The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020_10_stable-channel-update-for-desktop advisory.

  - Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote     attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
    (CVE-2020-15992)

  - Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (CVE-2020-15967)

  - Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2020-15968)

  - Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2020-15969)

  - Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised     the renderer process to potentially perform a sandbox escape via a crafted HTML page. (CVE-2020-15970)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 86.0.4240.75 Multiple Vulnerabilities

high Nessus Plugin ID 141195

Version 1.13

Version 1.12

Version 1.11

Version 1.13 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511242208
Version 1.12 Feb 16, 2024, 7:23 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202402161923
Version 1.11 Jan 23, 2023, 1:53 PM IAVM reference Plugin Feed: 202301231353