Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Critical)

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6171 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6171-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     March 20, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2026-4439 CVE-2026-4440 CVE-2026-4441 CVE-2026-4442                      CVE-2026-4443 CVE-2026-4444 CVE-2026-4445 CVE-2026-4446                      CVE-2026-4447 CVE-2026-4448 CVE-2026-4449 CVE-2026-4450                      CVE-2026-4451 CVE-2026-4452 CVE-2026-4453 CVE-2026-4454                      CVE-2026-4455 CVE-2026-4456 CVE-2026-4457 CVE-2026-4458                      CVE-2026-4459 CVE-2026-4460 CVE-2026-4461 CVE-2026-4462                      CVE-2026-4463 CVE-2026-4464

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 146.0.7680.153-1~deb12u1.

    For the stable distribution (trixie), these problems have been fixed in     version 146.0.7680.153-1~deb13u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker     to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-4440)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Google Chrome installed on the remote macOS host is prior to 146.0.7680.153. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_03_stable-channel-update-for-desktop_18 advisory.

  - Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a     user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome     Extension. (Chromium security severity: High) (CVE-2026-4458)

  - Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote     attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity:
    Critical) (CVE-2026-4439)

  - Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker     to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-4440)

  - Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-4441)

  - Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-4442)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 146.0.7680.153. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_03_stable-channel-update-for-desktop_18 advisory.

  - Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a     user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome     Extension. (Chromium security severity: High) (CVE-2026-4458)

  - Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote     attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity:
    Critical) (CVE-2026-4439)

  - Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker     to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-4440)

  - Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-4441)

  - Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-4442)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
303234	Debian dsa-6171 : chromium - security update	Nessus	Debian Local Security Checks	high
303165	Linux Distros Unpatched Vulnerability : CVE-2026-4440	Nessus	Misc.	high
303133	Google Chrome < 146.0.7680.153 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
303132	Google Chrome < 146.0.7680.153 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2026-4440

high

Tenable Plugins

high

high

critical

critical