The version of Google Chrome installed on the remote Windows host is prior to 87.0.4280.141. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_01_stable-channel-update-for-desktop advisory.

  - User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-21115)

  - Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-21106)

  - Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker     who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-21107)

  - Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-21108)

  - Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-21109)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 87.0.4280.141 Multiple Vulnerabilities

critical Nessus Plugin ID 144781

Version 1.10

Version 1.9

Version 1.8

Version 1.10 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin Feed: 202511242208
Version 1.9 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.8 Jan 30, 2024, 3:19 PM CVSSv3 score source (set to "CVE-2021-21115") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202401301519