The version of Google Chrome installed on the remote macOS host is prior to 132.0.6834.83. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_01_stable-channel-update-for-desktop_14 advisory.

  - Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote     attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-0448)

  - Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2025-0437)

  - Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2025-0434)

  - Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a     remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)     (CVE-2025-0435)

  - Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0436)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 132.0.6834.83 Multiple Vulnerabilities

high Nessus Plugin ID 214137

Version 1.9