The version of Google Chrome installed on the remote macOS host is prior to 59.0.3071.86. It is, therefore, affected by multiple vulnerabilities as referenced in the 2017_06_stable-channel-update-for-desktop advisory.

  - A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows     allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (CVE-2017-5080)

  - Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92     for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    (CVE-2017-5070)

  - Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows     and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read     via a crafted HTML page. (CVE-2017-5071)

  - Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a     remote attacker to perform domain spoofing with RTL characters via a crafted URL page. (CVE-2017-5072)

  - Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and     Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a     crafted HTML page. (CVE-2017-5073)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 59.0.3071.86 Multiple Vulnerabilities

high Nessus Plugin ID 100680

Version 1.10

Version 1.9

Version 1.8

Version 1.10 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin Feed: 202511242208
Version 1.9 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.8 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311