The version of Google Chrome installed on the remote Windows host is prior to 135.0.7049.41. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_04_stable-channel-update-for-desktop advisory.

  - Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote     attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-3074)

  - Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote     attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2025-3069)

  - Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a     remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via     a crafted app. (Chromium security severity: Medium) (CVE-2025-3067)

  - Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a     remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity:
    Medium) (CVE-2025-3068)

  - Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a     remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity:
    Medium) (CVE-2025-3070)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 135.0.7049.41 Multiple Vulnerabilities

high Nessus Plugin ID 233671

Version 1.5