The version of Google Chrome installed on the remote Windows host is prior to 144.0.7559.59. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_01_stable-channel-update-for-desktop_13 advisory.

  - Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) (CVE-2026-0908)

  - Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to     perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2026-0907)

  - Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to     potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-0899)

  - Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to     potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-0900)

  - Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote     attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-0901)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 144.0.7559.59 Multiple Vulnerabilities

critical Nessus Plugin ID 283570

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 2, 2026, 9:31 PM CVSSv3 score source (set to "CVE-2026-0907") Plugin metadata Plugin Feed: 202602022131
Version 1.2 Jan 16, 2026, 10:12 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202601162212
Version 1.1 Jan 14, 2026, 5:08 AM New Plugin Feed: 202601140508