The version of Microsoft Edge installed on the remote Windows host is prior to 147.0.3912.60. It is, therefore, affected by multiple vulnerabilities as referenced in the April 10, 2026 advisory.

  - Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted     HTML page. (Chromium security severity: Medium) (CVE-2026-5874)

  - User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an     unauthorized attacker to perform spoofing over a network. (CVE-2026-33119)

  - Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2026-33118)

  - Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute     arbitrary code via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-5858)

  - Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-5859)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 147.0.3912.60 Multiple Vulnerabilities

high Nessus Plugin ID 305979

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Apr 20, 2026, 10:26 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202604202226
Version 1.5 Apr 17, 2026, 9:54 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2026-33119" to "CVE-2026-5883") CVSSv2 severity (based on CVE-2026-5883, severity increased from "Medium" to "High") CVSSv3 score source (changed from "CVE-2026-5902" to none) Plugin Feed: 202604170954
Version 1.4 Apr 14, 2026, 9:52 AM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2026-5874" to "CVE-2026-5902") Plugin Feed: 202604140952
Version 1.3 Apr 13, 2026, 9:27 PM Plugin metadata Plugin Feed: 202604132127
Version 1.2 Apr 13, 2026, 9:49 AM CVSS metrics ("CVSSv3 score" set to 9.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2026-5914" to "CVE-2026-5874") Plugin Feed: 202604130949
Version 1.1 Apr 11, 2026, 1:43 AM New Plugin Feed: 202604110143