The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.183. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020_11_stable-channel-update-for-desktop advisory.

  - Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker     who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2020-16011)

  - Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2020-16004)

  - Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker     to potentially exploit heap corruption via a crafted HTML page. (CVE-2020-16005)

  - Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2020-16006, CVE-2020-16009)

  - Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker     to potentially elevate privilege via a crafted filesystem. (CVE-2020-16007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 86.0.4240.183 Multiple Vulnerabilities

critical Nessus Plugin ID 142208

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.15 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin Feed: 202511242208
Version 1.14 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.13 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.12 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653