Detections
Analytics
Alpine: multiple chromium packages: security update to 144.0.7559.132-r3
critical Tenable Cloud Security Plugin ID 437984
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform
an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2026-3061)
- Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote
attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
High) (CVE-2026-3062)
- Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who
convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via
DevTools. (Chromium security severity: High) (CVE-2026-3063)
See Also
https://security.alpinelinux.org/vuln/CVE-2026-3061
Plugin Details
Severity: Critical
ID: 437984
Version: Revision 1.3
Type: Local
Published: 2/26/2026
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: High
Score: 7.6
Percentile: 98.48
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-3062
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/23/2026