Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

freebsd d93c247b-4dba-43ce-b5c0-ac5bd03bea8d: chromium -- security fixes

The version of Google Chrome installed on the remote Windows host is prior to 147.0.7727.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_04_stable-channel-update-for-desktop_15 advisory.

  - Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially     perform out of bounds memory access via a crafted video file. (Chromium security severity: High)     (CVE-2026-6362)

  - Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-6296)

  - Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged     network position to potentially perform a sandbox escape via a crafted HTML page. (Chromium security     severity: Critical) (CVE-2026-6297)

  - Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page. (Chromium security     severity: Critical) (CVE-2026-6298)

  - Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute     arbitrary code via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-6299)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 147.0.7727.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_04_stable-channel-update-for-desktop_15 advisory.

  - Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially     perform out of bounds memory access via a crafted video file. (Chromium security severity: High)     (CVE-2026-6362)

  - Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-6296)

  - Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged     network position to potentially perform a sandbox escape via a crafted HTML page. (Chromium security     severity: Critical) (CVE-2026-6297)

  - Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page. (Chromium security     severity: Critical) (CVE-2026-6298)

  - Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute     arbitrary code via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-6299)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: High) (CVE-2026-6309)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
306601	Google Chrome < 147.0.7727.101 Multiple Vulnerabilities	Nessus	Windows	critical
306600	Google Chrome < 147.0.7727.101 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
306593	Linux Distros Unpatched Vulnerability : CVE-2026-6309	Nessus	Misc.	high

Detections

Analytics

CVE-2026-6309

high

Tenable Plugins

Coming Soon

critical

critical

high