The version of Google Chrome installed on the remote macOS host is prior to 65.0.3325.146. It is, therefore, affected by multiple vulnerabilities as referenced in the 2018_03_stable-channel-update-for-desktop advisory.

  - An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an     instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch     between an old and a new object can provide an attacker with unintended memory access -- potentially     leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation     could lead to arbitrary code execution. (CVE-2017-11225)

  - An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an     instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new     object can provide an attacker with unintended memory access -- potentially leading to code corruption,     control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code     execution. (CVE-2017-11215)

  - Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2018-6060)

  - A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146     allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2018-6061)

  - Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform     an out of bounds memory write via a crafted HTML page. (CVE-2018-6062)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 65.0.3325.146 Multiple Vulnerabilities

critical Nessus Plugin ID 275864

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Mar 12, 2026, 10:32 AM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202603121032
Version 1.2 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin Feed: 202511242208
Version 1.1 Nov 21, 2025, 2:12 PM New Plugin Feed: 202511211412