-2026-15116 CVE-2026-15117 CVE-2026-15118                      CVE-2026-15119 CVE-2026-15120 CVE-2026-15121 CVE-2026-15122                      CVE-2026-15123 CVE-2026-15124 CVE-2026-15125 CVE-2026-15126                      CVE-2026-15127 CVE-2026-15128 CVE-2026-15129 CVE-2026-15130                      CVE-2026-15131 CVE-2026-15132 CVE-2026-15133

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For Debian 12 bookworm, these problems have been fixed in version     150.0.7871.114-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7e82bf89f4 advisory.

    Update to 150.0.7871.114

          * CVE-2026-15112: Use after free in Ozone
          * CVE-2026-15129: Use after free in Views
          * CVE-2026-15132: Uninitialized Use in V8
          * CVE-2026-15133: Use after free in InterestGroups
          * CVE-2026-15108: Integer overflow in Extensions API
          * CVE-2026-15109: Uninitialized Use in ANGLE
          * CVE-2026-15110: Use after free in Extensions
          * CVE-2026-15111: Use after free in Views
          * CVE-2026-15113: Use after free in Autofill
          * CVE-2026-15114: Out of bounds read and write in Codecs
          * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
          * CVE-2026-15116: Use after free in Actor
          * CVE-2026-15117: Use after free in Payments
          * CVE-2026-15118: Use after free in Input
          * CVE-2026-15119: Inappropriate implementation in GetUserMedia
          * CVE-2026-15120: Use after free in Core
          * CVE-2026-15121: Use after free in WebRTC
          * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
          * CVE-2026-15123: Insufficient data validation in DOM
          * CVE-2026-15124: Insufficient policy enforcement in Passwords
          * CVE-2026-15125: Inappropriate implementation in Forms
          * CVE-2026-15126: Use after free in Forms
          * CVE-2026-15127: Inappropriate implementation in WebGL
          * CVE-2026-15128: Inappropriate implementation in Forms
          * CVE-2026-15130: Insufficient policy enforcement in Navigation
          * CVE-2026-15107: Use after free in IndexedDB
          * CVE-2026-15131: Insufficient data validation in Navigation


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9a7d180869 advisory.

    Update to 150.0.7871.114

          * CVE-2026-15112: Use after free in Ozone
          * CVE-2026-15129: Use after free in Views
          * CVE-2026-15132: Uninitialized Use in V8
          * CVE-2026-15133: Use after free in InterestGroups
          * CVE-2026-15108: Integer overflow in Extensions API
          * CVE-2026-15109: Uninitialized Use in ANGLE
          * CVE-2026-15110: Use after free in Extensions
          * CVE-2026-15111: Use after free in Views
          * CVE-2026-15113: Use after free in Autofill
          * CVE-2026-15114: Out of bounds read and write in Codecs
          * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
          * CVE-2026-15116: Use after free in Actor
          * CVE-2026-15117: Use after free in Payments
          * CVE-2026-15118: Use after free in Input
          * CVE-2026-15119: Inappropriate implementation in GetUserMedia
          * CVE-2026-15120: Use after free in Core
          * CVE-2026-15121: Use after free in WebRTC
          * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
          * CVE-2026-15123: Insufficient data validation in DOM
          * CVE-2026-15124: Insufficient policy enforcement in Passwords
          * CVE-2026-15125: Inappropriate implementation in Forms
          * CVE-2026-15126: Use after free in Forms
          * CVE-2026-15127: Inappropriate implementation in WebGL
          * CVE-2026-15128: Inappropriate implementation in Forms
          * CVE-2026-15130: Insufficient policy enforcement in Navigation
          * CVE-2026-15107: Use after free in IndexedDB
          * CVE-2026-15131: Insufficient data validation in Navigation


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6387 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6387-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     July 11, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2026-15107 CVE-2026-15108 CVE-2026-15109 CVE-2026-15110                      CVE-2026-15111 CVE-2026-15112 CVE-2026-15113 CVE-2026-15114                      CVE-2026-15115 CVE-2026-15116 CVE-2026-15117 CVE-2026-15118                      CVE-2026-15119 CVE-2026-15120 CVE-2026-15121 CVE-2026-15122                      CVE-2026-15123 CVE-2026-15124 CVE-2026-15125 CVE-2026-15126                      CVE-2026-15127 CVE-2026-15128 CVE-2026-15129 CVE-2026-15130                      CVE-2026-15131 CVE-2026-15132 CVE-2026-15133

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 150.0.7871.114-1~deb13u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 150.0.7871.114. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_07_stable-channel-update-for-desktop_01162222768 advisory.

  - Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker     to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15113)

  - Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to     execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15133)

  - Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-15112)

  - Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-15129)

  - Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15132)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 150.0.7871.114. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_07_stable-channel-update-for-desktop_01162222768 advisory.

  - Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker     to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15113)

  - Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to     execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15133)

  - Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-15112)

  - Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-15129)

  - Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-15132)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
330515	Microsoft Edge (Chromium) < 150.0.4078.65 Multiple Vulnerabilities	Nessus	Windows	Local	critical
328715	Linux Distros Unpatched Vulnerability : CVE-2026-15113	Nessus	Misc.	Local	critical
326429	Debian dla-4677 : chromium - security update	Nessus	Debian Local Security Checks	Local	critical
326411	Fedora 44 : chromium (2026-7e82bf89f4)	Nessus	Fedora Local Security Checks	Local	critical
326404	Fedora 43 : chromium (2026-9a7d180869)	Nessus	Fedora Local Security Checks	Local	critical
326386	Debian dsa-6387 : chromium - security update	Nessus	Debian Local Security Checks	Local	critical
325845	Google Chrome < 150.0.7871.114 Multiple Vulnerabilities	Nessus	Windows	Local	critical
325844	Google Chrome < 150.0.7871.114 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-15113

critical

Tenable Plugins

Coming Soon

critical

critical

critical

critical

critical

critical

critical

critical