Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.53. It is, therefore, affected by multiple vulnerabilities as referenced in the August 28, 2026 advisory.

  - Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain     sensitive information via a crafted HTML page. (Chromium security severity: Medium) (CVE-2026-79293)

  - Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-78891)

  - Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a     local attacker to bypass system access restrictions via a local program. (Chromium security severity:
    Medium) (CVE-2026-78892)

  - Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak     sensitive information via a crafted HTML page. (Chromium security severity: Medium) (CVE-2026-78893)

  - Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had     compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-78894)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a     remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML     page. (Chromium security severity: Low) (CVE-2026-79089)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Google Chrome installed on the remote macOS host is prior to 152.0.7977.64. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_08_stable-channel-update-for-desktop_0256176589 advisory.

  - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute     arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-79052, CVE-2026-79200, CVE-2026-79290)

  - Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-79282)

  - Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had     compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-79054, CVE-2026-79224)

  - Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker     who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a     crafted HTML page. (Chromium security severity: Critical) (CVE-2026-79121)

  - Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-79150)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 152.0.7977.64. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_08_stable-channel-update-for-desktop_0256176589 advisory.

  - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute     arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-79052, CVE-2026-79200, CVE-2026-79290)

  - Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-79282)

  - Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had     compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-79054, CVE-2026-79224)

  - Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker     who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a     crafted HTML page. (Chromium security severity: Critical) (CVE-2026-79121)

  - Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-79150)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
341362	Microsoft Edge (Chromium) < 152.0.4191.53 Multiple Vulnerabilities	Nessus	Windows	Local	medium
340023	Linux Distros Unpatched Vulnerability : CVE-2026-79089	Nessus	Misc.	Local	medium
339532	Google Chrome < 152.0.7977.64 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical
339531	Google Chrome < 152.0.7977.64 Multiple Vulnerabilities	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2026-79089

medium

Tenable Plugins

medium

medium

critical

critical