The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.65. It is, therefore, affected by multiple vulnerabilities as referenced in the July 2, 2025 advisory.

  - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an     unauthorized attacker to execute code over a network. (CVE-2025-49713)

  - No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose     information over a network. (CVE-2025-49741)

  - Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform     arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-6554)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 138.0.3351.65 Multiple Vulnerabilities

high Nessus Plugin ID 241151

Version 1.6