The version of Google Chrome installed on the remote macOS host is prior to 140.0.7339.185. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_09_stable-channel-update-for-desktop_17 advisory.

  - Use after free in WebRTC. Reported by sherkito on 2025-08-23. (CVE-2025-10501)

  - Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-10501)

  - Type Confusion in V8. Reported by Google Threat Analysis Group on 2025-09-16. (CVE-2025-10585)

  - Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-10585)

  - Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-10500)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 140.0.7339.185 Multiple Vulnerabilities

critical Nessus Plugin ID 270652

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin Feed: 202511242208
Version 1.2 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin Feed: 202511211412
Version 1.1 Oct 16, 2025, 4:39 PM New Plugin Feed: 202510161639