The version of Google Chrome installed on the remote Windows host is prior to 146.0.7680.164. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_03_stable-channel-update-for-desktop_23 advisory.

  - Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-4680)

  - Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to     perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-4673)

  - Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform     out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2026-4674)

  - Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-4675)

  - Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) (CVE-2026-4676)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 146.0.7680.164 Multiple Vulnerabilities

high Nessus Plugin ID 303387

Version 1.3

Version 1.2

Version 1.1

Version 1.3 May 1, 2026, 7:22 AM IAVM reference Plugin Feed: 202605010722
Version 1.2 Mar 27, 2026, 2:12 PM New Plugin Feed: 202603271412
Version 1.1 Mar 24, 2026, 4:52 AM New Plugin Feed: 202603240452